312-50V12 · Question #297
312-50V12 Question #297: Real Exam Question with Answer & Explanation
The correct answer is C: The two internal commands VRFY and EXPN provide a confirmation of valid users, email. During successful SMTP enumeration, specific commands are used to identify valid user accounts and expand mailing lists, providing crucial information about a target's email infrastructure.
Question
What useful information is gathered during a successful Simple Mail Transfer Protocol (SMTP) enumeration?
Options
- AA list of all mail proxy server addresses used by the targeted host.
- BThe internal command RCPT provides a list of ports open to message traffic.
- CThe two internal commands VRFY and EXPN provide a confirmation of valid users, email
- DReveals the daily outgoing message limits before mailboxes are locked.
Explanation
During successful SMTP enumeration, specific commands are used to identify valid user accounts and expand mailing lists, providing crucial information about a target's email infrastructure.
Common mistakes.
- A. SMTP enumeration using commands like VRFY and EXPN focuses on discovering user and alias information, not mail proxy server addresses.
- B. The RCPT TO command is used to specify the recipient of a mail message during the transfer process and does not provide a list of open ports, which is a function of network port scanning tools.
- D. SMTP enumeration commands do not expose internal server policy configurations such as daily outgoing message limits, which are administrative settings not revealed through standard command interactions.
Concept tested. SMTP enumeration for user and alias discovery
Reference. https://datatracker.ietf.org/doc/html/rfc5321#section-4.1.1.3
Topics
Community Discussion
No community discussion yet for this question.