nerdexam
EC-Council

312-50V10 · Question #631

Sandra has been actively scanning the client network on which she is doing a vulnerability assessment test. While conducting a port scan she notices open ports in the range of 135 to 139. What protoco

The correct answer is D. SMB. Ports 135-139 are well-known Windows networking ports associated with the SMB (Server Message Block) protocol used for file and printer sharing.

Scanning Networks

Question

Sandra has been actively scanning the client network on which she is doing a vulnerability assessment test. While conducting a port scan she notices open ports in the range of 135 to 139. What protocol is most likely to be listening on those ports?

Options

  • AFinger
  • BFTP
  • CSamba
  • DSMB

How the community answered

(43 responses)
  • A
    2% (1)
  • B
    5% (2)
  • C
    2% (1)
  • D
    91% (39)

Why each option

Ports 135-139 are well-known Windows networking ports associated with the SMB (Server Message Block) protocol used for file and printer sharing.

AFinger

Finger uses port 79 and is used to retrieve user information on Unix systems, not associated with ports 135-139.

BFTP

FTP uses ports 20 (data) and 21 (control), which are entirely outside the 135-139 range.

CSamba

Samba is the open-source Linux/Unix implementation of the SMB protocol; Samba is the software, not the protocol name, and SMB is the correct answer for the protocol listening on these ports.

DSMBCorrect

SMB (Server Message Block) operates over NetBIOS using ports 135 (RPC endpoint mapper), 137 (NetBIOS name service), 138 (NetBIOS datagram), and 139 (NetBIOS session), making it the protocol most likely listening across that range. SMB is the primary Windows protocol for file sharing, printer access, and inter-process communication.

Concept tested: SMB protocol port identification (135-139)

Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/service-overview-and-network-port-requirements

Topics

#ports 135-139#SMB#NetBIOS#protocol identification

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice