CS0-003 · Question #528
A security analyst needs to block vulnerable ports and disable legacy protocols. The analyst has ensured NetBIOS trio, Telnet, SMB, and TFTP are blocked and/or disabled. Which of the following additio
The correct answer is B. SNMP v1. After blocking several known legacy and insecure protocols, the security analyst should next block SNMP v1 due to its inherent security vulnerabilities.
Question
A security analyst needs to block vulnerable ports and disable legacy protocols. The analyst has ensured NetBIOS trio, Telnet, SMB, and TFTP are blocked and/or disabled. Which of the following additional protocols should the analyst block next?
Options
- ALDAPS v3
- BSNMP v1
- CTLS 1.3
- DKerberos v5
How the community answered
(25 responses)- B92% (23)
- C4% (1)
- D4% (1)
Why each option
After blocking several known legacy and insecure protocols, the security analyst should next block SNMP v1 due to its inherent security vulnerabilities.
LDAPS v3 (LDAP over SSL/TLS) is a secure version of LDAP that uses encryption to protect communication and is generally considered a secure protocol for directory services.
SNMP v1 is known for significant security weaknesses, including the use of cleartext community strings for authentication, making it highly vulnerable to eavesdropping and unauthorized access, and should therefore be disabled or upgraded.
TLS 1.3 is the most current and secure version of the Transport Layer Security protocol, designed to address weaknesses in previous versions, and should be enabled for secure communication, not blocked.
Kerberos v5 is a widely used and secure network authentication protocol that provides strong authentication for client/server applications using secret-key cryptography and is not considered a vulnerable legacy protocol.
Concept tested: Vulnerable and legacy network protocols
Source: https://learn.microsoft.com/en-us/windows/win32/snmp/snmp-security-issues
Topics
Community Discussion
No community discussion yet for this question.