What type of session does a null session represent?

• A. Encrypted session
• B. A session that does not require a username or password
• C. Authenticated session
• D. A session requiring two-factor authentication

Answer: (B)

A null session is an anonymous, unauthenticated connection to a remote host. It means you connect without supplying a username or password, so no credentials are used. This kind of session is historically used to enumerate basic information about a machine or to access limited administrative shares without credentials. It’s not defined by encryption, and it’s not an authenticated or two-factor–protected session. In modern setups, null sessions are often restricted to reduce information leakage.