Hands-on Ethical Hacking and Network Defense, 3e, ISBN 9781285454610
Ch. 6 Solutions-1
Chapter 6 Solutions
Review Questions
1. Which of the following testing processes is the most intrusive?
2. Security testers conduct enumeration for which of the following reasons? (Choose all that
apply.)
3. Which of the following tools can be used to enumerate Windows systems? (Choose all
that apply.)
4. Enumeration of Windows systems can be more difficult if port ____ is filtered.
5. A null session is enabled by default in all the following Windows versions except:
6. The Net view command can be used to see whether there are any shared resources on a
server. True or False?
7. To identify the NetBIOS names of systems on the 193.145.85.0 network, which of the
following commands do you use?
8. Which of the following is a Windows command-line utility for seeing NetBIOS shares on
a network?
9. To view eDirectory information on a NetWare 5.1 server, which of the following tools
should you use?
10. The Nbtstat command is used to enumerate *nix systems. True or False?
11. A NetBIOS name can contain a maximum of ___ characters.
12. Which of the following commands connects to a computer containing shared files and
folders?
13. Which port numbers are most vulnerable to NetBIOS attacks?
Hands-on Ethical Hacking and Network Defense, 3e, ISBN 9781285454610
Ch. 6 Solutions-2
14. Which of the following is the vulnerability scanner from which OpenVAS was
developed?
15. Most NetBIOS enumeration tools connect to the target system by using which of the
following?
16. What is the best method of preventing NetBIOS attacks?
17. Which of the following is a commonly used UNIX enumeration tool?
18. Which of the following commands should you use to determine whether there are any
shared resources on a Windows computer with the IP address 193.145.85.202?
19. The Windows Net use command is a quick way to discover any shared resources on a
computer or server. True or False?
Activities
Activity 6-2
Step 5: Students should see a list of available resources or shared folders. If Windows Firewall is
enabled, access will be denied.
Activity 6-3
Step 4: Answers can vary, but students might suggest that there are tools for enumerating DNS on
Windows systems and for enumerating LDAP, used by Windows Active Directory. The p0f utility
shown in the OpenVAS menu is a good tool for determining the OS running on a host.
Activity 6-4
Steps 5: Students will list the version of SSH and Samab installed on their local Kali Linux
machines.
Case Projects
Case Project 6-1: Enumerating Systems on the Alexander Rocco Network
Students should mention that the Excel spreadsheet should be placed on a Windows server that’s
more secure or on a computer where the file could be encrypted or password protected. Also,
management should be notified immediately when this discovery is made because the passwords
Hands-on Ethical Hacking and Network Defense, 3e, ISBN 9781285454610
Ch. 6 Solutions-3
Case Project 6-2: Researching enum4Linux on the Internet