nerdexam
CompTIA

CV0-004 · Question #52

A company experienced a data leak through its website. A security engineer, who is investigating the issue, runs a vulnerability scan against the website and receives the following output: Which of…

The correct answer is D. Insecure protocol. The data leak is most likely caused by the use of an insecure protocol. The vulnerability scan output shows that port 21/tcp for FTP (File Transfer Protocol) is open. FTP is known for transmitting data unencrypted, which could allow sensitive data to be intercepted during…

Security

Question

A company experienced a data leak through its website. A security engineer, who is investigating the issue, runs a vulnerability scan against the website and receives the following output:

Which of the following is the most likely cause of this leak?

Exhibit

CV0-004 question #52 exhibit

Options

  • ARTMP port open
  • BSQL injection
  • CPrivilege escalation
  • DInsecure protocol

How the community answered

(32 responses)
  • B
    6% (2)
  • C
    3% (1)
  • D
    91% (29)

Explanation

The data leak is most likely caused by the use of an insecure protocol. The vulnerability scan output shows that port 21/tcp for FTP (File Transfer Protocol) is open. FTP is known for transmitting data unencrypted, which could allow sensitive data to be intercepted during transfer.

Topics

#Website security#Data leak#Insecure protocols#Vulnerability scanning

Community Discussion

No community discussion yet for this question.

Full CV0-004 Practice