A technician has configured the ability to connect to a small office server using remote desktop from a workstation within the office. The technician has reviewed logs that show constant brute force…

The correct answer is D. Disable the remote desktop port. The brute force attacks are coming from outside the network and targeting the Remote Desktop Protocol (RDP) port (TCP 3389). Disabling or blocking this port on the firewall or the server itself eliminates the external attack surface entirely - if the port is closed, external…

Networking

Question

A technician has configured the ability to connect to a small office server using remote desktop from a workstation within the office. The technician has reviewed logs that show constant brute force attacks to that server from outside the network. Which of the following would prevent this from occurring?

Options

AConfigure the server to use a static IP
BLogically move the server to the DMZ
CReallocate the server to a different networking closet
DDisable the remote desktop port

How the community answered

(39 responses)

A
5% (2)
B
15% (6)
C
8% (3)
D
72% (28)

Explanation

The brute force attacks are coming from outside the network and targeting the Remote Desktop Protocol (RDP) port (TCP 3389). Disabling or blocking this port on the firewall or the server itself eliminates the external attack surface entirely - if the port is closed, external attackers cannot reach the RDP service to attack it. The technician can still use RDP internally since internal traffic won't be affected if the block is applied at the perimeter. A static IP (A) does not prevent attacks. Moving the server to a DMZ (B) would actually expose it more to external threats. Physically relocating the server (C) has no effect on network-based attacks.

Topics

#remote desktop#brute force attack#RDP security#port security

Community Discussion

No community discussion yet for this question.

Full 220-802 Practice