Câu 203: 312-50V13: Certified Ethical Hacker v13

As a certified ethical hacker, you are tasked with gaining information about an enterprise's internal network. You are permitted to test the network's security using enumeration techniques. You successfully obtain a list of usernames using email IDs and execute a DNS Zone Transfer. Which enumeration technique would be most effective for your next move given that you have identified open TCP ports 25 (SMTP) and 139 (NetBIOS Session Service)?

1. A. Perform a brute force attack on Microsoft Active Directory to extract valid usernames
2. B. Exploit the NetBIOS Session Service on TCP port 139 to gain unauthorized access to the file system — đáp án hiện tại
3. C. Use SNMP to extract usernames given the community strings
4. D. Exploit the NFS protocol on TCP port 2049 to gain control over a remote system