CAS-005 · Question #455
A security engineer is assessing a legacy server and needs to determine if FTP is running and on which port. The service cannot be turned off, as it would impact a critical application's ability to…
The correct answer is C. netstat -tulpn. The netstat -tulpn command displays all listening TCP (-t) and UDP (-u) sockets, shows the program name/PID that owns each socket (-p), and omits name resolution for speed (-n). This provides both confirmation that the FTP daemon is running and the exact port number it’s bound…
Question
A security engineer is assessing a legacy server and needs to determine if FTP is running and on which port. The service cannot be turned off, as it would impact a critical application’s ability to function. Which of the following commands would provide the information necessary to create a firewall rule to prevent that service from being exploited?
Options
- Aservice --status-all | grep ftpd
- Bchkconfig --list
- Cnetstat -tulpn
- Dsystemctl list-unit-file --type service ftpd
- Eservice ftpd status
How the community answered
(28 responses)- B4% (1)
- C93% (26)
- E4% (1)
Explanation
The netstat -tulpn command displays all listening TCP (-t) and UDP (-u) sockets, shows the program name/PID that owns each socket (-p), and omits name resolution for speed (-n). This provides both confirmation that the FTP daemon is running and the exact port number it’s bound to, which you can then use to craft your firewall rule.
Community Discussion
No community discussion yet for this question.