A security administrator suspects that an increase in the amount of TFTP traffic on the network is due to unauthorized file transfers, and wants to configure a firewall to block all TFTP traffic…

The correct answer is D. Deny UCP port 69. TFTP (Trivial File Transfer Protocol) uses UDP (not TCP) on port 69. TCP is not used by TFTP at all, so options A and B (TCP port 68 and TCP port 69) are incorrect on both the protocol and port. Port 68 (UDP or TCP) is used by DHCP clients - blocking it would disrupt IP address…

Security architecture

Question

A security administrator suspects that an increase in the amount of TFTP traffic on the network is due to unauthorized file transfers, and wants to configure a firewall to block all TFTP traffic. Which of the following would accomplish this task?

Options

ADeny TCP port 68
BDeny TCP port 69
CDeny UDP port 68
DDeny UCP port 69

How the community answered

(45 responses)

A
7% (3)
B
2% (1)
C
2% (1)
D
89% (40)

Explanation

TFTP (Trivial File Transfer Protocol) uses UDP (not TCP) on port 69. TCP is not used by TFTP at all, so options A and B (TCP port 68 and TCP port 69) are incorrect on both the protocol and port. Port 68 (UDP or TCP) is used by DHCP clients - blocking it would disrupt IP address assignment, not TFTP. Only denying UDP port 69 will block TFTP traffic. Note: the answer choice labels 'UCP' in option D is a typographical error for 'UDP'; the intent and correct answer is UDP port 69.

Topics

#TFTP#firewall rules#UDP port 69#protocol blocking

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice