nerdexam
GIAC

GCIH · Question #774

What task is a Windows administrator performing with the command below, executed from a file server with an IP address of 46.95.101.82? C:\> net session \\46.95.101.109 /del

The correct answer is D. Disconnect the SMB session from host 46.95.101.109. The net session command with the /del flag terminates an existing SMB session with the specified remote host. The command is executed from the local server (46.95.101.82) and targets the remote IP in the UNC path.

Reconnaissance, Scanning, and Enumeration

Question

What task is a Windows administrator performing with the command below, executed from a file server with an IP address of 46.95.101.82? C:> net session \46.95.101.109 /del

Options

  • ARemove the share being offered from 46.95.101.82
  • BDisconnect the SMB session from host 46.95.101.82
  • CDelete the SMB share being offered from 46.95.101.109
  • DDisconnect the SMB session from host 46.95.101.109

How the community answered

(23 responses)
  • A
    13% (3)
  • B
    9% (2)
  • C
    4% (1)
  • D
    74% (17)

Why each option

The `net session` command with the `/del` flag terminates an existing SMB session with the specified remote host. The command is executed from the local server (46.95.101.82) and targets the remote IP in the UNC path.

ARemove the share being offered from 46.95.101.82

Removing a share requires the `net share <sharename> /delete` command, not `net session`.

BDisconnect the SMB session from host 46.95.101.82

The disconnect targets 46.95.101.109 specified in the UNC path, not the local server 46.95.101.82 that issued the command.

CDelete the SMB share being offered from 46.95.101.109

`net session /del` disconnects a session, not a share, and the `/del` flag has no share-deletion functionality.

DDisconnect the SMB session from host 46.95.101.109Correct

The UNC path `\\46.95.101.109` in the command specifies the remote host whose session is being terminated. The `/del` flag instructs Windows to disconnect the active SMB session with that specific remote host, not the local server that is running the command.

Concept tested: Windows net session SMB session management

Source: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/net-session

Topics

#net session#SMB session#Windows networking#session management

Community Discussion

No community discussion yet for this question.

Full GCIH Practice