Name:
Class:
Date:
Page 1
1. NBTscan is a utility that can be used for enumerating Windows OSs.
a.
True
b.
False
ANSWER:
True
2. All of the enumeration techniques that work with older Windows OSs still work with Windows Server 2012.
a.
True
b.
False
ANSWER:
False
3. NTFS was implemented to replace FAT16 and FAT32 because of the difficulty in incorporating security in
these file systems.
a.
True
b.
False
ANSWER:
True
4. A NetBIOS name does not need to be unique on a network.
a.
True
b.
False
ANSWER:
False
5. The latest version of Nessus Server and Client can run on Windows, Mac OS X, FreeBSD, and most Linux
distributions.
a.
True
b.
False
ANSWER:
True
6. What type of unauthenticated connection is considered to be a significant vulnerability of NetBIOS systems?
a.
null session
b.
exit session
c.
null system
d.
net session
ANSWER:
a
7. Windows Server 2012 introduced what protection feature to prevent pass-the-hash attacks?
a.
Containers
b.
Authentication Silos
c.
Attack Surface
d.
AppLocker
ANSWER:
b
8. Which Windows 10 feature uses virtualization to protect access tokens from theft by attackers?
Name:
Class:
Date:
Page 2
a.
VGuard
b.
Token Guard
c.
Device Check
d.
Credential Guard
ANSWER:
d
9. What feature implemented in Windows 8.1 prevents the execution of non-trusted boot content, preventing
rootkits?
a.
Windows Defender
b.
BIOS Check
c.
SecureBoot
d.
VGuard
ANSWER:
c
10. What feature implemented in Windows Server 2016 allows for application isolation to protect applications
from one another?
a.
Windows Boxes
b.
Windows VMs
c.
Windows NT
d.
Windows Containers
ANSWER:
d
11. The computer names you assign to Windows systems are called which of the following?
a.
AD Names
b.
NetBIOS
c.
NetDDE
d.
IIS
ANSWER:
b
12. A well documented Window’s OS vulnerability was null sessions. What Windows operating system was the
first to disable null sessions by default?
a.
Windows Server 2012
b.
Windows Server 2008
c.
Windows Server 2003
d.
Windows 8.1
ANSWER:
c
13. What version of Windows Server has completely eliminated the option for telnet server?
a.
Windows Server 2012
b.
Windows Server 2003
c.
Windows Server 2016
Name:
Class:
Date:
Page 3
d.
Windows Server 2008
ANSWER:
c
14. What type of Windows Server is the most likely server to be targeted by a computer hacker?
a.
File Server
b.
DNS Server
c.
DHCP Server
d.
Domain Controller
ANSWER:
d
15. Which of the following commands is a powerful enumeration tool included with Windows?
a.
NessusWX
b.
Nbtstat
c.
NetDDE
d.
Netmon Agent
ANSWER:
b
16. Which of the following commands gives you a quick way to see if there are any shared resources on a
computer or server?
a.
Nbtstat
b.
Net view
c.
NetDDE
d.
Netmon Agent
ANSWER:
b
17. Which of the following is an excellent GUI tool for managing Windows OSs and is capable of displaying
graphical representations of several areas?
a.
IIS
b.
Zion
c.
NetDDE
d.
Hyena
ANSWER:
d
18. The open-source descendant of Nessus is called which of the following?
a.
NW
b.
WNessus
c.
OpenVAS
d.
WinNessus
ANSWER:
c
19. What enumeration tool is extremely useful when working with Windows NT, 2000, and Windows XP
systems?
Name:
Class:
Date:
Page 4
a.
DumpWare
b.
NetWare
c.
DumpSec
d.
NetSec
ANSWER:
c
20. What boot loader will allow your computer or laptop to start in both Windows and Linux?
a.
BASH
b.
BIOS
c.
X500
d.
GRUB
ANSWER:
d
21. Which on of the following is an older network management service that is useful for network administrators
that want to view system statistics, version numbers, and other detailed host information remotely?
a.
SNMP
b.
TFTP
c.
FTP
d.
SSL
ANSWER:
a
22. Which of the following is a useful enumeration tool that enables you to find out who is logged into a *nix
system with one simple command?
a.
Net utility
b.
Finger utility
c.
Nix utility
d.
Point utility
ANSWER:
b
23. SNMPWalk is a tool useful in enumerating hosts running SNMP with what type of configuration?
a.
open
b.
administrator
c.
advanced
d.
default
ANSWER:
d
24. If you do not have access to Nessus, what NMap procedure can be used to help you to gain information
about remote *nix hosts?
a.
script analysis
b.
script scanning
c.
snmp pinging
Name:
Class:
Date:
Page 5
d.
range ping
ANSWER:
b
25. To determine what resources or shares are on a network, security testers must use port scanning and what
other procedure first to determine what OS is being used?
a.
footprinting
b.
back scanning
c.
mapping
d.
port analysis
ANSWER:
a
26. What process allows a security professional to extract valuable information, such as information about users
and recent login times from a network?
a.
mapping
b.
port analysis
c.
enumeration
d.
back scanning
ANSWER:
c
27. What does the “NBT” part of “NBTscan” stand for?
a.
NetBIOS Transfer
b.
NetBIOS over TCP/IP
c.
NetBIOS Test
d.
NetBIOS over Transport
ANSWER:
b
28. What security feature was extended to the OS to alert the user when an application is launched on a
Windows 8.1 computer?
a.
Data Execution Prevention
b.
Windows Defender
c.
SmartScreen
d.
LDAP
ANSWER:
c
29. Which of the following is a Windows programming interface that allows computers to communicate across
a local area network (LAN)?
a.
NetBIOS
b.
BIOS
c.
NetApp
d.
NetAPI
ANSWER:
a
Name:
Class:
Date:
30. What upper-level service is required to utilize file and printer sharing in Windows?
a.
Server Message Block
b.
Server Message App
c.
Print Server App
d.
File Message Block
ANSWER:
a
31. What is the purpose of the Network Basic Input/Output System (NetBIOS) found in Window’s system?
ANSWER:
NetBIOS is a Windows programming interface that allows computers to communicate across a local area
network (LAN). Most Windows OSs use NetBIOS to share files and printers.
32. What is the primary purpose of enumeration, and give three examples of information that can be acquired
through enumeration?
ANSWER:
Enumeration is the process of extracting the following information from a network:
– Resources or shares on the network
– Network topology and architecture
– Usernames or groups assigned on the network
– Information about users and recent logon times
33. Why is enumeration a more intrusive process than port scanning or footprinting?
ANSWER:
Enumeration is more intrusive because you’re not just identifying a resource; you’re attempting to access it. It
goes beyond passive scanning of a network to find open ports. Sometimes this process entails guessing
passwords after determining a user name.
34. What is a “null session” and how does it relate to Window’s systems?
ANSWER:
Historically, one of the biggest vulnerabilities of NetBIOS systems is a null session, which is an
unauthenticated connection to a Windows computer that uses no logon and password values. Many
enumeration tools establish a null session to gather information such as logon accounts, group membership,
and file shares from an attacked computer. This vulnerability has been around for more than a decade and is
still present in Windows XP. Null sessions have been disabled by default in Windows Server 2003, although
administrators can enable them if they’re needed for some reason. In Windows Vista and Server 2008, null
sessions aren’t available and can’t be enabled, even by administrators.
35. Why do hackers pay attention to NetBIOS computer name suffixes?
ANSWER:
The NetBIOS name suffixes correspond to the services, or resource types, running on a computer. Several
NetBIOS suffixes are critical because they identify the computer or server being enumerated as a standalone
computer or a domain controller. Hackers often exert more effort attacking computers identified as domain
controllers because they can offer more information, including logon names for user accounts and network
resources.
36. What is the Net view command and how can you use it?
ANSWER:
The Net view command is a built-in Windows tool that gives you a quick way to see whether there are any
shared resources on a computer or server. Using the net view command, an attacker can view remote shares to
see the syntax for this command, type net view ? at the command prompt.
ANSWER:
DumpSec is a popular enumeration tool for Windows systems. The information you can gather with this tool
Name:
Class:
Date:
is astonishing. For example, after connecting to a Windows server, you can download-or, as it’s called in
DumpSec, “dump“-the following information:
– Permissions for shares
– Permissions for printers
– Permissions for the Registry
– Users in column or table format
– Policies (such as local, domain, or group policies)
– Rights
– Services
38. What is Hyena and what can it be used for?
ANSWER:
Hyena is an excellent GUI product for managing and securing Microsoft OSs. The interface is easy to use and
gives security professionals a wealth of information. With just a click,you can look at the shares and user
logon names for Windows servers and domain controllers. If any domains or workgroups are on the network,
this tool displays them, too. Hyena can also display a graphical representation of the following areas:
– Microsoft Terminal Services
– Microsoft Windows Network
– Web Client Network
– Find User/Group
39. Why is understanding the protocol “Simple Network Management Protocol” important for security
professionals?
ANSWER:
The SNMP service can run on both Windows and *nix, but for this section, we will focus on *nix. SNMP is
useful for administrators who want to see system statistics, version numbers, and other detailed host
information remotely. For this reason, it is also useful for hackers. By default, the SNMP service uses “public”
as a credential for read-only access and “private” for read-write access.
40. List at least eight variations of UNIX.
ANSWER:
Here are some variations of UNIX: Solaris, OpenSolaris, HP–UX, Mac OS X, AIX, BSD UNIX, FreeBSD,
OpenBSD, NetBSD, Linux, Ubuntu, Red Hat Enterprise Linux, Fedora Linux, Debian Linux, SUSE Linux,
OpenSUSE, Mandriva Linux, and Slackware.
Match each item with a statement below.
a.
Windows 95
b.
NetBIOS
c.
Windows Server 2012
d.
null session
e.
SNMP
f.
enumeration
g.
Windows Vista
h.
Windows 7
i.
Windows 10
j.
Windows Server 2016
Name:
Class:
Date:
Page 8
42. Windows programming interface that allows computers to communicate across a local area network
ANSWER:
b
43. Introduced Authentication Silos to prevent pass-the-hash attacks
ANSWER:
c
44. Unauthenticated connection to a Windows computer that uses no logon and password values.
ANSWER:
d
45. An older network management service which enables remote administration and run on both Windows and
*nix systems
ANSWER:
e
46. Process of extracting critical information from a network
ANSWER:
f
47. First Windows version to introduce User Account Control and BitLocker
ANSWER:
g
48. Builds on the security advances made in Vista with the introduction of AppLocker
ANSWER:
h
49. Designed for use on tablets and traditional PCs and only allows trusted applications by default through
Device Guard
ANSWER:
i
50. Introduces Windows Containers to allow for application isolation to protect applications from one another
ANSWER:
j