nerdexam
CompTIA

CAS-005 · Question #455

A security engineer is assessing a legacy server and needs to determine if FTP is running and on which port. The service cannot be turned off, as it would impact a critical application's ability to…

The correct answer is C. netstat -tulpn. The netstat -tulpn command displays all listening TCP (-t) and UDP (-u) sockets, shows the program name/PID that owns each socket (-p), and omits name resolution for speed (-n). This provides both confirmation that the FTP daemon is running and the exact port number it’s bound…

Submitted by jordan8· Mar 6, 2026Security Operations

Question

A security engineer is assessing a legacy server and needs to determine if FTP is running and on which port. The service cannot be turned off, as it would impact a critical application’s ability to function. Which of the following commands would provide the information necessary to create a firewall rule to prevent that service from being exploited?

Options

  • Aservice --status-all | grep ftpd
  • Bchkconfig --list
  • Cnetstat -tulpn
  • Dsystemctl list-unit-file --type service ftpd
  • Eservice ftpd status

How the community answered

(28 responses)
  • B
    4% (1)
  • C
    93% (26)
  • E
    4% (1)

Explanation

The netstat -tulpn command displays all listening TCP (-t) and UDP (-u) sockets, shows the program name/PID that owns each socket (-p), and omits name resolution for speed (-n). This provides both confirmation that the FTP daemon is running and the exact port number it’s bound to, which you can then use to craft your firewall rule.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice