nerdexam
CompTIA

220-1102 · Question #859

A technician recently installed a new router for a small business. Afterwards, the technician completed an external port scan and generated the following information: Which of the following should the

The correct answer is C. Disable any unwanted services.. After an external port scan reveals open ports, security best practice dictates disabling any services that are not required, thereby reducing the router's attack surface. Each open port represents a potential entry point for attackers. UPnP (A) would actually increase risk by al

Security

Question

A technician recently installed a new router for a small business. Afterwards, the technician completed an external port scan and generated the following information:

Which of the following should the technician perform next in order to follow best practices?

Exhibit

220-1102 question #859 exhibit

Options

  • AMigrate to UPnP.
  • BImplement IP filtering.
  • CDisable any unwanted services.
  • DUtilize NAT.

How the community answered

(37 responses)
  • A
    5% (2)
  • B
    11% (4)
  • C
    81% (30)
  • D
    3% (1)

Explanation

After an external port scan reveals open ports, security best practice dictates disabling any services that are not required, thereby reducing the router's attack surface. Each open port represents a potential entry point for attackers. UPnP (A) would actually increase risk by allowing devices to open ports automatically. IP filtering (B) is a useful secondary control but does not eliminate an unneeded service. NAT (D) is typically already in use and doesn't directly address unnecessarily running services.

Topics

#Port scanning#Network security#Router security#Security best practices

Community Discussion

No community discussion yet for this question.

Full 220-1102 Practice