CV0-003 · Question #389
A network administrator is enabling SFTP. Which of the following ports should be open on the firewall?
The correct answer is B. 22. SFTP (SSH File Transfer Protocol) operates over SSH on port 22, not on the traditional FTP port 21.
Question
A network administrator is enabling SFTP. Which of the following ports should be open on the firewall?
Options
- A21
- B22
- C80
- D443
How the community answered
(32 responses)- A3% (1)
- B91% (29)
- D6% (2)
Why each option
SFTP (SSH File Transfer Protocol) operates over SSH on port 22, not on the traditional FTP port 21.
Port 21 is the control channel for traditional FTP, which is an entirely separate protocol from SFTP and does not provide encryption.
SFTP is not a variant of FTP but a subsystem of the SSH protocol, meaning all SFTP traffic is tunneled through an SSH session on TCP port 22. Opening port 22 on the firewall is required for SFTP connections to succeed. Port 21 is used by the unrelated FTP protocol.
Port 80 is used for unencrypted HTTP web traffic and has no association with file transfer via SFTP.
Port 443 is used for HTTPS (TLS-encrypted web traffic) and is not related to SFTP or SSH-based file transfer.
Concept tested: SFTP protocol port and SSH relationship
Source: https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml
Topics
Community Discussion
No community discussion yet for this question.