Ethical › Module 4 › Lesson 5
Quiz — Enumeration
10 APPLY questions on enum vs scan and authorized banners.
Opening
Enumeration — Module Quiz
Ten APPLY items on the two verbs this module refused to collapse: scanning finds doors (TCP handshake, OPEN vs closed_or_filtered, Topic 7 / Module 3 habit with HOST locked to 127.0.0.1); enumeration asks the open service who it is (HTTP Server header after curl -I or HEAD, optional literacy about SSH greetings and SMB shares on a box you administer). Permission is required for both. Cyberlium’s authorized surface is a listener YOU started — python -m http.server 8000 --bind 127.0.0.1, notes in $HOME/cyberlium-lab, chmod 600. Campus Active Directory user lists, neighbor SMB, café /24 banner hunts, hydra, enum4linux against a school, and exploit downloads because a header named a product are all failing answers even when they look “more CEH.” Defender follow-up is a ticket, not a Metasploit screenshot: disable unused services, bind leftover teaching servers to loopback or stop them, genericize banners on real servers you own (hiding Server is not a full patch), least privilege on the account behind the listener, keep SMB off untrusted networks. A CVE match from a version token is Module 5 — and even there, a scanner row is not automatic remote code execution. Wrong answers still teach. Empty ethics lines fail. Next after this quiz is CVE, Advisories, and What Vulnerable Means: named bugs, public pages, no PoCs, no Nessus-against-the-internet.
Knowledge Check
APPLY: Module 3 left 127.0.0.1:8000 OPEN on a python http.server you started. A classmate says OPEN on the campus file server is the same lab and you should enumerate domain users tonight. What is enumeration in this module, and what do you do?
Multiple choice
Knowledge Check
APPLY: True or False: Scanning finds doors and enumeration asks who the service is, so if loopback:8000 is closed you should curl -I across the café /24 until a Server header appears.
True or False
Knowledge Check
APPLY: curl -I http://127.0.0.1:8000 shows Server: SimpleHTTP. What did you practice, and what is not required?
Multiple choice
Knowledge Check
APPLY: Why does this course call banners noisy, and where must that observation live?
Multiple choice
Knowledge Check
APPLY: Select defender actions that match “lockdown after enum” on systems you own or report under RoE. (Select 2)
Select all that apply
Knowledge Check
APPLY: SSH greetings and SMB share lists can leak identity on a machine you administer. What is the ethical pairing for this module?
Multiple choice
Knowledge Check
APPLY: True or False: Hiding or genericizing the Server header fully patches the software, so updates can wait and an exploit PoC is the right verification.
True or False
Knowledge Check
APPLY: You finished curl -I on YOUR http.server. Which cleanup and note pairing is required?
Multiple choice
Knowledge Check
APPLY: A blog titled with a cert acronym publishes “enumeration commands” aimed at 10.0.0.0/8 including ldapsearch at a DC. What does Cyberlium Module 4 tell you?
Multiple choice
Knowledge Check
APPLY: You carry Module 4 into Module 5. Which pairing is true, and what opens after this quiz?
Multiple choice
Knowledge Check
APPLY: curl of http://192.168.0.1/ shows a home router login (TP-Link / Netgear / Huawei / "Router Admin"). Is that DEMO in scope as a hacking target?
Multiple choice
Answer all 11 knowledge checks to continue. (0/11 answered)