Certified Ethical Hacker (CEH v11) — Question 367

What useful information is gathered during a successful Simple Mail Transfer Protocol (SMTP) enumeration?

Answer options

• A. A list of all mail proxy server addresses used by the targeted host.
• B. The internal command RCPT provides a list of ports open to message traffic.
• C. The two internal commands VRFY and EXPN provide a confirmation of valid users, email addresses, aliases, and mailing lists.
• D. Reveals the daily outgoing message limits before mailboxes are locked.

Correct answer: C

Explanation

The correct answer is C because the VRFY and EXPN commands are specifically designed to verify valid email addresses and provide additional information about mailing lists. Options A and B do not accurately represent useful information derived from SMTP enumeration, and option D is less relevant as it pertains to message limits rather than user validation.