200-201 Question #524: Real Exam Question with Answer & Explanation

The correct answer is A: SMB. The .pcap display shows SMB traffic (including Session Setup, Tree Connect, Trans2 requests, and SMB errors). These messages indicate that an SMB service was being accessed and its weaknesses exploited to establish a session, confirming that the exploited protocol was SMB.

Submitted by naveen.iyer· Mar 6, 2026Network Intrusion Analysis

Question

Refer to the exhibit. Based on the .pcap file, which protocol's vulnerability has been exploited to establish a session?

Options

ASMB
BTCP
CNegotiate
DIP

Explanation

The .pcap display shows SMB traffic (including Session Setup, Tree Connect, Trans2 requests, and SMB errors). These messages indicate that an SMB service was being accessed and its weaknesses exploited to establish a session, confirming that the exploited protocol was SMB.

Topics

#packet analysis#SMB#network vulnerabilities#exploit

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice Browse All 200-201 Questions