Being a Certified Ethical Hacker (CEH), a company has brought you on board to evaluate the safety measures in place for their network system. The company uses a network time protocol server in the…

Question

Options

• Antptrace -m 5 192.168.1.1
• Btptrace 192.168.1.1
• Cntptrace -n localhost
• Dntptrace -n -m 5 192.168.1.1

• A
  10% (5)
• B
  4% (2)
• C
  2% (1)
• D
  84% (42)

Explanation

Explanation

Option D (ntptrace -n -m 5 192.168.1.1) is correct because it combines all the elements needed to fully trace the NTP hierarchy: -n prevents hostname lookups (displaying IP addresses directly, making the trace faster and avoiding DNS resolution issues), -m 5 sets a maximum of 5 hops to prevent infinite loops while still tracing multiple connected servers, and specifying the server IP ensures you're targeting the correct NTP server in the DMZ.

• Option A (ntptrace -m 5 192.168.1.1) is incomplete - it omits the -n flag, meaning the command will attempt DNS lookups that can slow the trace or fail, and it doesn't optimally serve the full enumeration objective.
• Option B (tptrace 192.168.1.1) is simply a typo/invalid command - "ntptrace" is misspelled, so it would not execute at all.
• Option C (ntptrace -n localhost) uses -n correctly but targets only the local machine and sets no hop limit, meaning it won't trace the full chain of external NTP servers connected to the network.

Memory Tip: Think of D as the "Definitive" command - it uses all available flags together (-n + -m) with a specific target IP, giving you the most complete picture of your NTP chain. When a question asks for the most complete objective, the answer with all relevant options combined is usually correct.

No community discussion yet for this question.