Ethical Hacking Essentials Practice Test

Which type of trojan uses port number 445 to infect entry and exit points for application traffic?

1. Spyware

2. WannaCry

3. Botnet trojans

4. Rootkits

The correct answer is: WannaCry

The type of trojan that specifically uses port number 445 to infect entry and exit points for application traffic is WannaCry. This ransomware exploit became notorious in 2017 when it spread rapidly across networks by taking advantage of a vulnerability in Microsoft's Server Message Block (SMB) protocol, which operates over port 445. WannaCry encrypts data on compromised machines and demands ransom payments in cryptocurrency from victims, demonstrating its ability to cause significant disruption and financial impact through its propagation method. Other options do not fit the characteristics of using port 445 in such a targeted manner. Spyware typically focuses on gathering sensitive information from users without their consent, while botnet trojans primarily aim to create networks of compromised devices for coordinated attacks, and rootkits are designed to conceal their presence in the system, often to facilitate other types of malware. Each of these types has distinct behaviors and purposes that do not involve exploiting port 445 in the same way that WannaCry does.