Eccouncil ICS-SCADA Exam - Topic 6 Question 32 Discussion

Actual exam question for Eccouncil's ICS-SCADA exam

Question #: 32
Topic #: 6

[All ICS-SCADA Questions]

The vulnerability that led to the WannaCry ransomware infections affected which protocol?

ASamba

BNone of these

CRPC

DSMB

Show Suggested Answer

Suggested Answer: D

WannaCry is a ransomware attack that spread rapidly across multiple computer networks in May 2017.

The vulnerability exploited by the WannaCry ransomware was in the Microsoft Windows implementation of the Server Message Block (SMB) protocol.

Specifically, the exploit, known as EternalBlue, targeted a flaw in the SMBv1 protocol. This flaw allowed the ransomware to spread within corporate networks without any user interaction, making it one of the fastest-spreading and most harmful cyberattacks at the time.

Reference

Microsoft Security Bulletin MS17-010 - Critical: https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2017/ms17-010

National Vulnerability Database, CVE-2017-0144: https://nvd.nist.gov/vuln/detail/CVE-2017-0144

by Lorenza at Jul 10, 2025, 01:00 AM

Limited Time Offer

25%

Off

Get Premium ICS-SCADA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Brett

3 months ago

Really? I thought it was something else entirely!

upvoted 0 times

...

Larue

3 months ago

Nope, it was SMB for sure.

upvoted 0 times

...

Audra

4 months ago

Agreed, SMB was the protocol exploited.

upvoted 0 times

...

Malinda

4 months ago

Wait, are we sure it wasn't RPC?

upvoted 0 times

...

Dorcas

4 months ago

It was definitely SMB that got hit.

upvoted 0 times

...

Lorrie

4 months ago

I’m pretty certain it’s SMB. I recall that being a key point in our discussions about WannaCry.

upvoted 0 times

...

Markus

5 months ago

I’m a bit confused. I thought it was RPC, but now that I think about it, SMB sounds more familiar.

upvoted 0 times

...

Kristel

5 months ago

I feel like this question is similar to one we practiced in class about ransomware attacks. Wasn't it SMB that was mentioned?

upvoted 0 times

...

Beatriz

5 months ago

I think the vulnerability was related to SMB, but I'm not completely sure. I remember reading about it in a case study.

upvoted 0 times

...

Linwood

5 months ago

Okay, let me review the information about WannaCry again. I think the vulnerability was in the RPC protocol, so I'll select option C.

upvoted 0 times

...

Angelyn

5 months ago

The WannaCry ransomware was a big deal, so I bet the answer is something obvious like Samba. I'll go with option A.

upvoted 0 times

...

Una

5 months ago

Hmm, I'm not totally sure about this one. I'll have to think it through carefully before answering.

upvoted 0 times

...

Pearlene

6 months ago

I'm pretty sure the vulnerability was in the SMB protocol, so I'll go with option D.

upvoted 0 times

...

Charolette

7 months ago

I believe it was Samba that was affected.

upvoted 0 times

...

Tamala

7 months ago

I'm not sure, but I think it was RPC.

upvoted 0 times

...

Laura

7 months ago

Hmm, let me think... I'm gonna guess RPC. Just to be different, you know? Shake things up a bit.

upvoted 0 times

...

Renay

7 months ago

I'm going with SMB on this one. Seems like the obvious choice given what we know about WannaCry.

upvoted 0 times

Estrella

6 months ago

Yes, you're right. The vulnerability that led to the WannaCry ransomware infections affected the SMB protocol.

upvoted 0 times

...

Fabiola

6 months ago

I'm going with SMB on this one. Seems like the obvious choice given what we know about WannaCry.

upvoted 0 times

...

Janna

8 months ago

I agree with Francis, SMB was the protocol affected.

upvoted 0 times

...

Lawana

8 months ago

SMB, for sure. That's the one that let the ransomware spread like wildfire across networks.

upvoted 0 times

Norah

6 months ago

C) RPC

upvoted 0 times

...

Daren

6 months ago

B) None of these

upvoted 0 times

...

Ines

7 months ago

A) Samba

upvoted 0 times

...

Francis

8 months ago

I think the vulnerability affected SMB.

upvoted 0 times

...

Jenise

8 months ago

Definitely SMB. I remember reading about that vulnerability in the news when the whole WannaCry thing was happening.

upvoted 0 times

Susana

7 months ago

SMB was definitely the protocol that was exploited in the WannaCry attacks.

upvoted 0 times

...

Tonette

7 months ago

Yeah, I remember hearing about the vulnerability in SMB causing all those ransomware infections.

upvoted 0 times

...

Willow

8 months ago

I think you're right, it was definitely SMB that was affected.

upvoted 0 times

...

Gregoria

8 months ago

I'm pretty sure it was SMB. That's the protocol that the WannaCry exploit targeted, right?

upvoted 0 times

Jerry

8 months ago

I think you're right, it was SMB that was affected by the WannaCry ransomware.

upvoted 0 times

...

Deonna

8 months ago

Yes, you're correct. The vulnerability targeted the SMB protocol.

upvoted 0 times

...