312-50V12 Question #229: Real Exam Question with Answer & Explanation

Question

As a certified ethical hacker, you are tasked with gaining information about an enterprise's internal network. You are permitted to test the network's security using enumeration techniques. You successfully obtain a list of usernames using email IDs and execute a DNS Zone Transfer. Which enumeration technique would be most effective for your next move given that you have identified open TCP ports 25 (SMTP) and 139 (NetBIOS Session Service)?

Options

• APerform a brute force attack on Microsoft Active Directory to extract valid usernames
• BExploit the NetBIOS Session Service on TCP port 139 to gain unauthorized access to the file
• CUse SNMP to extract usernames given the community strings
• DExploit the NFS protocol on TCP port 2049 to gain control over a remote system