How to harden Windows workstations and servers from attack

The video tutorial discusses the importance of workstation hardening, focusing on the Server Message Block (SMB) protocol. It highlights the vulnerabilities of using SMBV1, such as susceptibility to man-in-the-middle attacks and lack of encryption. The tutorial advises disabling SMBV1 and upgrading to SMBV2 or V3, providing methods to do so. It also addresses challenges with older devices that depend on SMBV1 and suggests seeking community and vendor support. Finally, it emphasizes the need for network security measures, including blocking outbound SMB packets and ensuring proper firewall settings.

What is the primary function of the Server Message Block (SMB) protocol?

• To monitor network performance

• To share files, printers, and serial ports

• To manage network firewalls

• To encrypt network traffic

Which of the following is a major risk of using SMB version 1?

• Increased network speed

• Enhanced data encryption

• Vulnerability to man-in-the-middle attacks

• Improved file sharing capabilities

What is one method to disable SMB version 1 in a network?

• Using a firewall rule

• Applying a group policy or registry key

• Installing antivirus software

• Upgrading to a newer operating system

Why might some older devices still require SMB version 1?

• They offer better security features

• They are incompatible with newer protocols

• They have outdated firmware

• They are faster with SMB version 1

What is a recommended action to prevent outbound SMB packets?

• Allow all SMB traffic

• Disable all firewall settings

• Block outbound port 445 and related UDP/TCP ports

• Enable all network ports