GCIH SMB Security Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  To provide a secure method for remote desktop management

  Why it's wrong here

  SMB is not designed for remote desktop management; that function is handled by the Remote Desktop Protocol (RDP). Confusing these protocols can lead to improper firewall configurations, as RDP requires port 3389, whereas SMB utilizes port 445 for its communication, which serves a completely different purpose in network architecture.

• ✓

  To enable file, printer, and resource sharing across a network

  Why this is correct

  SMB serves as the backbone for file and resource sharing in Windows. It enables users and applications to request and receive files and print jobs from remote servers, acting as a critical component of network operations that requires careful security management to prevent data leakage and lateral movement attacks.

• ✗

  To manage directory services and user authentication

  Why it's wrong here

  Directory services and user authentication are primarily handled by LDAP and Kerberos in an Active Directory environment. While SMB interacts with authentication protocols to verify access, it is not responsible for the directory service itself, which is a common misconception regarding the role of file sharing protocols.

• ✗

  To provide encrypted terminal access to server consoles

  Why it's wrong here

  Terminal access is generally provided by SSH or RDP. SMB provides access to data and resources on a file system level, not interactive terminal access. Attempting to use SMB for console management would be ineffective and insecure, as the protocol is designed for file system I/O, not remote command execution.