SMB Security Configuration Quiz

Quiz covering Secure Operating System

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

1. 1

   A security audit identifies that your Windows Server environment is still vulnerable to attacks targeting legacy protocols. Which version of SMB should be completely disabled to mitigate the risk of attacks like EternalBlue?

2. 2

   You need to ensure that SMB traffic between a file server and its clients is protected against eavesdropping and remains confidential. Which feature provides end-to-end data encryption without requiring a VPN?

3. 3

   A Windows Server is configured with the Group Policy setting 'Microsoft network server: Digitally sign communications (always)' set to 'Enabled'. What is the result if a legacy client that does not support SMB signing attempts to connect?

4. 4

   To prevent lateral movement and unauthorized access, which PowerShell command should be used on a Windows client to prevent it from connecting to shares that allow unauthenticated guest access?

5. 5

   SMB 3.1.1 introduced 'Pre-authentication integrity'. How does this feature specifically enhance security compared to previous SMB 3.x versions?