312-50V9 · Question #367
Suppose you've gained access to your client's hybrid network. On which port should you listen to in order to know which Microsoft Windows workstations has its file sharing enabled?
The correct answer is C. 445. Port 445 is the standard TCP port for SMB (Server Message Block), which is the protocol Windows uses for file and printer sharing over a network.
Question
Suppose you've gained access to your client's hybrid network. On which port should you listen to in order to know which Microsoft Windows workstations has its file sharing enabled?
Options
- A1433
- B161
- C445
- D3389
How the community answered
(24 responses)- A4% (1)
- B4% (1)
- C92% (22)
Why each option
Port 445 is the standard TCP port for SMB (Server Message Block), which is the protocol Windows uses for file and printer sharing over a network.
Port 1433 is used by Microsoft SQL Server for database connections, not file sharing.
Port 161 is used by SNMP (Simple Network Management Protocol) for network device monitoring and management.
SMB (Server Message Block) operates on TCP port 445 and is the core protocol enabling Windows file sharing. When a Windows workstation has file sharing enabled, it listens on port 445. During a penetration test, scanning for open port 445 across the hybrid network identifies hosts with file sharing active.
Port 3389 is used by RDP (Remote Desktop Protocol) for remote graphical desktop sessions, not file sharing.
Concept tested: SMB protocol port identification for file sharing
Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/direct-hosting-of-smb-over-tcpip
Topics
Community Discussion
No community discussion yet for this question.