CV0-002 · Question #42
An administrator is no longer receiving alerting messages from the web server platform that recently failed over to a new secondary datacenter due to a power failure. Which of the following is the…
The correct answer is B. Port 22 to the log server is blocked outbound. The administrator is no longer receiving alerting messages from the web server platform due to a firewall blocking outbound communication from the new secondary datacenter. This prevents the server from sending necessary alerts to the log server.
Question
An administrator is no longer receiving alerting messages from the web server platform that recently failed over to a new secondary datacenter due to a power failure. Which of the following is the cause of the problem?
Options
- APort 21 in only allowed inbound at the primary datacenter
- BPort 22 to the log server is blocked outbound
- CPort 162 in DMZ is blocked inbound
- DPort 162 in DMZ is blocked outbound
How the community answered
(42 responses)- A2% (1)
- B81% (34)
- C5% (2)
- D12% (5)
Why each option
The administrator is no longer receiving alerting messages from the web server platform due to a firewall blocking outbound communication from the new secondary datacenter. This prevents the server from sending necessary alerts to the log server.
Port 21 is for FTP, which is rarely used for sending alerting messages from a web server or for general log transfer to a log server.
The web server platform sends alerting messages and logs to a designated log server, often utilizing secure protocols like SFTP or secure log forwarding over SSH, which commonly uses Port 22. If Port 22 is blocked outbound from the new secondary datacenter's network, the web server cannot establish a connection to the log server, preventing the delivery of critical alerts and logs.
Port 162 is for SNMP traps, which are typically received by an SNMP manager, not blocked inbound to the web server that is sending the alerts.
While Port 162 is for SNMP traps and a block outbound could prevent sending, Port 22 for secure log transfer to a 'log server' is a more general and common mechanism for 'alerting messages' from a 'web server platform' than SNMP traps, especially when transferring to a centralized log server.
Concept tested: Network connectivity for logging/alerting
Topics
Community Discussion
No community discussion yet for this question.