CEH Enumeration and System Hacking Practice Question
Which TWO of the following are common tools used for SMB enumeration? (Select 2)
⚠ Common exam trap
EC-Council often tests the distinction between tools that operate at different protocol layers—candidates confuse NetBIOS name resolution tools (nbtstat) with SMB enumeration tools, or mistake LDAP/SNMP tools for SMB-specific ones.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
enum4linux
enum4linux is a wrapper tool that leverages SMB/CIFS operations (via smbclient, rpcclient, and net) to enumerate user lists, share listings, OS information, and password policies from Windows and Samba targets. It directly queries the SMB protocol (port 445/139) and is a standard tool for SMB enumeration in penetration testing.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
ldapsearch
Why it's wrong here
ldapsearch is a command-line utility used to query information from LDAP (Lightweight Directory Access Protocol) servers. It allows attackers to enumerate users, groups, and other directory objects stored within an LDAP directory, which is distinct from the SMB protocol. While Active Directory often uses LDAP, ldapsearch directly interacts with the LDAP service, not the SMB service itself, making it unsuitable for direct SMB enumeration.
- ✗
snmpwalk
Why it's wrong here
snmpwalk is a tool specifically designed for querying information from devices that support SNMP (Simple Network Management Protocol). It traverses the Management Information Base (MIB) tree of an SNMP agent, retrieving system information, network statistics, and device configurations. This protocol operates independently of SMB and is used for network device management, not for enumerating Windows shares or user accounts via SMB.
- ✓
enum4linux
Why this is correct
enum4linux is a powerful wrapper script built upon Samba tools, specifically designed for enumerating information from Windows and Samba hosts. It automates the process of extracting user lists, group memberships, share names, password policies, and other critical data via the SMB/NetBIOS protocols. This comprehensive tool leverages various SMB enumeration techniques, making it highly effective for reconnaissance against Windows systems.
- ✗
nbtstat
Why it's wrong here
nbtstat is a command-line utility used to display NetBIOS over TCP/IP (NBT) protocol statistics, local NetBIOS name tables, and the NetBIOS name cache. While NetBIOS historically provided name resolution for SMB, nbtstat primarily focuses on NetBIOS names and their resolution, not directly enumerating SMB shares, users, or groups. Modern SMB primarily uses DNS for name resolution and operates directly over TCP port 445, bypassing much of the traditional NetBIOS functionality.
- ✓
smbclient
Why this is correct
smbclient is a command-line utility that functions as a client for the SMB/CIFS protocol, similar to how an FTP client works. It allows users to connect to SMB shares, list available shares on a target host, browse directories, and transfer files. This tool is fundamental for manually exploring and enumerating shared resources on Windows systems, providing direct interaction with the SMB service to discover accessible data.
Go deeper
Related to this question
About these practice questions
One of 870 original CEH practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.