312-50V10 · Question #881
During the enumeration phase. Lawrence performs banner grabbing to obtain information such as OS details and versions of services running. The service that he enumerated runs directly on TCP port 445.
The correct answer is A. Server Message Block (SMB). SMB (Server Message Block) is the service that operates directly on TCP port 445, making it the correct answer for this banner grabbing scenario.
Question
During the enumeration phase. Lawrence performs banner grabbing to obtain information such as OS details and versions of services running. The service that he enumerated runs directly on TCP port 445. Which of the following services is enumerated by Lawrence in this scenario?
Options
- AServer Message Block (SMB)
- BNetwork File System (NFS)
- CRemote procedure call (RPC)
- DTelnet
How the community answered
(28 responses)- A93% (26)
- B4% (1)
- D4% (1)
Why each option
SMB (Server Message Block) is the service that operates directly on TCP port 445, making it the correct answer for this banner grabbing scenario.
SMB operates natively on TCP port 445, introduced with Windows 2000 to run directly over TCP/IP without requiring NetBIOS. Banner grabbing against port 445 reveals SMB service details including OS version and SMB dialect, making it a primary target during network enumeration.
NFS (Network File System) uses TCP/UDP port 2049, not port 445.
RPC (Remote Procedure Call) uses TCP port 135 as its endpoint mapper, not port 445.
Telnet operates on TCP port 23, not port 445.
Concept tested: SMB protocol port identification and enumeration
Source: https://learn.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3
Topics
Community Discussion
No community discussion yet for this question.