Eccouncil Exam ECSS Topic 1 Question 101 Discussion

Actual exam question for Eccouncil's ECSS exam

Question #: 101
Topic #: 1

[All ECSS Questions]

While investigating a web attack on a Windows-based server, Jessy executed the following command on her system:

C:\> net view <10.10.10.11>

What was Jessy's objective in running the above command?

AVerify the users using open sessions

BCheck file space usage to look for a sudden decrease in free space

CCheck whether sessions have been opened with other systems

DReview file shares to ensure their purpose

Show Suggested Answer

Suggested Answer: D

Thenet viewcommand in Windows is used to display a list of resources being shared on a computer.When used with a specific computer name or IP address, as innet view <10.10.10.11>, it displays the shared resources available on that particular computer1. Jessy's objective in running this command was likely to review the file shares on the server with the IP address 10.10.10.11 to ensure that they are correctly purposed and not maliciously altered or added as part of the web attack.

This command does not verify users using open sessions, check file space usage, or check whether sessions have been opened with other systems. Instead, it specifically lists the shared resources, which can include file shares and printer shares, providing insight into what is being shared from the server in question. This information is crucial during a forensic investigation of a web attack to understand if and how the server's shared resources were compromised or utilized by the attacker.

by Stephanie at Feb 07, 2025, 11:09 AM

Limited Time Offer

25%

Off

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Denae

1 months ago

C'mon, who still uses the net view command these days? Jessy must be a real tech dinosaur. I bet she's still using a black and white monitor too! Anyway, option C is the way to go.

upvoted 0 times

Yolando

3 days ago

Jessy probably has her reasons for using that command, let's not judge her too harshly.

upvoted 0 times

...

Christiane

6 days ago

True, net view command may be outdated but it can still be useful in certain scenarios.

upvoted 0 times

...

Kristian

11 days ago

Yeah, checking whether sessions have been opened with other systems is crucial.

upvoted 0 times

...

Jenelle

15 days ago

I agree, option C is the most relevant in this situation.

upvoted 0 times

...

Keena

1 months ago

Hmm, the net view command sounds like it could be used to check file shares too. But I think Jessy was probably trying to verify if any other systems were connected, so C is the correct answer here.

upvoted 0 times

Kerrie

16 days ago

Yeah, I think C makes the most sense in this situation.

upvoted 0 times

...

Micaela

18 days ago

I agree, Jessy was most likely checking if any other systems were connected.

upvoted 0 times

...

Gennie

2 months ago

I believe Jessy was reviewing file shares to ensure their purpose, as it is important to understand the potential vulnerabilities in the system.

upvoted 0 times

...

Makeda

2 months ago

I agree with Benedict, checking whether sessions have been opened with other systems is crucial in investigating a web attack.

upvoted 0 times

...

Benedict

2 months ago

I think Jessy's objective was to verify the users using open sessions.

upvoted 0 times

...

Corazon

2 months ago

The net view command is used to list the shared resources on a remote system. Jessy's objective was likely to check if there were any open sessions with other systems, so I'd go with option C.

upvoted 0 times