Courseiva
mediumMultiple ChoiceObjective-mapped

SSCP Practice Question: Refer to the exhibit

Exhibit

Refer to the exhibit.

Windows Firewall Rule (PowerShell output):
```
Name        : Block SMB Outbound
DisplayName : Block SMB Outbound
Description : Blocks outbound SMB traffic to prevent lateral movement
Enabled     : True
Direction   : Outbound
Action      : Block
Profile     : Domain
LocalAddress: Any
RemoteAddress: Any
Protocol    : TCP
LocalPort   : Any
RemotePort  : 445
```

Refer to the exhibit. An administrator implements this firewall rule. What is the intended effect?

⚠ Common exam trap

Watch out — candidates often confuse outbound and inbound rules, assuming a rule blocking port 445 affects all traffic on that port, when in fact it only blocks traffic in one direction.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

It prevents this computer from initiating SMB connections to other computers.

The firewall rule shown is an outbound rule that blocks TCP port 445, which is used by SMB (Server Message Block). By blocking outbound traffic on this port, the computer is prevented from initiating SMB connections to other computers, while still allowing inbound SMB connections. This is a common security measure to prevent a compromised machine from spreading malware or accessing file shares on other systems.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • It blocks all inbound and outbound traffic on port 445.

    Why it's wrong here

    Only outbound traffic is blocked.

  • It prevents inbound SMB connections from other domain computers.

    Why it's wrong here

    The rule is outbound, so it blocks connections initiated by this machine.

  • It prevents this computer from initiating SMB connections to other computers.

    Why this is correct

    Outbound block on port 445 stops this machine from connecting to others via SMB.

  • It applies to all network profiles (Domain, Private, Public).

    Why it's wrong here

    The rule applies only to the Domain profile.

Visual reference

Client Server SYN (seq=100) SYN-ACK (seq=200, ack=101) ACK (ack=201) Connection established — data transfer begins

About these practice questions

One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.