A server administrator needs to harden a server by only allowing secure traffic and DNS inquiries. A port scan reports the following ports are open: 443 636 Which of the following open ports should…

The correct answer is A. 21 C. 23. The server should only allow HTTPS (443) and DNS (53). The full port scan reveals additional open ports that must be closed. Port 21 (FTP) should be closed because FTP transmits credentials and data in plaintext, making it a significant security risk. Port 23 (Telnet) should be…

Security and disaster recovery

Question

A server administrator needs to harden a server by only allowing secure traffic and DNS inquiries. A port scan reports the following ports are open:

443 636 Which of the following open ports should be closed to secure the server properly? (Choose two.)

Options

A21
B22
C23
D53
E443
F636

How the community answered

(31 responses)

A
71% (22)
B
3% (1)
D
6% (2)
E
3% (1)
F
16% (5)

Explanation

The server should only allow HTTPS (443) and DNS (53). The full port scan reveals additional open ports that must be closed. Port 21 (FTP) should be closed because FTP transmits credentials and data in plaintext, making it a significant security risk. Port 23 (Telnet) should be closed because Telnet also transmits data in plaintext and is considered highly insecure. Port 22 (SSH) may be retained for secure remote administration. Port 443 (HTTPS) and Port 636 (LDAPS-secure LDAP) are considered secure protocols. Port 53 (DNS) must remain open per the requirements. The two most critical insecure ports to close are 21 (FTP) and 23 (Telnet).

Topics

#Network security#Server hardening#Port numbers#Insecure protocols

Community Discussion

No community discussion yet for this question.

Full SK0-005 Practice