312-50V10 · Question #642
What ports should be blocked on the firewall to prevent NetBIOS traffic from not coming through the firewall if your network is comprised of Windows NT, 2000, and XP?(Choose all that apply.
The correct answer is B. 135 C. 139 E. 445. NetBIOS and SMB traffic in Windows NT/2000/XP environments uses specific ports that must be blocked at the firewall to prevent unauthorized network access and exploitation.
Question
What ports should be blocked on the firewall to prevent NetBIOS traffic from not coming through the firewall if your network is comprised of Windows NT, 2000, and XP?(Choose all that apply.
Options
- A110
- B135
- C139
- D161
- E445
- F1024
How the community answered
(36 responses)- A3% (1)
- B94% (34)
- D3% (1)
Why each option
NetBIOS and SMB traffic in Windows NT/2000/XP environments uses specific ports that must be blocked at the firewall to prevent unauthorized network access and exploitation.
Port 110 is assigned to POP3, an email retrieval protocol, and has no association with NetBIOS or Windows SMB traffic.
Port 135 is used by Microsoft RPC and DCOM services, which underpin NetBIOS-related remote procedure calls. Blocking it prevents attackers from exploiting RPC endpoints that are exposed through NetBIOS-enabled Windows networking.
Port 139 is the NetBIOS Session Service port used by Windows NT and 2000 for file and printer sharing over NetBIOS. It must be blocked to prevent NetBIOS session establishment from traversing the firewall.
Port 161 is used by SNMP for network device management polling and is unrelated to NetBIOS session or naming services.
Port 445 is the SMB-over-TCP port used by Windows 2000 and XP, allowing direct file sharing without requiring NetBIOS. Blocking it is critical because attackers can exploit SMB directly for lateral movement, credential theft, and ransomware propagation.
Port 1024 marks the beginning of the registered ports range and is not a defined NetBIOS or SMB service port.
Concept tested: NetBIOS and SMB firewall port blocking
Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/netbios-over-tcpip
Topics
Community Discussion
No community discussion yet for this question.