GCIH: GIAC Certified Incident HandlerDemo

By GIAC · Question Mode

QuestionQ770

SMB Security

Examine the image below. Which share would a user typically connect to when executing the following NET USE command?

C:\> net use \\10.0.10.123 -

Question Image

  • A C$
  • B tmp
  • C IPC$
  • D ADMIN$
Explanation

A NET USE connection that targets only an SMB server, without naming a disk share, typically uses the special IPC$ share for remote interprocess communication. IPC$ is the built-in Remote IPC share; it is not a drive or ordinary folder share.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!