nerdexam
CompTIA

CV0-003 · Question #392

If a firewall only allows TCP/UPD traffic from ports under 25 and above 162, which of the following would be used for alerting purposes?

The correct answer is D. Syslog. The firewall allows ports below 25 and above 162, so only Syslog (UDP 514) falls within the permitted range for alerting.

Troubleshooting

Question

If a firewall only allows TCP/UPD traffic from ports under 25 and above 162, which of the following would be used for alerting purposes?

Options

  • ASNMP v3
  • BSMTP
  • CSNMP v1
  • DSyslog

How the community answered

(33 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    9% (3)
  • D
    85% (28)

Why each option

The firewall allows ports below 25 and above 162, so only Syslog (UDP 514) falls within the permitted range for alerting.

ASNMP v3

SNMP v3 sends traps on port 162, which is neither below 25 nor above 162 and is therefore blocked by this firewall rule.

BSMTP

SMTP uses port 25, which is not below 25 (the rule requires strictly under 25), so it is blocked by the firewall.

CSNMP v1

SNMP v1 uses port 161 for queries and port 162 for traps - both are outside the allowed range and blocked by the firewall.

DSyslogCorrect

Syslog uses UDP port 514, which is above 162 and therefore permitted through the firewall. It is a standard protocol for forwarding log and alert messages from network devices to a logging server, making it viable for alerting in this restricted environment.

Concept tested: Protocol port numbers and firewall ACL filtering

Source: https://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/13506-cisco-syslog.html

Topics

#Syslog#SNMP#firewall port rules#alerting protocols

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice