Quiz — Enumeration
10 APPLY questions on enum vs scan and authorized banners.
Enumeration — Module Quiz
Ten APPLY items on the two verbs this module refused to collapse: scanning finds doors (TCP handshake, OPEN vs closed_or_filtered, Topic 7 / Module 3 habit with HOST locked to 127.0.0.1); enumeration asks the open service who it is (HTTP Server header after curl -I or HEAD, optional literacy about SSH greetings and SMB shares on a box you administer). Permission is required for both. Cyberlium’s authorized surface is a listener YOU started — python -m http.server 8000 --bind 127.0.0.1, notes in $HOME/cyberlium-lab, chmod 600. Campus Active Directory user lists, neighbor SMB, café /24 banner hunts, hydra, enum4linux against a school, and exploit downloads because a header named a product are all failing answers even when they look “more Ethical Hacking.” Defender follow-up is a ticket, not a Metasploit screenshot: disable unused services, bind leftover teaching servers to loopback or stop them, genericize banners on real servers you own (hiding Server is not a full patch), least privilege on the account behind the listener, keep SMB off untrusted networks. A CVE match from a version token is Module 5 — and even there, a scanner row is not automatic remote code execution. Wrong answers still teach. Empty ethics lines fail. Next after this quiz is CVE, Advisories, and What Vulnerable Means: named bugs, public pages, no PoCs, no Nessus-against-the-internet.
APPLY: Module 3 left 127.0.0.1:8000 OPEN on a python http.server you started. A classmate says OPEN on the campus file server is the same lab and you should enumerate domain users tonight. What is enumeration in this module, and what do you do?
APPLY: True or False: Scanning finds doors and enumeration asks who the service is, so if loopback:8000 is closed you should curl -I across the café /24 until a Server header appears.
APPLY: curl -I http://127.0.0.1:8000 shows Server: SimpleHTTP. What did you practice, and what is not required?
APPLY: Why does this course call banners noisy, and where must that observation live?
APPLY: Select defender actions that match “lockdown after enum” on systems you own or report under RoE. (Select 2)
APPLY: SSH greetings and SMB share lists can leak identity on a machine you administer. What is the ethical pairing for this module?
APPLY: True or False: Hiding or genericizing the Server header fully patches the software, so updates can wait and an exploit PoC is the right verification.
APPLY: You finished curl -I on YOUR http.server. Which cleanup and note pairing is required?
APPLY: A blog titled with a cert acronym publishes “enumeration commands” aimed at 10.0.0.0/8 including ldapsearch at a DC. What does Cyberlium Module 4 tell you?
APPLY: You carry Module 4 into Module 5. Which pairing is true, and what opens after this quiz?
APPLY: curl of http://192.168.0.1/ shows a home router login (TP-Link / Netgear / Huawei / "Router Admin"). Is that DEMO in scope as a hacking target?