HW6: Due 9/25

HW6
You should be submitted in Backboard CTEC350\ HW6:
See: Due Date in Blackboard
Chapter 6
Part1: Grade (5 points)

1. Describe the enumeration step of security testing
2. Describe the Network Basic Input Output System (NetBIOS), a Windows programming
   interface that allows computers to communicate over a LAN. It is commonly used to
   share files and printers.
3. Explain that one of the biggest vulnerabilities of NetBIOS systems is a null session,
   which is an unauthenticated connection to a Windows computer that uses no logon and
   password values. This vulnerability has been around for more than a decade and is still
   present in Windows XP.
4. Describe the Nbtstat command. Nbtstat command is a powerful enumeration tool
   included with Windows. This command displays the NetBIOS table associated with a
   network host.
5. With respect to security, what operating system do you prefer? Why?
6. Many network administrators are aware of security problems, but fail to properly configure
   their networks and systems. Ask your students to discuss security usability issues. What
   can be done to facilitate secure operating system configurations?
   Part2: Grade (10points)
   Technical Notes for Activities
   Activity 6-1: This activity requires a classroom Linux CD, a computer running Windows,
   and an Internet connection.
   Activity 6-2: This activity requires a computer running Windows and a network connection.
   Activity 6-3: This activity requires a computer running Windows, a classroom Linux CD,
   and an Internet connection.
   Activity 6-4: This activity requires a classroom Linux CD and an Internet connection.
   Part3: Grade (5 points)
   Define the Following Key Terms
    enum4linux
    enumeration
    Network Basic Input/Output System (NetBIOS)
    null session
    Simple Network Management Protocol (SNMP)

• Any assignment received after the time of the class is considered late (NO EXCUSES) and is
  graded with 0