M04 · Enumeration · Q&A

Check understanding with original scenarios and a reason for every option. These answers do not establish exam or practical readiness.

Scenario questions

ceh-m04-enum-q1 · Original practice

TCP port 445 is open on a host. Does this directly prove that SMB shares have been enumerated?

TCP port 445 is open on a host. Does this directly prove that SMB shares have been enumerated? A. Yes; open 445 means the share list was obtainedB. No; the service and actual response still need confirmationC. Yes; the current user has administrator rightsD. No; SMB never supports enumeration

Confidence

JavaScript is off: read the answer and explanation

The port state contains no named-resource list.
Enumeration needs concrete service-level response evidence.
An open port establishes neither identity nor privilege.
SMB resources can be enumerated subject to permission and configuration.

ceh-m04-enum-q2 · Original practice

What is the most accurate conclusion from access denied?

What is the most accurate conclusion from access denied? A. The server has no sharesB. The server must be offC. This request was denied; resource existence remains unknownD. All resources were successfully listed

Confidence

JavaScript is off: read the answer and explanation

Denial does not mean absence.
An application response does not support that conclusion.
This preserves the response’s condition and limit.
Denial supplies no complete list.

ceh-m04-enum-q3 · Original practice

The share list includes reports; no file operation was tested. What can be claimed?

The share list includes reports; no file operation was tested. What can be claimed? A. The response lists reports; read/write permissions are unknownB. reports is necessarily writableC. Every user can read itD. Server administration was obtained

Confidence

JavaScript is off: read the answer and explanation

A name and action permissions are different evidence.
Listing a name does not prove write access.
One identity’s view cannot be generalized to every user.
A resource list does not establish administration.

Continue to safe practice →

CS Kairos Research and learning, built over time.

Teaching & main site Content principles GitHub