Courseiva
Enumeration and System HackingeasyMultiple ChoiceObjective-mapped

CEH Enumeration and System Hacking Practice Question

Which of the following commands is used to enumerate SNMP information from a network device using a specific community string?

⚠ Common exam trap

It's easy for candidates to confuse SNMP enumeration tools with other network enumeration tools (like LDAP, SMB, or NetBIOS), leading them to pick a command that targets a different protocol entirely.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

snmpwalk -c public -v 2c 192.168.1.1

`snmpwalk` is the standard command-line tool for enumerating SNMP (Simple Network Management Protocol) information from a network device. By specifying the community string (`-c public`) and SNMP version (`-v 2c`), it retrieves the entire Management Information Base (MIB) tree from the target IP address, allowing an attacker to discover system details, running processes, and network interfaces.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ldapsearch -x -h 192.168.1.1 -b dc=domain,dc=com

    Why it's wrong here

    ldapsearch is a command-line utility specifically designed for querying LDAP (Lightweight Directory Access Protocol) directories. The `-x` flag enables simple authentication, `-h` specifies the target host's IP address, and `-b` defines the base distinguished name (DN) for the search operation. This tool is used to retrieve information from directory services like Active Directory or OpenLDAP, which store user accounts, groups, and network resources, making it entirely unsuitable for enumerating SNMP services.

  • enum4linux -a 192.168.1.1

    Why it's wrong here

    enum4linux is a specialized reconnaissance tool primarily used for enumerating information from Windows and Samba hosts by leveraging the SMB/CIFS protocol. It can extract valuable details such as user lists, group memberships, share names, and operating system versions from target systems. While highly effective for gathering intelligence on Windows-based networks, enum4linux operates exclusively on SMB and lacks any functionality to interact with or enumerate SNMP services.

  • snmpwalk -c public -v 2c 192.168.1.1

    Why this is correct

    snmpwalk is the correct and standard command-line utility for enumerating SNMP (Simple Network Management Protocol) information from a target device. The `-c public` option specifies the community string, which acts as a password for accessing SNMP data, with "public" being a common default. The `-v 2c` flag designates SNMP version 2c, a widely supported version, while `192.168.1.1` is the target IP address from which to retrieve Management Information Base (MIB) data. This command systematically queries the entire MIB tree, revealing device configurations, network statistics, and system details.

  • nbtstat -a 192.168.1.1

    Why it's wrong here

    nbtstat is a command-line utility used to display NetBIOS over TCP/IP (NetBT) protocol statistics, local NetBIOS name tables, and the NetBIOS name cache. The `-a` option specifically lists the NetBIOS name table of a remote computer, providing details like registered NetBIOS names and their associated IP addresses. This tool is exclusively focused on NetBIOS name resolution and statistics, offering no capabilities for interacting with or enumerating SNMP services on a network device.

About these practice questions

One of 870 original CEH practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.