312-50V9 Question #343: Real Exam Question with Answer & Explanation

The correct answer is B: NET USE. NET USE lists the current user's active network connections and mapped drives, making it a useful post-exploitation tool for enumerating accessible shares.

Question

Which among the following is a Windows command that a hacker can use to list all the shares to which the current user context has access?

Options

ANET FILE
BNET USE
CNET CONFIG
DNET VIEW

Explanation

NET USE lists the current user's active network connections and mapped drives, making it a useful post-exploitation tool for enumerating accessible shares.

Common mistakes.

A. NET FILE lists open files and file locks on a server, not the shared resources accessible to the current user.
C. NET CONFIG displays workstation or server configuration settings such as computer name and software version, not share mappings.
D. NET VIEW lists shared resources broadly on a specified computer or domain and does not filter results to only those accessible by the current user context.

Concept tested. Windows NET USE command for share enumeration

Reference. https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/gg651155(v=ws.11)

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice