nerdexam
CompTIA

CV0-002 · Question #42

An administrator is no longer receiving alerting messages from the web server platform that recently failed over to a new secondary datacenter due to a power failure. Which of the following is the…

The correct answer is B. Port 22 to the log server is blocked outbound. The administrator is no longer receiving alerting messages from the web server platform due to a firewall blocking outbound communication from the new secondary datacenter. This prevents the server from sending necessary alerts to the log server.

Troubleshooting

Question

An administrator is no longer receiving alerting messages from the web server platform that recently failed over to a new secondary datacenter due to a power failure. Which of the following is the cause of the problem?

Options

  • APort 21 in only allowed inbound at the primary datacenter
  • BPort 22 to the log server is blocked outbound
  • CPort 162 in DMZ is blocked inbound
  • DPort 162 in DMZ is blocked outbound

How the community answered

(42 responses)
  • A
    2% (1)
  • B
    81% (34)
  • C
    5% (2)
  • D
    12% (5)

Why each option

The administrator is no longer receiving alerting messages from the web server platform due to a firewall blocking outbound communication from the new secondary datacenter. This prevents the server from sending necessary alerts to the log server.

APort 21 in only allowed inbound at the primary datacenter

Port 21 is for FTP, which is rarely used for sending alerting messages from a web server or for general log transfer to a log server.

BPort 22 to the log server is blocked outboundCorrect

The web server platform sends alerting messages and logs to a designated log server, often utilizing secure protocols like SFTP or secure log forwarding over SSH, which commonly uses Port 22. If Port 22 is blocked outbound from the new secondary datacenter's network, the web server cannot establish a connection to the log server, preventing the delivery of critical alerts and logs.

CPort 162 in DMZ is blocked inbound

Port 162 is for SNMP traps, which are typically received by an SNMP manager, not blocked inbound to the web server that is sending the alerts.

DPort 162 in DMZ is blocked outbound

While Port 162 is for SNMP traps and a block outbound could prevent sending, Port 22 for secure log transfer to a 'log server' is a more general and common mechanism for 'alerting messages' from a 'web server platform' than SNMP traps, especially when transferring to a centralized log server.

Concept tested: Network connectivity for logging/alerting

Topics

#alerting#network ports#firewall rules#datacenter failover

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice