Fichas
Windows Networking Protocols (Day 1)
Fichas del conjunto (45)
- 1What is being described below? -legacy file & print sharing protocol -operates at Session Layer 5 of the OSI -provides 3 services over the TCP/IP stackNetwork Basic Input/Output System (NetBIOS)
- 2What are the three services that Net BIOS provide?1) Name Service
2) Datagram Service
3) Session Service - 3What is the Name Service used for?1) name registration
2) Name resolution - 4What is described below? 1) Flat 2) 16 Bytes 3) 16th Byte = function/service application 4) uniqueNetBIOS Names
- 5What does WS1 <00> WS1 <20> indicate?Identifies a host machine name.
- 61) checks its cache 2) if cache not found -> request from Master Browser and /or WINS 3) if name is not known -> client will broadcast name it is looking for 4) if no response -> error (name not resolved)Name Resolution
- 71) client becomes active & advertises its name 2) upon boot up, client broadcasts itself 6-10 times 3) If name in use ->client will broadcast to let the client trying to register a name 4) if no other client says shit, then the name is registered to him.Name Advertisement
- 8Port 137 (UDP) = ?Name Service
- 9This command is used to view NetBIOS information...nbtstat
- 10What in regards to Net BIOS is used for browsing and messenger services?Datagram Service
- 11What port does Datagram Service use?Port 138 (UDP)
- 12The messenger function is identified in the name's 16th byte as<03>
- 13This command gives you a list of computers on the current domain/network...net view
- 14net view \\computer_name or IP does what?allows you to get a list of public shares on a remote computer
- 15Will net view \\computer_name or IP show hidden files when the list of resources on the computer is displayed?NO
- 16What is primarily used for file and print sharing connection as well as remote applications in Net BIOS?Session Service
- 17What is Session Service port?Port 139 (TCP)
- 18This service in NetBIOS provides connection-oriented , reliable , full-duplex service to a user process?Session Service
- 19What are the 4 main services that that NetBIOS session service relies upon?1) Computer Browsing
2) Server
3) TCP/IP NetBIOS Helper
4) Workstation - 20What is being described below? -client/server process between machines -port mapperRemote Procedure Protocol (RPC)
- 21What is the port used for Remote Procedure Protocol (RPC)?PORT 135 (TCP)
- 22DCE/RPC (Distributed Computing Environment/RPC) AKA MSRPC does what?-allows software to work across mutiple computers.
-proprietary to Microsoft - 23The following are vulnerabilities for what? -endpoint mapper promiscuity -DoS attack by attacking port 135 -service attacks -escalation of privelegesRPC
- 24This is a suite of commands used to provide info on resources on the network including shares, computers, users and groups. (can be used by intruders to enumerate a network and/or domain via command line.net.exe
on the command line = net - 25what does net help do on a command line?it displays a list of commands that can be used with net
- 26This command allows you to display workstation connections and mapped drivesnet use
- 27Service server has the capability to provide shared resources <20>. True or FalseTrue
- 28Workstation Service has the capability to access shared resources <00>. True or FalseTrue
- 29This command lists ALL shared resources on the local machine (including admin & hidden).net share
(Can only be used LOCALLY!) - 30what is happening in this syntax: C:\>net share utils=c:\toolsshares c:\tools, naming the share utils
- 31This command lists recorded sessions made to the machine via the local server service.net session
- 32netstat provides what info on a command line?provides info and stats about protocols in use and current TCP/IP network connections
- 33What will be displayed if the following synthax is entered on a command line? netstat -anlist of open port and connections made to my computer
- 34this command adds or deletes a messaging name (ALIAS)net name
- 35NET ACCOUNTS allows you to view what on a command line?displays current settings for password, logon limits, and domain info
- 36what is the transport for SMB if NetBIOS over TCP/IP is enabled? When NetBIOS over TCP/IP is disabled?TCP (139/445); TCP 445
- 37What shares make an SMB NULL Session connection possible?IPC$
- 38What kind of information can be gathered from a NULL SESSION connection?List of share
list of machines
list of users and groups
machine and user SID's - 39How can a Windows system be protected from a NULL SESSION connection?1) Disable NetBIOS
2) Modify Registry settings by removing srvsvc pipe
3) Block at Firewall
4) policy settings-restrict anonymous - 40What OS Version introduced the built-n Windows Firewall?XP SP2
- 41What is the primary file and print sharing protocol in Windows 2000/XP/beyond? What port does is use?Server Message Block (SMB)
TCP 445
Works at the Application Layer (7) - 42What is the file and print sharing between Windows and Unix (makes Unix look like a Windows machine)?SAMBA
- 43SMB is also known as what?CIFS
Common Internet File System - 44What are the 4 ways to protect against null sessions?1) Policy -Restrict Anonymous
2) Named Piped - svrsvc
3) Disabled NetBios
4) Block at Firewall - 45The following steps are describing what? 1) Negotiate 2) session setup 3) Authenticate (NTLM) 4) IPC Tree ConnectThe SMB steps
Información
- Descripción
- College Mod 7.2 Windows Fichas sobre Windows Networking Protocols (Day 1), creado por jeriel.juarbe el 07/08/2014.
- Creado por
- jeriel.juarbe · ago 2014
- Actualizado
- 8 mar 2018
- Visitas
- 21
- Valoración