nerdexam
CompTIA

SK0-003 · Question #457

A technician works for a company that has recently been affected by a virus. The virus entered the network by using port 6000. Port 6000 is used by an application located on a server. The technician h

The correct answer is C. Adjust the software firewall settings. To selectively block a specific port on most devices while allowing it on a designated server, the technician should configure the software firewall settings.

Security and disaster recovery

Question

A technician works for a company that has recently been affected by a virus. The virus entered the network by using port 6000. Port 6000 is used by an application located on a server. The technician has been asked to block this port on all servers and computers except for the one server which uses this port. Which of the following should the technician do?

Options

  • AUpdate the antivirus application
  • BInstall critical update security patches
  • CAdjust the software firewall settings
  • DReplace the current antivirus program

How the community answered

(57 responses)
  • A
    16% (9)
  • B
    5% (3)
  • C
    70% (40)
  • D
    9% (5)

Why each option

To selectively block a specific port on most devices while allowing it on a designated server, the technician should configure the software firewall settings.

AUpdate the antivirus application

Updating antivirus applications primarily focuses on detecting and removing malware signatures, not on blocking specific network ports based on an administrator's custom policy.

BInstall critical update security patches

Installing security patches addresses known vulnerabilities in operating systems or applications but does not provide the mechanism for custom, port-specific traffic blocking across a network.

CAdjust the software firewall settingsCorrect

Software firewalls, such as Windows Firewall with Advanced Security, allow administrators to create specific inbound and outbound rules to permit or deny traffic based on ports, protocols, IP addresses, and applications. By adjusting these settings, the technician can block port 6000 on all machines except the server that legitimately uses it, effectively preventing unauthorized access through that port while maintaining application functionality.

DReplace the current antivirus program

Replacing an antivirus program would not inherently provide the necessary functionality to selectively block a specific port across multiple network devices.

Concept tested: Configuring software firewall port rules

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/create-an-inbound-port-rule

Topics

#Firewall#Port blocking#Network security#Virus mitigation

Community Discussion

No community discussion yet for this question.

Full SK0-003 Practice