Eccouncil ECSS Exam - Topic 1 Question 101 Discussion

Actual exam question for Eccouncil's ECSS exam

Question #: 101
Topic #: 1

[All ECSS Questions]

While investigating a web attack on a Windows-based server, Jessy executed the following command on her system:

C:\> net view <10.10.10.11>

What was Jessy's objective in running the above command?

AVerify the users using open sessions

BCheck file space usage to look for a sudden decrease in free space

CCheck whether sessions have been opened with other systems

DReview file shares to ensure their purpose

Show Suggested Answer

Suggested Answer: D

Thenet viewcommand in Windows is used to display a list of resources being shared on a computer.When used with a specific computer name or IP address, as innet view <10.10.10.11>, it displays the shared resources available on that particular computer1. Jessy's objective in running this command was likely to review the file shares on the server with the IP address 10.10.10.11 to ensure that they are correctly purposed and not maliciously altered or added as part of the web attack.

This command does not verify users using open sessions, check file space usage, or check whether sessions have been opened with other systems. Instead, it specifically lists the shared resources, which can include file shares and printer shares, providing insight into what is being shared from the server in question. This information is crucial during a forensic investigation of a web attack to understand if and how the server's shared resources were compromised or utilized by the attacker.

by Stephanie at Feb 07, 2025, 11:09 AM

Limited Time Offer

25%

Off

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Christene

3 months ago

Not convinced this command does what people think it does.

upvoted 0 times

...

Quentin

3 months ago

Definitely looking for active connections.

upvoted 0 times

...

Cristy

3 months ago

Wait, can you really see other systems like that?

upvoted 0 times

...

Rima

4 months ago

I think it’s about verifying file shares, not sessions.

upvoted 0 times

...

Vallie

4 months ago

Pretty sure she was checking for open sessions.

upvoted 0 times

...

Tien

4 months ago

I thought it was about verifying users in open sessions, but now I'm questioning if it could also relate to file shares.

upvoted 0 times

...

Gerri

4 months ago

I feel like the command is more about reviewing file shares, but I can't recall the exact details from my notes.

upvoted 0 times

...

Alease

4 months ago

I remember practicing a similar question where we had to identify the purpose of network commands. This one seems to relate to checking sessions with other systems.

upvoted 0 times

...

Merlyn

5 months ago

I think Jessy was trying to check for open sessions, but I'm not entirely sure if that's what the command does.

upvoted 0 times

...

Van

5 months ago

The question is asking about Jessy's objective in running the net view command, so I need to think about what kind of information that command would provide that could be useful in investigating a web attack. Probably something related to network connections or file shares.

upvoted 0 times

...

Carlton

5 months ago

Okay, the key here is to understand what the net view command is used for. I believe it's related to checking network shares and connections, so I'm guessing the answer has to do with that.

upvoted 0 times

...

Nan

5 months ago

Hmm, the net view command - I remember learning about that in class, but I'm a bit fuzzy on the exact details of what it does. I'll need to think this through carefully.

upvoted 0 times

...

Darrel

5 months ago

This looks like a pretty straightforward question about using the net view command to investigate a potential web attack. I'm confident I can handle this one.

upvoted 0 times

...

Denae

12 months ago

C'mon, who still uses the net view command these days? Jessy must be a real tech dinosaur. I bet she's still using a black and white monitor too! Anyway, option C is the way to go.

upvoted 0 times

Yolando

11 months ago

Jessy probably has her reasons for using that command, let's not judge her too harshly.

upvoted 0 times

...

Christiane

11 months ago

True, net view command may be outdated but it can still be useful in certain scenarios.

upvoted 0 times

...

Kristian

11 months ago

Yeah, checking whether sessions have been opened with other systems is crucial.

upvoted 0 times

...

Jenelle

11 months ago

I agree, option C is the most relevant in this situation.

upvoted 0 times

...

Keena

12 months ago

Hmm, the net view command sounds like it could be used to check file shares too. But I think Jessy was probably trying to verify if any other systems were connected, so C is the correct answer here.

upvoted 0 times

Kerrie

11 months ago

Yeah, I think C makes the most sense in this situation.

upvoted 0 times

...

Micaela

11 months ago

I agree, Jessy was most likely checking if any other systems were connected.

upvoted 0 times

...

Gennie

1 year ago

I believe Jessy was reviewing file shares to ensure their purpose, as it is important to understand the potential vulnerabilities in the system.

upvoted 0 times

...

Makeda

1 year ago

I agree with Benedict, checking whether sessions have been opened with other systems is crucial in investigating a web attack.

upvoted 0 times

...

Benedict

1 year ago

I think Jessy's objective was to verify the users using open sessions.

upvoted 0 times

...

Corazon

1 year ago

The net view command is used to list the shared resources on a remote system. Jessy's objective was likely to check if there were any open sessions with other systems, so I'd go with option C.

upvoted 0 times