During a red team engagement at a logistics company in Dallas, Texas, ethical hacker Priya Nair was assessing exposed services within the internal network. She discovered that a service was accessible from external segments and allowed unauthenticated systems to establish sessions and interact with shared resources.
Further analysis revealed that the service relied on legacy communication channels commonly associated with remote file and printer access, making it susceptible to unauthorized enumeration and data exposure. Priya recommended implementing a control that would prevent external systems from directly interacting with this service at the network level.
Which enumeration countermeasure would be most effective in mitigating this exposure?

• A. Implement firewall rules to block NFS port 2049
• B. Change the default community string names
• C. Disable ports TCP 139 and 445
• D. Use SSL or STARTTLS to encrypt the traffic

A Nessus scan reports a CVSS 9.0 SSH vulnerability allowing remote code execution. What should be immediately prioritized?

• A. Dismiss it as a false positive if unverified
• B. Reroute SSH traffic to another server
• C. Apply the vendor patch and reboot during maintenance
• D. Isolate the server, audit it, and apply patches

A regional healthcare provider in Portland, Oregon, recently migrated its patient scheduling portal to a new cloud platform. Within days, multiple patients reported that when searching online for the clinic ' s appointment system, they were directed to a website that looked identical to the official portal. The fraudulent page appeared prominently in search engine results and prompted users to log in using their patient credentials. The URL closely resembled the legitimate domain name, and no internal DNS servers had been altered within the organization ' s infrastructure. Security analysts later determined that the attacker had created a convincing replica of the portal and manipulated search visibility so that unsuspecting users would voluntarily navigate to the malicious site. Which type of social engineering technique best explains this attack?

• A. Spear Phishing
• B. Search Engine Phishing
• C. Pharming
• D. Whaling

A cybersecurity team at a regional healthcare provider is conducting an internal red team exercise to assess their exposure to service enumeration attacks. Amanda, a senior penetration tester, is assigned to probe the internal network for services that may reveal usernames, group information, or system details without requiring prior authentication. She decides to target common services running on specific ports that are often misconfigured or loosely monitored. During her reconnaissance, Amanda identifies several open ports across various hosts and must now prioritize which ones to probe first for maximum information gain related to enumeration. Which of the following services should Amanda target as a priority to enumerate usernames and group information without authentication?

• A. TCP 25 and UDP 133
• B. TCP 139 and UDP 137, 138
• C. TCP 23 and UDP 137, 138
• D. TCP 21 and UDP 137, 138