nerdexam
CompTIA

SK0-005 · Question #79

A large number of connections to port 80 is discovered while reviewing the log files on a server. The server is not functioning as a web server. Which of the following represent the BEST immediate…

The correct answer is C. Stop all unneeded services and block the ports on the firewall D. Initialize a port scan on the server to identify open ports. You want to identify all open ports and disable the unneeded ones. Only way to do that is with a port scan. Running an audit is not an immediate preventative measure.

Security and disaster recovery

Question

A large number of connections to port 80 is discovered while reviewing the log files on a server. The server is not functioning as a web server. Which of the following represent the BEST immediate actions to prevent unauthorized server access? (Choose two.)

Options

  • AAudit all group privileges and permissions
  • BRun a checksum tool against all the files on the server
  • CStop all unneeded services and block the ports on the firewall
  • DInitialize a port scan on the server to identify open ports
  • EEnable port forwarding on port 80
  • FInstall a NIDS on the server to prevent network intrusions

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    81% (26)
  • E
    9% (3)

Explanation

You want to identify all open ports and disable the unneeded ones. Only way to do that is with a port scan. Running an audit is not an immediate preventative measure.

Topics

#Incident Response#Network Security#Server Hardening#Vulnerability Identification

Community Discussion

No community discussion yet for this question.

Full SK0-005 Practice