GIAC Certified Incident Handler (GCIH) — Question 137

Which of the following can the rpcclient application do?

Answer options

• A. Connect with Windows hosts using RDP
• B. Interact with Windows hosts using SMB
• C. Collect password hashes from a Windows server
• D. Enumerate web pages on an IIS server

Correct answer: B

Explanation

The rpcclient application is specifically designed to interact with Windows hosts using the SMB protocol, making option B the correct choice. Options A, C, and D reference functionalities that rpcclient does not provide; it cannot establish RDP connections, collect password hashes, or enumerate web pages on an IIS server.