312-50V11 · Question #499
Suppose you've gained access to your client's hybrid network. On which port should you listen to in order to know which Microsoft Windows workstations has its file sharing enabled?
The correct answer is C. 445. Port 445 is the default TCP port for SMB (Server Message Block), the protocol Windows uses for file and printer sharing, making it the key port to monitor for file sharing activity.
Question
Suppose you've gained access to your client's hybrid network. On which port should you listen to in order to know which Microsoft Windows workstations has its file sharing enabled?
Options
- A1433
- B161
- C445
- D3389
How the community answered
(15 responses)- A7% (1)
- B7% (1)
- C87% (13)
Why each option
Port 445 is the default TCP port for SMB (Server Message Block), the protocol Windows uses for file and printer sharing, making it the key port to monitor for file sharing activity.
Port 1433 is the default port for Microsoft SQL Server database engine connections, unrelated to file sharing.
Port 161 is used by SNMP (Simple Network Management Protocol) for network device monitoring and management.
Port 445 is used by Windows SMB directly over TCP/IP, which is the protocol that enables file and printer sharing between Windows systems. Listening on port 445 allows a tester to identify which hosts have SMB file sharing enabled. This port replaced the older NetBIOS ports (137-139) as the primary channel for Windows resource sharing.
Port 3389 is used by RDP (Remote Desktop Protocol) for remote graphical desktop sessions, not file sharing.
Concept tested: SMB port 445 for Windows file sharing
Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/direct-hosting-of-smb-over-tcpip
Topics
Community Discussion
No community discussion yet for this question.