312-50V13 · Question #256
312-50V13 Question #256: Real Exam Question with Answer & Explanation
The correct answer is A: Server Message Block (SMB). SMB and TCP Port 445 Option A is correct because Server Message Block (SMB) operates directly on TCP port 445, which is its dedicated port for direct hosting without requiring NetBIOS. SMB is commonly targeted during enumeration to extract OS details, shared resources, user accou
Question
During the enumeration phase. Lawrence performs banner grabbing to obtain information such as OS details and versions of services running. The service that he enumerated runs directly on TCP port 445. Which of the following services is enumerated by Lawrence in this scenario?
Options
- AServer Message Block (SMB)
- BNetwork File System (NFS)
- CRemote procedure call (RPC)
- DTelnet
Explanation
SMB and TCP Port 445
Option A is correct because Server Message Block (SMB) operates directly on TCP port 445, which is its dedicated port for direct hosting without requiring NetBIOS. SMB is commonly targeted during enumeration to extract OS details, shared resources, user accounts, and service version information via banner grabbing.
Why the distractors are wrong:
- Option B (NFS) uses TCP/UDP port 2049, not 445 - it's a Unix/Linux file-sharing protocol
- Option C (RPC) typically uses TCP port 135 (and dynamic high-range ports) for remote procedure calls
- Option D (Telnet) operates on TCP port 23 and is a remote access protocol, not a file-sharing service
Memory Tip: Think "445 = SMB = Samba/Windows file sharing" - port 445 is famously associated with SMB because it was exploited in major attacks like WannaCry and EternalBlue, making it one of the most recognized ports in cybersecurity exams. If you remember "445 = WannaCry = SMB," you'll never confuse this again!
Topics
Community Discussion
No community discussion yet for this question.