Which vulnerability in the TCP port does the "WannaCry" ransomware exploit to launch network attacks on Windows systems?

Question

Options

• A139
• B443
• C3389
• D445

• A
  9% (4)
• B
  16% (7)
• C
  4% (2)
• D
  71% (32)

Explanation

WannaCry exploits port 445, which hosts the SMB (Server Message Block) protocol on Windows systems - specifically using the NSA-developed EternalBlue exploit that targets a critical vulnerability in SMBv1, allowing unauthenticated remote code execution and rapid network propagation.

Why the distractors are wrong:

• A (139): Also an SMB port (NetBIOS Session Service), but WannaCry specifically targeted the modern SMB implementation on 445, not the legacy 139 path.
• B (443): This is HTTPS - standard encrypted web traffic, unrelated to SMB or WannaCry's attack vector.
• C (3389): This is RDP (Remote Desktop Protocol) - a common attack target in general, but not the exploit WannaCry used.

Memory tip: Think "445 = Wanna-SMBcry" - the 4+4+5 = 13, unlucky like a ransomware attack, and SMB lives on 445. Alternatively, 445 is one digit above 444 (the "angel number") - WannaCry turned it into anything but angelic in May 2017.

No community discussion yet for this question.