A cloud engineer is deploying a server in a cloud platform. The engineer reviews a security scan report. Which of the following recommended services should be disabled? (Choose two.)

The correct answer is A. Telnet B. FTP. Telnet (A) and FTP (B) are both legacy protocols that transmit all data - including credentials - in plaintext, making them major security vulnerabilities on any server. Security best practices require disabling them in favor of secure alternatives: SSH instead of Telnet, and SFT

Security

Question

Options

ATelnet
BFTP
CRemote login
DDNS
EDHCP
FLDAP

How the community answered

(43 responses)

A
91% (39)
C
7% (3)
D
2% (1)

Explanation

Telnet (A) and FTP (B) are both legacy protocols that transmit all data - including credentials - in plaintext, making them major security vulnerabilities on any server. Security best practices require disabling them in favor of secure alternatives: SSH instead of Telnet, and SFTP or FTPS instead of FTP. The remaining options are not correct: DNS (D) and DHCP (E) are essential network services that servers commonly rely on and should not be disabled without specific justification. LDAP (F) is a directory service frequently required for authentication. Remote login (C) refers to rlogin, which is also insecure, but Telnet and FTP are the most universally flagged services on security scan reports and are the standard pair called out in cloud security hardening guidelines.

Topics

#Telnet#FTP#insecure protocols#server hardening

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice