nerdexam
CompTIA

CS0-003 · Question #528

A security analyst needs to block vulnerable ports and disable legacy protocols. The analyst has ensured NetBIOS trio, Telnet, SMB, and TFTP are blocked and/or disabled. Which of the following additio

The correct answer is B. SNMP v1. After blocking several known legacy and insecure protocols, the security analyst should next block SNMP v1 due to its inherent security vulnerabilities.

Submitted by chen.hong· Mar 6, 2026Security operations

Question

A security analyst needs to block vulnerable ports and disable legacy protocols. The analyst has ensured NetBIOS trio, Telnet, SMB, and TFTP are blocked and/or disabled. Which of the following additional protocols should the analyst block next?

Options

  • ALDAPS v3
  • BSNMP v1
  • CTLS 1.3
  • DKerberos v5

How the community answered

(25 responses)
  • B
    92% (23)
  • C
    4% (1)
  • D
    4% (1)

Why each option

After blocking several known legacy and insecure protocols, the security analyst should next block SNMP v1 due to its inherent security vulnerabilities.

ALDAPS v3

LDAPS v3 (LDAP over SSL/TLS) is a secure version of LDAP that uses encryption to protect communication and is generally considered a secure protocol for directory services.

BSNMP v1Correct

SNMP v1 is known for significant security weaknesses, including the use of cleartext community strings for authentication, making it highly vulnerable to eavesdropping and unauthorized access, and should therefore be disabled or upgraded.

CTLS 1.3

TLS 1.3 is the most current and secure version of the Transport Layer Security protocol, designed to address weaknesses in previous versions, and should be enabled for secure communication, not blocked.

DKerberos v5

Kerberos v5 is a widely used and secure network authentication protocol that provides strong authentication for client/server applications using secret-key cryptography and is not considered a vulnerable legacy protocol.

Concept tested: Vulnerable and legacy network protocols

Source: https://learn.microsoft.com/en-us/windows/win32/snmp/snmp-security-issues

Topics

#secure configuration#protocol security#legacy protocols#network hardening

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice