nerdexam
GIAC

GPEN · Question #154

Which of the following statements are true about the Enum tool? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is A. It is capable of performing brute force and dictionary attacks on individual accounts of B. One of the countermeasures against the Enum tool is to disable TCP port 139/445. C. It is a console-based Win32 information enumeration utility. D. It uses NULL and User sessions to retrieve user lists, machine lists, LSA policy information,. All four statements accurately describe the Enum tool, a Windows-based NetBIOS and SMB enumeration utility used in reconnaissance.

Vulnerability Discovery & Scanning

Question

Which of the following statements are true about the Enum tool? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AIt is capable of performing brute force and dictionary attacks on individual accounts of
  • BOne of the countermeasures against the Enum tool is to disable TCP port 139/445.
  • CIt is a console-based Win32 information enumeration utility.
  • DIt uses NULL and User sessions to retrieve user lists, machine lists, LSA policy information,

How the community answered

(36 responses)
  • A
    100% (36)

Why each option

All four statements accurately describe the Enum tool, a Windows-based NetBIOS and SMB enumeration utility used in reconnaissance.

AIt is capable of performing brute force and dictionary attacks on individual accounts ofCorrect

Enum supports brute force and dictionary attacks against individual Windows user accounts by leveraging NetBIOS session capabilities to systematically test credential combinations against remote hosts.

BOne of the countermeasures against the Enum tool is to disable TCP port 139/445.Correct

Enum relies on NetBIOS (TCP 139) and SMB (TCP 445) to establish the NULL or user sessions it needs for enumeration - disabling these ports at the network perimeter effectively blocks the tool from functioning.

CIt is a console-based Win32 information enumeration utility.Correct

Enum is implemented as a command-line Win32 executable that runs in the Windows Command Prompt without a graphical interface, making it a console-based utility.

DIt uses NULL and User sessions to retrieve user lists, machine lists, LSA policy information,Correct

Enum leverages NULL sessions and authenticated user sessions over SMB/NetBIOS to extract user lists, machine lists, share lists, and Local Security Authority (LSA) policy information from Windows targets.

Concept tested: Windows NetBIOS/SMB enumeration using the Enum tool

Source: https://learn.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3

Topics

#Enum tool#NetBIOS enumeration#NULL sessions#Windows enumeration

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GPEN Practice