nerdexam
CompTIA

CV0-003 · Question #393

When deploying a cloud service, Ann, a local administrator, is told she will need to enable the following services to communicate with the cloud provider: FTP, HTTPS, RDP The following ports are…

The correct answer is D. Close ports 22, 80, and 1434. Open ports 443 and 3389. To support only FTP, HTTPS, and RDP while hardening the server, unnecessary ports must be closed and missing required ports opened.

Security

Question

When deploying a cloud service, Ann, a local administrator, is told she will need to enable the following services to communicate with the cloud provider:

FTP, HTTPS, RDP The following ports are currently open on the server:

21, 22, 80, 1434 Which of the following changes should be made to harden this server to the point that ONLY the necessary ports are open?

Options

  • AClose port 80. Open port 443.
  • BClose ports 21, 80, and 1434. Open port 443.
  • CClose ports 80 and 1434. Open port 3389.
  • DClose ports 22, 80, and 1434. Open ports 443 and 3389.

How the community answered

(24 responses)
  • A
    13% (3)
  • B
    21% (5)
  • C
    4% (1)
  • D
    63% (15)

Why each option

To support only FTP, HTTPS, and RDP while hardening the server, unnecessary ports must be closed and missing required ports opened.

AClose port 80. Open port 443.

This option leaves ports 22 and 1434 open unnecessarily and fails to open port 3389 for RDP, which is a required service.

BClose ports 21, 80, and 1434. Open port 443.

This option incorrectly closes port 21, which is required for FTP, and also fails to open port 3389 for the required RDP service.

CClose ports 80 and 1434. Open port 3389.

This option leaves port 22 (SSH) open without justification and fails to open port 443 for HTTPS, which is a required service.

DClose ports 22, 80, and 1434. Open ports 443 and 3389.Correct

Port 22 (SSH), 80 (HTTP), and 1434 (SQL Server Browser) are not required for the specified services and should be closed to minimize attack surface. Ports 443 (HTTPS) and 3389 (RDP) must be opened, while port 21 (FTP) is already open and required - this option correctly balances closure of unnecessary ports with opening of needed ones.

Concept tested: Port hardening by closing unnecessary services

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-an-inbound-port-rule

Topics

#port hardening#firewall configuration#RDP#protocol ports

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CV0-003 Practice