hardMultiple ChoiceObjective-mapped
220-1201 Practice Question: A security audit reveals that an internal file…
A security audit reveals that an internal file server is listening on multiple ports, including 137, 138, 139, and 445. The auditor recommends disabling older protocols. Which port is associated with SMB over TCP/IP directly (without NetBIOS)?
⚠ Common exam trap
A common trap in this question is confusing port 139 (NetBIOS-based SMB) with port 445 (direct SMB over TCP). Many candidates incorrectly associate port 443 with file sharing due to its use in HTTPS, but 443 is for secure web traffic, not SMB.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
445
Port 445 is the correct answer because it is used by Microsoft SMB (Server Message Block) for direct TCP/IP communication without the need for NetBIOS. This is known as SMB over TCP (or SMB Direct), which operates as a transport protocol directly over TCP, bypassing the NetBIOS layer. Ports 137, 138, and 139 are associated with NetBIOS over TCP/IP (NBT), which is the older protocol stack that the auditor recommends disabling.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
137
Why it's wrong here
Port 137 is specifically allocated for the NetBIOS Name Service (NBNS), which is responsible for resolving NetBIOS names to IP addresses on a network. While essential for older NetBIOS over TCP/IP (NBT) environments, it does not directly facilitate the Server Message Block (SMB) file sharing protocol itself. NBNS is a foundational component for NetBIOS communication, but the actual SMB data transfer occurs on different ports once a name is resolved.
- ✗
139
Why it's wrong here
Port 139 is utilized by the NetBIOS Session Service (NBSS), which establishes and maintains connection-oriented sessions for NetBIOS communication, including the original implementation of SMB over NetBIOS. Although SMB traffic historically traversed this port, it relies on the underlying NetBIOS layer for session management. This method is considered legacy compared to modern direct SMB over TCP/IP, which bypasses the NetBIOS encapsulation entirely.
- ✓
445
Why this is correct
Port 445 is the standard and preferred port for Server Message Block (SMB) communication directly over TCP/IP, without the overhead of NetBIOS. This direct hosting of SMB on TCP/IP allows for more efficient and faster file sharing, printing, and other network services in modern Windows environments. It encapsulates SMB messages directly within a TCP segment, making it the primary port for contemporary file server access.
- ✗
443
Why it's wrong here
Port 443 is exclusively reserved for HTTPS (Hypertext Transfer Protocol Secure), which is used for secure web browsing and communication. HTTPS encrypts HTTP traffic using SSL/TLS, ensuring data integrity and confidentiality between a web browser and a web server. This port has no functional relationship with the Server Message Block (SMB) protocol or any form of network file sharing.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 220-1201 question from scratch — 972 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1201 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1201 exam.