300-720 · Question #18
When the Cisco ESA is configured to use Centralized Message Tracking, which default port is used between the device and the Cisco Security Management Appliance?
The correct answer is E. port 22/TCP. Centralized Message Tracking between the Cisco ESA and the Security Management Appliance (SMA) uses SSH on port 22/TCP as the default transport.
Question
When the Cisco ESA is configured to use Centralized Message Tracking, which default port is used between the device and the Cisco Security Management Appliance?
Options
- Aport 53/UDP
- Bport 80/UDP
- Cport 23/TCP
- Dport 25/UDP
- Eport 22/TCP
How the community answered
(57 responses)- A2% (1)
- B5% (3)
- C2% (1)
- E91% (52)
Why each option
Centralized Message Tracking between the Cisco ESA and the Security Management Appliance (SMA) uses SSH on port 22/TCP as the default transport.
Port 53/UDP is the standard DNS query port and is unrelated to ESA-to-SMA message tracking communication.
Port 80/UDP is not a valid assignment; HTTP uses port 80/TCP, and neither is used for centralized message tracking.
Port 23/TCP is Telnet, which is an insecure, unencrypted protocol not used for ESA management or data transfer to the SMA.
Port 25/UDP is invalid; SMTP uses port 25/TCP, and SMTP is the mail transport protocol, not the mechanism for centralized tracking log delivery.
The Cisco ESA uses SSH (port 22/TCP) to securely transfer message tracking data to the Cisco Security Management Appliance. SSH provides an encrypted channel that protects the log data in transit between the two appliances.
Concept tested: Cisco ESA centralized message tracking port configuration
Source: https://www.cisco.com/c/en/us/td/docs/security/security_management/sma/sma14-0/user_guide/b_SMA_Admin_Guide_14_0/b_SMA_Admin_Guide_chapter_01001.html
Topics
Community Discussion
No community discussion yet for this question.