312-50V10 · Question #499
Suppose you've gained access to your client's hybrid network. On which port should you listen to in order to know which Microsoft Windows workstations has its file sharing enabled?
The correct answer is C. 445. Port 445 is used by the SMB (Server Message Block) protocol, which handles Windows file and printer sharing. Listening on this port identifies hosts with file sharing active.
Question
Suppose you've gained access to your client's hybrid network. On which port should you listen to in order to know which Microsoft Windows workstations has its file sharing enabled?
Options
- A1433
- B161
- C445
- D3389
How the community answered
(50 responses)- A4% (2)
- B2% (1)
- C94% (47)
Why each option
Port 445 is used by the SMB (Server Message Block) protocol, which handles Windows file and printer sharing. Listening on this port identifies hosts with file sharing active.
Port 1433 is used by Microsoft SQL Server for database connections, not file sharing.
Port 161 is used by SNMP (Simple Network Management Protocol) for network device monitoring and management.
Port 445 is the dedicated TCP port for SMB (Server Message Block) direct hosting, which replaced the older NetBIOS-based file sharing on ports 137-139. When a Windows workstation has file sharing enabled, it listens on port 445 for incoming SMB connection requests. Scanning for open port 445 is a standard reconnaissance technique to enumerate Windows hosts with file sharing exposed.
Port 3389 is used by RDP (Remote Desktop Protocol) for remote graphical desktop sessions, not file sharing.
Concept tested: SMB protocol port identification for Windows file sharing
Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/service-overview-and-network-port-requirements
Topics
Community Discussion
No community discussion yet for this question.