The ntpdc command allows direct interaction with the NTP daemon to query and control its internal state, perform monitoring, and retrieve operational statistics, which aligns with Bob's diagnostic objective.

A low-and-slow scanning technique spreads probe attempts over long intervals, reducing the chance of triggering IDS signatures that rely on detecting rapid or high-volume scans. CEH highlights timing-based evasion as an effective method for reconnaissance against networks with strict perimeter controls.

Verbose failure messages are detailed error messages that reveal too much information about authentication failures. In the described scenario, the web application specifies whether the username or password is incorrect. This behavior enables attackers to:
* Enumerate valid usernames by submitting random inputs and observing which error message is returned.
* Use the valid usernames to conduct targeted attacks such as brute-force attempts or social engineering.
According to CEH v13:
* Authentication mechanisms should provide generic error messages such as "Invalid username or password" to avoid exposing system behavior.
* Verbose error messages violate the principle of "fail securely."
Incorrect Options:
* A. Insecure transmission relates to credentials being sent over unencrypted channels (e.g., HTTP instead of HTTPS).
* C. User impersonation involves taking on the identity of another user, not enumeration.
* D. Password reset mechanisms are a different component of authentication, not mentioned in this context.
Reference - CEH v13 Official Courseware:
Module 14: Hacking Web Applications
Section: "Authentication Bypass Techniques"
Subsection: "Enumeration via Verbose Error Messages"

WHOIS is an Internet service that allows users to query domain name registries to retrieve information about registered domain names. It includes data such as:
Registrant's name and contact information
Domain creation and expiration dates
Registrar details and name servers
WHOIS is often used during the reconnaissance phase in penetration testing.
Reference - CEH v13 Official Study Guide:
Module 2: Footprinting and Reconnaissance
Quote:
"WHOIS databases provide public domain registration details including contact names, email addresses, and registrar information. This is useful for initial reconnaissance." Incorrect Options:
B). CAPTCHA is used to distinguish human users from bots.
C). IANA oversees global IP address allocation and DNS root zone management.
D). IETF is responsible for internet standards, not registrant databases.
=

A NULL scan is a type of TCP stealth scan where no flags are set in the TCP header. It is used to identify open or closed ports based on how the target responds to this unexpected packet.
Behavior:
* If the port is closed # Target responds with RST (Reset)
* If the port is open # No response (on compliant systems like Unix-based OSes) From CEH v13 Courseware:
* Module 03: Scanning Networks
* Topic: TCP Flag Scanning
* Subsection: NULL Scan
CEH v13 Study Guide states:
"In a NULL scan, if a target port is closed, the system responds with an RST packet as per RFC 793. If the port is open, it typically does not respond, which allows stealthy enumeration of services." Incorrect Options:
* A. SYN: Initiated by a SYN scan.
* B. ACK: Used in ACK scans.
* C/D: Not applicable for NULL scans.
* F. No response occurs for open ports, not closed ones.
Reference:CEH v13 Study Guide - Module 3: Scanning Networks # Section: TCP Scanning MethodsRFC
793 - TCP Standard