The SecOps Group Exam CNSP Topic 7 Question 2 Discussion

The SMB protocol, used for file and printer sharing, has evolved across versions, with significant security enhancements in later iterations.

Why C is correct: SMBv3, introduced with Windows 8 and Server 2012, added native support for encrypting SMB traffic. This feature uses AES-CCM encryption to protect data in transit, addressing vulnerabilities in earlier versions. CNSP notes SMBv3's encryption as a critical security improvement.

Why other options are incorrect:

A . SMBv1: Lacks encryption support and is considered insecure, often disabled due to vulnerabilities like WannaCry exploitation.

B . SMBv2: Introduces performance improvements but does not support encryption natively.

D . None of the above: Incorrect, as SMBv3 is the version that introduced encryption.