Question

Difficulty: MediumCommon Ports and Protocols

A storage administrator is deploying a network-attached storage array to host shared folders for Windows workstations on a isolated VLAN. To meet security standards, network traffic must avoid legacy NetBIOS encapsulation and operate strictly via direct file sharing over TCP/IP. Which port must be opened on the internal firewall to permit direct Server Message Block (SMB) communications?

  1. TCP port 445Answer
  2. B
    TCP port 139
  3. C
    UDP port 137
  4. D
    TCP port 21

Answer

TCP port 445 is the standard port for direct Server Message Block (SMB) file sharing over TCP/IP without NetBIOS.
Direct Server Message Block (SMB) file sharing operates natively over TCP/IP using TCP port 445. Opening TCP port 445 allows hosts to share files and printers directly across IP subnets without relying on legacy NetBIOS session layer protocol wrappers.

Step-by-Step Solution

1
Identify the target service protocol and requirement
The requirement specifies direct Server Message Block (SMB) traffic over TCP/IP without legacy NetBIOS transport.
Legacy SMB relied on NetBIOS framing over ports 137-139, whereas modern SMB runs directly over IP networks on a single dedicated port.
2
Map the direct SMB service to its standard transport port
Direct SMB over TCP/IP utilizes TCP port 445.
Starting with Windows 2000, Microsoft implemented SMB directly on top of the TCP transport layer via port 445.

Key Concept

Common Network Ports - Server Message Block (SMB)
Estimated Time:1m 0s
Rate this question