Certified Ethical Hacker (CEH v13) — Question 175

What useful information is gathered during a successful Simple Mail Transfer Protocol (SMTP) enumeration?

Answer options

• A. A list of all mail proxy server addresses used by the targeted host.
• B. The internal command RCPT provides a list of ports open to message traffic.
• C. The two internal commands VRFY and EXPN provide a confirmation of valid users, email addresses, aliases, and mailing lists.
• D. Reveals the daily outgoing message limits before mailboxes are locked.

Correct answer: C

Explanation

The correct answer is C because the VRFY and EXPN commands in SMTP are specifically designed to verify valid email addresses and provide information about mailing lists. Options A, B, and D are incorrect as they do not accurately describe the information obtained during SMTP enumeration; A discusses mail proxy addresses, B refers to the RCPT command incorrectly, and D talks about message limits which are not typically revealed during enumeration.