nerdexam
CompTIA

SY0-501 · Question #266

Given the log output: Max 15 00:15:23.431 CRT: #SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: msmith] [Source: 10.0.12.45] [localport: 23] at 00:15:23:431 CET Sun Mar 15 2015 Which of the…

The correct answer is B. Disable telnet and enable SSH. The log output indicates an insecure Telnet login on port 23, which transmits credentials and data in plaintext. To protect data security, the network administrator must replace this insecure protocol with a secure alternative.

Submitted by miguelv· Mar 4, 2026Security operations

Question

Given the log output:

Max 15 00:15:23.431 CRT: #SEC_LOGIN-5-LOGIN_SUCCESS:

Login Success [user: msmith] [Source: 10.0.12.45] [localport: 23] at 00:15:23:431 CET Sun Mar 15 2015 Which of the following should the network administrator do to protect data security?

Options

  • AConfigure port security for logons
  • BDisable telnet and enable SSH
  • CConfigure an AAA server
  • DDisable password and enable RSA authentication

How the community answered

(32 responses)
  • A
    9% (3)
  • B
    81% (26)
  • C
    6% (2)
  • D
    3% (1)

Why each option

The log output indicates an insecure Telnet login on port 23, which transmits credentials and data in plaintext. To protect data security, the network administrator must replace this insecure protocol with a secure alternative.

AConfigure port security for logons

Configuring port security primarily restricts which MAC addresses can access a network port and does not encrypt the data transmitted over a remote access protocol like Telnet.

BDisable telnet and enable SSHCorrect

The log explicitly shows a login on `localport: 23`, which is the default port for Telnet, an inherently insecure protocol that sends all data, including usernames and passwords, in plaintext. To protect data security, Telnet should be disabled and SSH (Secure Shell) enabled, as SSH encrypts the entire communication session, including authentication credentials and data, preventing eavesdropping and unauthorized access.

CConfigure an AAA server

While an AAA server centralizes authentication, authorization, and accounting, it does not encrypt the communication channel itself, meaning sensitive information would still be transmitted in plaintext if Telnet were used.

DDisable password and enable RSA authentication

Enabling RSA authentication, often used with SSH for stronger security, is a good practice, but it doesn't address the fundamental vulnerability of Telnet transmitting all data in plaintext; RSA authentication needs to be paired with a secure protocol like SSH.

Concept tested: Securing remote access protocols (Telnet vs. SSH)

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ssh/configuration/xe-16/sec-conn-ssh-xe-16-book/sec-conn-ssh-xe-16-book_chapter_010.html

Topics

#telnet#SSH#insecure protocols#log analysis

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice