nerdexam
CompTIA

CV0-002 · Question #393

When deploying a cloud service, Ann, a local administrator, is told she will need to enable the following services to communicate with the cloud provider: FTP, HTTPS, RDP The following ports are curre

The correct answer is D. Close ports 22, 80, and 1434. Open ports 443 and 3389.. To harden a server by opening only necessary ports for FTP, HTTPS, and RDP communication, specific ports must be opened and others currently active but not required must be closed.

Security

Question

When deploying a cloud service, Ann, a local administrator, is told she will need to enable the following services to communicate with the cloud provider:

FTP, HTTPS, RDP The following ports are currently open on the server:

21, 22, 80, 1434 Which of the following changes should be made to harden this server to the point that ONLY the necessary ports are open?

Options

  • AClose port 80. Open port 443.
  • BClose ports 21, 80, and 1434. Open port 443.
  • CClose ports 80 and 1434. Open port 3389.
  • DClose ports 22, 80, and 1434. Open ports 443 and 3389.

How the community answered

(28 responses)
  • A
    14% (4)
  • B
    4% (1)
  • C
    7% (2)
  • D
    75% (21)

Why each option

To harden a server by opening only necessary ports for FTP, HTTPS, and RDP communication, specific ports must be opened and others currently active but not required must be closed.

AClose port 80. Open port 443.

This option fails to close ports 22 and 1434 and does not open port 3389, leaving the server insufficiently hardened and lacking necessary RDP service.

BClose ports 21, 80, and 1434. Open port 443.
CClose ports 80 and 1434. Open port 3389.
DClose ports 22, 80, and 1434. Open ports 443 and 3389.Correct

Option D is correct because it closes ports 22 (SSH), 80 (HTTP), and 1434 (SQL Admin), which are not explicitly required by the problem statement, while opening ports 443 (HTTPS) and 3389 (RDP), which are specified as necessary. Port 21 (FTP) is already open and remains open, fulfilling all requirements for hardening to only necessary services.

Concept tested: Network port hardening for specified services

Source: https://learn.microsoft.com/en-us/windows-server/security/ports/service-overview-and-network-port-requirements

Topics

#firewall hardening#port numbers#HTTPS#RDP

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CV0-002 Practice