SY0-301 · Question #588
A network consists of various remote sites that connect back to two main locations. Pete, the security administrator, needs to block TELNET access into the network. Which of the following, by…
The correct answer is B. Block port 23 on the network firewall. Telnet operates on port 23. The best place to block port 23 is at the network firewall (Option B), not at individual remote site switches, for two reasons: (1) firewalls are purpose-built for port/traffic filtering and are the standard enforcement point, and (2) a centralized…
Question
A network consists of various remote sites that connect back to two main locations. Pete, the security administrator, needs to block TELNET access into the network. Which of the following, by default, would be the BEST choice to accomplish this goal?
Options
- ABlock port 23 on the L2 switch at each remote site
- BBlock port 23 on the network firewall
- CBlock port 25 on the L2 switch at each remote site
- DBlock port 25 on the network firewall
How the community answered
(23 responses)- B96% (22)
- D4% (1)
Explanation
Telnet operates on port 23. The best place to block port 23 is at the network firewall (Option B), not at individual remote site switches, for two reasons: (1) firewalls are purpose-built for port/traffic filtering and are the standard enforcement point, and (2) a centralized firewall rule is more scalable and manageable than configuring every L2 switch at every remote site. Option A blocks port 23 at L2 switches - L2 switches are not typically configured for port-based traffic filtering and this would require changes at every remote location. Options C and D reference port 25, which is SMTP (email), not Telnet - these are wrong ports entirely. The answer is blocking port 23 at the firewall.
Topics
Community Discussion
No community discussion yet for this question.