PT0-003 · Question #281
A penetration tester wants to download sensitive files stored on the client's file server and runs the following scan: Which of the following TCP ports should the penetration tester target as a next…
The correct answer is D. 990. Explanation Port 990 (FTPS – FTP Secure) is the correct target because it is the standard port for FTP over SSL/TLS, which is commonly used to securely transfer files on a file server - making it the most relevant attack surface for downloading sensitive files in this context…
Question
A penetration tester wants to download sensitive files stored on the client's file server and runs the following scan:
Which of the following TCP ports should the penetration tester target as a next step?
Exhibit
Options
- A21
- B22
- C80
- D990
How the community answered
(24 responses)- A4% (1)
- C4% (1)
- D92% (22)
Explanation
Explanation
Port 990 (FTPS – FTP Secure) is the correct target because it is the standard port for FTP over SSL/TLS, which is commonly used to securely transfer files on a file server - making it the most relevant attack surface for downloading sensitive files in this context. Port 21 (standard FTP) is a distractor because, while it also handles file transfers, the scenario implies a secure/encrypted file service is in use (port 990 takes precedence when FTPS is detected). Port 22 (SSH/SFTP) handles secure shell and file transfers but is not the primary indicator of a traditional FTP-based file server setup as described. Port 80 (HTTP) serves web traffic and would not typically be the focus for direct file server access involving sensitive stored files.
Memory Tip: Think "990 = FTP gone Secure" - just as HTTPS (443) is the secure version of HTTP (80), FTPS (990) is the encrypted upgrade from standard FTP (21). If a file server is running encrypted file transfers, port 990 is your target.
Topics
Community Discussion
No community discussion yet for this question.