Which protocols or services are not secure and should be deactivated to raise the security level of HP Jetdirect solutions? (Select two)

Question

Options

• AIPSec
• BFTP
• CSNMPv3
• DTelnet
• EHTTPS

• A
  15% (6)
• B
  76% (31)
• C
  5% (2)
• E
  5% (2)

Explanation

FTP and Telnet are both legacy protocols that transmit data - including usernames and passwords - in plaintext, meaning anyone on the network can intercept credentials with a packet sniffer. On HP Jetdirect print servers, leaving these enabled creates an unnecessary attack surface, so best practice is to disable them in favor of secure alternatives (SFTP/SCP and SSH, respectively).

Why the distractors are wrong:

• A (IPSec): A security protocol that encrypts and authenticates IP traffic - keeping it active improves security.
• C (SNMPv3): The secure generation of SNMP, adding authentication and encryption; earlier versions (v1/v2c) would be the concern, not v3.
• E (HTTPS): Encrypted HTTP over TLS/SSL - the gold standard for secure web-based printer management.

Memory tip: Think "BaD protocols = plaintext = Bye" - B (FTP) and D (Telnet) are the two classic "cleartext culprits" that appear on nearly every network hardening checklist. If it has a secure successor (SSH replaces Telnet, SFTP replaces FTP), the original should be disabled.

No community discussion yet for this question.