A tester has determined that null sessions are enabled on a domain controller. Which of the following attacks can be performed to leverage this vulnerability?
A) RID cycling to enumerate users and groups
B) Pass the hash to relay credentials
C) Password brute forcing to log into the host
D) Session hijacking to impersonate a system account

Question

Quizplus · Accepted Answer

The Answer of A tester has determined that null sessions are enabled on a domain controller. Which of the following attacks can be performed to leverage this vulnerability?
A) RID cycling to enumerate users and groups
B) Pass the hash to relay credentials
C) Password brute forcing to log into the host
D) Session hijacking to impersonate a system account

A Tester Has Determined That Null Sessions Are Enabled on a Domain