312-50V10 · Question #731
You have successfully gained access to your client's internal network and successfully comprised a Linux server which is part of the internal IP network. You want to know which Microsoft Windows works
The correct answer is C. 445. Port 445 is the standard TCP port used by the SMB protocol for Windows file and printer sharing on modern networks.
Question
You have successfully gained access to your client's internal network and successfully comprised a Linux server which is part of the internal IP network. You want to know which Microsoft Windows workstations have file sharing enabled. Which port would you see listening on these Windows machines in the network?
Options
- A161
- B3389
- C445
- D1433
How the community answered
(39 responses)- A8% (3)
- B3% (1)
- C87% (34)
- D3% (1)
Why each option
Port 445 is the standard TCP port used by the SMB protocol for Windows file and printer sharing on modern networks.
Port 161 is used by SNMP (Simple Network Management Protocol) for network device monitoring and management, not file sharing.
Port 3389 is used by RDP (Remote Desktop Protocol) for graphical remote access to Windows machines, not for file sharing.
TCP port 445 is used by Microsoft's SMB (Server Message Block) protocol, which is the primary mechanism for Windows file sharing, printer sharing, and network resource access. On any Windows machine with file sharing enabled, port 445 will be in a listening state, making it the definitive indicator to look for during internal network enumeration.
Port 1433 is the default port for Microsoft SQL Server database connections, not for Windows file sharing.
Concept tested: SMB port 445 for Windows file sharing identification
Source: https://learn.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3
Topics
Community Discussion
No community discussion yet for this question.