nerdexam
GIAC

GSNA · Question #168

Which of the following statements are true about the Enum tool?

The correct answer is A. It uses NULL and User sessions to retrieve user lists, machine lists, LSA policy information, etc. B. It is capable of performing brute force and dictionary attacks on individual accounts of Windows C. One of the countermeasures against the Enum tool is to disable TCP port 139/445. D. It is a console-based Win32 information enumeration utility. Enum is a console-based Win32 information enumeration utility. It uses null sessions to retrieve user lists, machine lists, share lists, name lists, group and member lists, passwords, and LSA policy information. It is also capable of performing brute force and dictionary…

Windows System Auditing

Question

Which of the following statements are true about the Enum tool?

Options

  • AIt uses NULL and User sessions to retrieve user lists, machine lists, LSA policy information, etc.
  • BIt is capable of performing brute force and dictionary attacks on individual accounts of Windows
  • COne of the countermeasures against the Enum tool is to disable TCP port 139/445.
  • DIt is a console-based Win32 information enumeration utility.

How the community answered

(21 responses)
  • A
    100% (21)

Explanation

Enum is a console-based Win32 information enumeration utility. It uses null sessions to retrieve user lists, machine lists, share lists, name lists, group and member lists, passwords, and LSA policy information. It is also capable of performing brute force and dictionary attacks on individual accounts. Since the Enum tool works on the NetBIOS NULL sessions, disabling the NetBIOS port can be a good countermeasure against the Enum tool.

Topics

#Enum tool#Windows enumeration#NULL sessions#brute force

Community Discussion

No community discussion yet for this question.

Full GSNA Practice