GCIH · Question #687
What is the Linux administrator doing with the commands below? $ rpcclient -U fezzik florin rpcclient $> lsaenumsid
The correct answer is D. Enumerating the SIDs of all users defined locally on the target server. This question tests understanding of the rpcclient tool and the lsaenumsid subcommand used for enumerating Security Identifiers on a remote Windows host.
Question
What is the Linux administrator doing with the commands below? $ rpcclient -U fezzik florin rpcclient $> lsaenumsid
Options
- AResolving SIDs to usernames on the target server
- BDisplaying the rights associated with a SID on the target server
- CListing the privileges associated with a SID defined locally on the target server
- DEnumerating the SIDs of all users defined locally on the target server
How the community answered
(32 responses)- A3% (1)
- C3% (1)
- D94% (30)
Why each option
This question tests understanding of the rpcclient tool and the lsaenumsid subcommand used for enumerating Security Identifiers on a remote Windows host.
Resolving SIDs to human-readable usernames requires the 'lookupsids' subcommand in rpcclient, not lsaenumsid.
Displaying the rights or privileges associated with a specific SID requires commands such as 'lsaenumprivsaccount', not lsaenumsid.
Listing privileges for a particular SID requires 'lsaenumprivsaccount' targeted at a named SID, whereas lsaenumsid enumerates all SIDs indiscriminately without filtering by privilege.
The rpcclient command connects to the remote host 'florin' authenticated as user 'fezzik', and lsaenumsid invokes the LSA (Local Security Authority) RPC interface to enumerate all SIDs defined locally on that target. This is a standard reconnaissance technique that returns the full list of local user and group SIDs without resolving them to names.
Concept tested: rpcclient lsaenumsid remote SID enumeration
Source: https://www.samba.org/samba/docs/current/man-html/rpcclient.1.html
Topics
Community Discussion
No community discussion yet for this question.