GCIH › SMB Security
This domain covers Server Message Block as an attack surface and evidence source on Windows networks. GCIH questions test SMBv1 risk, port 445 exposure, SMB relay and signing, NTLM authentication coercion, and interpreting SMB2 CREATE/WRITE activity in incident response. Expect scenario-based items asking you to identify risks, attacker techniques, and the correct hardening or containment action.
GCIH SMB Security — All 32 Questions
Every question in this domain with answers and detailed explanations.
Securing Credentials and Data in Cloud
Endpoint Attack and Pivoting
Malware and AI-Assisted Investigations
Understanding Passwords
Detecting Exploitation and Covert Communication Tools
Detecting Evasive and Post-Exploitation Techniques
Integrating LLMs with Offensive Operations
Network and Log Investigations
Exploiting Insecure Web App References
Web App API Attacks
Web App Injection Attacks
Incident Response and Cyber Investigation
Attacking Passwords
Scanning and Mapping