Exam 312-50v13 topic 1 question 143 discussion

Actual exam question from ECCouncil's 312-50v13

Question #: 143
Topic #: 1

A Certified Ethical Hacker (CEH) is given the task to perform an LDAP enumeration on a target system. The system is secured and accepts connections only on secure LDAP. The CEH uses Python for the enumeration process. After successfully installing LDAP and establishing a connection with the target, he attempts to fetch details like the domain name and naming context but is unable to receive the expected response. Considering the circumstances, which of the following is the most plausible reason for this situation?

A. The system failed to establish a connection due to an incorrect port number.
B. The enumeration process was blocked by the target system's intrusion detection system.
C. The secure LDAP connection was not properly initialized due to a lack of 'use_ssl = True' in the server object creation.
D. The Python version installed on the CEH's machine is incompatible with the Idap3 library.

Show Suggested Answer

Suggested Answer: C 🗳️

by Gibsomd at March 16, 2025, 12:02 a.m.

Comments

Submit Cancel

NikoTomas

1 month ago

Selected Answer: C

Answer: C Q: “After successfully installing LDAP and establishing a connection with the target, he attempts to fetch details like the domain...” C) - You can use SSL basic authentication with the use_ssl parameter of the Server object, you can also specify a port (636 is the default for secure ldap): s = Server('servername', port = 636, use_ssl = True) # define a secure LDAP server Ref.: https://ldap3.readthedocs.io/en/latest/ssltls.html

upvoted 1 times

NikoTomas

1 month ago

Incorrect answers: - A) – incorrect port number – connection would not be established at all. - B) – blocked by intrusion DETECTION system – not possible as it is not IPS (prevention) just IDS - D) – Python incompatibility with Ldap3 library is not probable as: “ldap3 is a pure Python LDAP 3 client library strictly conforming to RFC4510 and is released under the LGPL v3 open source license. RFC4510 is the current LDAP specification (June 2006) ... ldap3 can be used with any Python version starting from 2.6, including all Python 3 versions. It also works with PyPy and PyPy3.” Ref.: https://ldap3.readthedocs.io/en/latest/

upvoted 1 times

...

Gibsomd

1 month ago

Selected Answer: C

Since the system only accepts secure LDAP connections, the CEH must explicitly enable SSL when initializing the connection in Python. If use_ssl=True is not set, the connection will fail or not return the expected data.

upvoted 1 times

...

Exam 312-50v13 All Questions

View all questions & answers for the 312-50v13 exam

Exam 312-50v13 topic 1 question 143 discussion

Comments

NikoTomas

NikoTomas

Gibsomd

SY0-701