A Linux server is running a log collector that needs to be hardened. A network administrator executes netstat to find open ports on the server. Which of the following ports should be disabled?

The correct answer is B. 80. For a log collector server, the primary needed service is Syslog, which typically uses UDP port 514. Other ports may be open for management (e.g., 22 for SSH) or SNMP traps (162) if integrated. However, port 80 (HTTP) should not be open unless required, as it increases attack…

Submitted by deeparc· Mar 6, 2026Network Security

Question

Options

A22
B80
C162
D514

How the community answered

(44 responses)

A
7% (3)
B
82% (36)
C
9% (4)
D
2% (1)

Explanation

For a log collector server, the primary needed service is Syslog, which typically uses UDP port 514. Other ports may be open for management (e.g., 22 for SSH) or SNMP traps (162) if integrated. However, port 80 (HTTP) should not be open unless required, as it increases attack surface and does not directly serve the log collection purpose. Disabling it hardens the server.

Community Discussion

No community discussion yet for this question.

Full N10-009 Practice