nerdexam
EC-Council

312-50V11 · Question #731

You have successfully gained access to your client's internal network and successfully comprised a Linux server which is part of the internal IP network. You want to know which Microsoft Windows works

The correct answer is C. 445. The question tests knowledge of well-known port numbers, specifically which port Windows uses for SMB file sharing. Port 445 is the answer.

Enumeration

Question

You have successfully gained access to your client's internal network and successfully comprised a Linux server which is part of the internal IP network. You want to know which Microsoft Windows workstations have file sharing enabled. Which port would you see listening on these Windows machines in the network?

Options

  • A161
  • B3389
  • C445
  • D1433

How the community answered

(24 responses)
  • A
    8% (2)
  • C
    88% (21)
  • D
    4% (1)

Why each option

The question tests knowledge of well-known port numbers, specifically which port Windows uses for SMB file sharing. Port 445 is the answer.

A161

Port 161 is used by SNMP (Simple Network Management Protocol) for network device monitoring, not file sharing.

B3389

Port 3389 is used by RDP (Remote Desktop Protocol) for remote graphical desktop access, not file sharing.

C445Correct

Port 445 is used by Microsoft's SMB (Server Message Block) protocol, which provides Windows file and printer sharing functionality over TCP/IP networks. When a Windows machine has file sharing enabled, it listens on port 445 for incoming SMB connections from other hosts. This port replaced the older NetBIOS-based file sharing on port 139 and is the primary indicator of Windows file sharing exposure on a network.

D1433

Port 1433 is used by Microsoft SQL Server for database connections, not Windows file sharing.

Concept tested: Windows SMB file sharing port identification - port 445

Source: https://learn.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/troubleshooting-smb-windows

Topics

#SMB#port 445#file sharing#Windows enumeration

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice