nerdexam
CompTIA

SK0-004 · Question #148

A server has recently been configured as a network firewall. After the firewall was configured, users could no longer access a remote server. Which of the following, if properly configured on the…

The correct answer is B. Allow TCP port 22 F. Allow TCP port 3389. Secure remote server access requires opening SSH (TCP 22) for encrypted command-line sessions or RDP (TCP 3389) for encrypted graphical desktop sessions. Both protocols encrypt their traffic and are the standard choices for secure remote administration.

Security and disaster recovery

Question

A server has recently been configured as a network firewall. After the firewall was configured, users could no longer access a remote server. Which of the following, if properly configured on the firewall, will allow users to have secure access to the remote server? (Select TWO).

Options

  • AAllow TCP port 21
  • BAllow TCP port 22
  • CAllow TCP port 23
  • DAllow TCP port 25
  • EAllow TCP port 161
  • FAllow TCP port 3389

How the community answered

(31 responses)
  • A
    16% (5)
  • B
    74% (23)
  • D
    6% (2)
  • E
    3% (1)

Why each option

Secure remote server access requires opening SSH (TCP 22) for encrypted command-line sessions or RDP (TCP 3389) for encrypted graphical desktop sessions. Both protocols encrypt their traffic and are the standard choices for secure remote administration.

AAllow TCP port 21

TCP port 21 is used by FTP for file transfers, which sends credentials and data in plaintext and does not provide remote server access or session security.

BAllow TCP port 22Correct

TCP port 22 is used by SSH (Secure Shell), which establishes an encrypted and authenticated session for remote command-line administration of servers. SSH is the industry-standard replacement for plaintext Telnet and is the primary protocol for secure remote access on Linux, Unix, and network devices.

CAllow TCP port 23

TCP port 23 is used by Telnet, which transmits all data including usernames and passwords in unencrypted plaintext, making it unsuitable for secure remote access.

DAllow TCP port 25

TCP port 25 is used by SMTP for mail transfer between servers and has no role in providing interactive remote access to a server.

EAllow TCP port 161

TCP port 161 is used by SNMP for network monitoring and device management queries and does not provide any form of interactive remote access or session control.

FAllow TCP port 3389Correct

TCP port 3389 is used by RDP (Remote Desktop Protocol), which provides an encrypted graphical desktop session to remote Windows servers. RDP supports certificate-based server authentication and is the standard method for secure graphical remote administration of Windows Server environments.

Concept tested: Secure remote access port configuration - SSH and RDP

Source: https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/remote-desktop-allow-access

Topics

#firewall rules#SSH port 22#RDP port 3389#secure remote access

Community Discussion

No community discussion yet for this question.

Full SK0-004 Practice