A security analyst runs the following command: Which of the following should the analyst recommend first to harden the system?

The correct answer is A. Disable all protocols that do not use encryption. The nmap scan results show that Telnet (port 23) is open. Telnet transmits data, including credentials, in plaintext, which is insecure and should be disabled to enhance security. Disabling unencrypted protocols (such as Telnet) reduces exposure to man-in-the-middle (MITM)…

Submitted by tarun92· Mar 6, 2026Vulnerability Management

Question

A security analyst runs the following command:

Which of the following should the analyst recommend first to harden the system?

Exhibit

Options

ADisable all protocols that do not use encryption.
BConfigure client certificates for domain services.
CEnsure that this system is behind a NGFW.
DDeploy a publicly trusted root CA for secure websites.

How the community answered

(29 responses)

A
83% (24)
B
3% (1)
C
3% (1)
D
10% (3)

Explanation

The nmap scan results show that Telnet (port 23) is open. Telnet transmits data, including credentials, in plaintext, which is insecure and should be disabled to enhance security. Disabling unencrypted protocols (such as Telnet) reduces exposure to man-in-the-middle (MITM) attacks and credential sniffing. Telnet should be replaced with a secure protocol like SSH, which provides encryption for transmitted data.

Topics

#system hardening#network protocols#unencrypted services#vulnerability remediation

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice