Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
A security professional is concerned about open ports 137-139 on a system. Why?
RPC is disabled but allowing null sessions
NetBIOS is enabled and allowing null sessions.
RPC is enabled and allowing null sessions
NetBIOS is disabled but allowing null sessions.
SMB is enabled and allowing null sessions
SMB is disabled but system is allowing null sessions
Ports 135-139 range is associated with the SMB and NetBios this indicates that null sessions (no username or password) are allowed.
Why not RPC? 135 is most commonly associated with Microsoft RPC.
Believe the range is 137-139 for SMB/NetBIOS EDIT: No to both, this question is totally bollixed. NetBIOS is ports 137-9, SMB is 445, RPC is 530. https://en.wikipedia.org/wiki/ListofTCPandUDPportnumbers. Also, the concern with the ports being open would be when the service is DISabled because if the service is enabled then the ports should be open for the systems to use the service. Again this question is totally hosed and should be removed.
Train with Skillset and pass your certification exam. Faster. Guaranteed.
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.