Exam GPEN All QuestionsBrowse all questions from this exam
Question 37

Analyze the command output below. What information can the tester infer directly from the information shown?

    Correct Answer: B

    The displayed command output shows the tester is enumerating information from a Windows machine using the 'enum' utility, which typically operates by connecting to IPC$ via Null Sessions. The information obtained includes password policies and user lists, indicating that Null Sessions are enabled. There is no indication that the target host is running Linux with Samba services, nor any evidence regarding the Administrator resetting account lockouts.

Discussion
devnullOption: B

The correct answer is B. Enumerating the username and password policies of a remote machine requires a connection to IPC$, which is called Null Sessions. On the other hand, no evidence that the remote machine is Linux can be read from this image.