Refer to the exhibit. Based on the .pcap file, which protocol's vulnerability has been exploited to establish a session?

The correct answer is A. SMB. The .pcap display shows SMB traffic (including Session Setup, Tree Connect, Trans2 requests, and SMB errors). These messages indicate that an SMB service was being accessed and its weaknesses exploited to establish a session, confirming that the exploited protocol was SMB.

Submitted by naveen.iyer· Mar 6, 2026Network Intrusion Analysis

Question

Exhibit

Options

ASMB
BTCP
CNegotiate
DIP

How the community answered

(30 responses)

A
80% (24)
B
7% (2)
C
3% (1)
D
10% (3)

Explanation

The .pcap display shows SMB traffic (including Session Setup, Tree Connect, Trans2 requests, and SMB errors). These messages indicate that an SMB service was being accessed and its weaknesses exploited to establish a session, confirming that the exploited protocol was SMB.

Topics

#packet analysis#SMB#network vulnerabilities#exploit

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice