Câu 314: 312-50V13: Certified Ethical Hacker v13

A penetration tester is tasked with enumerating user accounts and network resources in a highly secured Windows environment where standard methods like SMB null sessions are blocked. The network employs strict firewall rules and intrusion detection systems to prevent unauthorized access. Which technique should the tester use to discreetly gather the required information without triggering security alarms?

1. A. Exploit a misconfigured LDAP service to perform anonymous searches — đáp án hiện tại
2. B. Conduct a zone transfer by querying the organization’s DNS servers
3. C. Utilize NetBIOS over TCP/IP to list shared resources anonymously
4. D. Leverage Active Directory Web Services for unauthorized queries