SK0-004 · Question #148
A server has recently been configured as a network firewall. After the firewall was configured, users could no longer access a remote server. Which of the following, if properly configured on the…
The correct answer is B. Allow TCP port 22 F. Allow TCP port 3389. Secure remote server access requires opening SSH (TCP 22) for encrypted command-line sessions or RDP (TCP 3389) for encrypted graphical desktop sessions. Both protocols encrypt their traffic and are the standard choices for secure remote administration.
Question
A server has recently been configured as a network firewall. After the firewall was configured, users could no longer access a remote server. Which of the following, if properly configured on the firewall, will allow users to have secure access to the remote server? (Select TWO).
Options
- AAllow TCP port 21
- BAllow TCP port 22
- CAllow TCP port 23
- DAllow TCP port 25
- EAllow TCP port 161
- FAllow TCP port 3389
How the community answered
(31 responses)- A16% (5)
- B74% (23)
- D6% (2)
- E3% (1)
Why each option
Secure remote server access requires opening SSH (TCP 22) for encrypted command-line sessions or RDP (TCP 3389) for encrypted graphical desktop sessions. Both protocols encrypt their traffic and are the standard choices for secure remote administration.
TCP port 21 is used by FTP for file transfers, which sends credentials and data in plaintext and does not provide remote server access or session security.
TCP port 22 is used by SSH (Secure Shell), which establishes an encrypted and authenticated session for remote command-line administration of servers. SSH is the industry-standard replacement for plaintext Telnet and is the primary protocol for secure remote access on Linux, Unix, and network devices.
TCP port 23 is used by Telnet, which transmits all data including usernames and passwords in unencrypted plaintext, making it unsuitable for secure remote access.
TCP port 25 is used by SMTP for mail transfer between servers and has no role in providing interactive remote access to a server.
TCP port 161 is used by SNMP for network monitoring and device management queries and does not provide any form of interactive remote access or session control.
TCP port 3389 is used by RDP (Remote Desktop Protocol), which provides an encrypted graphical desktop session to remote Windows servers. RDP supports certificate-based server authentication and is the standard method for secure graphical remote administration of Windows Server environments.
Concept tested: Secure remote access port configuration - SSH and RDP
Source: https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/remote-desktop-allow-access
Topics
Community Discussion
No community discussion yet for this question.