Exam 312-50v12 topic 1 question 103 discussion

How accurate are these questions? Is anyone seeing them on test day?

D. Credential enumerator. This is a tool that Emotet uses to retrieve information related to network resources such as writable share drives, open SMB shares, and email addresses

A. NetPass.exe: A password recovery tool used to extract network passwords on Windows. B. Outlook scraper: A tool used to extract data from Microsoft Outlook. C. WebBrowserPassView: A password recovery tool used to extract stored website login credentials from web browsers. D. Credential enumerator: A security tool used for enumeration of network resources and either finds writable share drives

D. Credential enumerator

D. Credential enumerator https://cybersecurity.wa.gov/news/emotet-growing-threat Credential enumerator: a self-extracting RAR file containing two components, a bypass and a service component. The bypass component is used for enumeration of network resources and either finds writable share drives using Server Message Block (SMB) or tries to brute force user accounts, including the administrator account. Once an available system is found, Emotet then writes the service component on the system, which writes Emotet onto the disk. Access to SMB can result in entire domains (servers and clients) becoming infected.

Answer: D. Credential enumerator. Explanation: The tool that Mason employed to retrieve information related to network resources such as writable share drives is a Credential enumerator. A credential enumerator is a tool that is used to extract credentials from the targeted system, including usernames, passwords, and hashes.