XK0-004 · Question #375
A security team informs the Linux administrator that a specific sever is acting as a n pen relay. To which of the following is the security team referring?
The correct answer is D. The server has an email service configured to allow outside sources to send email to other. An open relay is an SMTP email server misconfigured to forward email from unauthorized external senders to any destination, enabling spam abuse.
Question
A security team informs the Linux administrator that a specific sever is acting as a n pen relay. To which of the following is the security team referring?
Options
- AThe server it running the SSH service and is open to the internet allowing outside sources to
- BThe server is acting as an unmanaged router, open to the internal and is allowing outside
- CThe server is acting as a web proxy and allowing outside unauthenticated sources to connect
- DThe server has an email service configured to allow outside sources to send email to other
How the community answered
(31 responses)- B6% (2)
- C3% (1)
- D90% (28)
Why each option
An open relay is an SMTP email server misconfigured to forward email from unauthorized external senders to any destination, enabling spam abuse.
An SSH service exposed to the internet is a remote access vulnerability, not an open relay, which is strictly an email (SMTP) forwarding misconfiguration.
An unmanaged router acting as an IP forwarder is a network routing security issue, not an open relay, which is specific to email services.
An open web proxy allows unauthenticated users to route HTTP traffic, which is a separate and distinct vulnerability from an open email relay.
An open relay specifically refers to an SMTP email server that lacks proper authentication controls, allowing any external host to send email through it to arbitrary recipients - this is the textbook definition of an open relay, commonly exploited by spammers to obscure the true origin of malicious email.
Concept tested: SMTP open relay email server misconfiguration
Source: https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/how-to-configure-iis-for-relay-with-office-365
Topics
Community Discussion
No community discussion yet for this question.