220-1102 · Question #859
A technician recently installed a new router for a small business. Afterwards, the technician completed an external port scan and generated the following information: Which of the following should the
The correct answer is C. Disable any unwanted services.. After an external port scan reveals open ports, security best practice dictates disabling any services that are not required, thereby reducing the router's attack surface. Each open port represents a potential entry point for attackers. UPnP (A) would actually increase risk by al
Question
A technician recently installed a new router for a small business. Afterwards, the technician completed an external port scan and generated the following information:
Which of the following should the technician perform next in order to follow best practices?
Exhibit
Options
- AMigrate to UPnP.
- BImplement IP filtering.
- CDisable any unwanted services.
- DUtilize NAT.
How the community answered
(37 responses)- A5% (2)
- B11% (4)
- C81% (30)
- D3% (1)
Explanation
After an external port scan reveals open ports, security best practice dictates disabling any services that are not required, thereby reducing the router's attack surface. Each open port represents a potential entry point for attackers. UPnP (A) would actually increase risk by allowing devices to open ports automatically. IP filtering (B) is a useful secondary control but does not eliminate an unneeded service. NAT (D) is typically already in use and doesn't directly address unnecessarily running services.
Topics
Community Discussion
No community discussion yet for this question.
