312-50V13 · Question #139
In the context of Windows Security, what is a 'null' user?
The correct answer is C. A pseudo account that has no username and password. In Windows security, a 'null' user refers to an unauthenticated connection made without a username or password, often associated with anonymous access for information enumeration.
Question
Options
- AA user that has no skills
- BAn account that has been suspended by the admin
- CA pseudo account that has no username and password
- DA pseudo account that was created for security administration purpose
How the community answered
(22 responses)- B5% (1)
- C95% (21)
Why each option
In Windows security, a 'null' user refers to an unauthenticated connection made without a username or password, often associated with anonymous access for information enumeration.
The term 'null user' has a specific technical meaning in Windows security and is unrelated to a user's skill level or capabilities.
An account that has been suspended is typically a disabled or locked-out user account with an associated username, which is distinct from an unauthenticated null session.
In the context of Windows security, a 'null' user or null session refers to an unauthenticated connection established to a Windows server without providing a valid username or password. Historically, these sessions could be exploited by attackers to enumerate network shares, user lists, and other system information.
A 'pseudo account' for security administration would still have an associated username and credentials, unlike a null session which involves no credentials.
Concept tested: Windows null sessions/user
Source: learn.microsoft.com/en-us/windows/win32/secauthz/null-session
Topics
Community Discussion
No community discussion yet for this question.