XK0-005 · Question #328
A security team informs the Linux administrator that a specific server is acting as an open relay. To which of the following is the security team referring?
The correct answer is D. The server has an email service configured to allow outside sources to send email to other. An open relay refers to an email server configured to accept and forward email from unauthenticated external sources to any arbitrary destination on the Internet, often exploited for spam distribution.
Question
A security team informs the Linux administrator that a specific server is acting as an open relay. To which of the following is the security team referring?
Options
- AThe server is running the SSH service and is open to the Internet, allowing outside sources to log
- BThe server is acting as an unmanaged router, open to the Internet, and is allowing outside
- CThe server is acting as a web proxy and allowing outside unauthenticated sources to connect to
- DThe server has an email service configured to allow outside sources to send email to other
How the community answered
(36 responses)- A3% (1)
- B3% (1)
- C8% (3)
- D86% (31)
Why each option
An open relay refers to an email server configured to accept and forward email from unauthenticated external sources to any arbitrary destination on the Internet, often exploited for spam distribution.
An SSH server open to the Internet is a security concern if not properly secured but does not define an 'open relay,' which specifically relates to email forwarding.
A server acting as an unmanaged router allowing outside traffic defines a network routing issue, not an 'open relay,' which is specific to email.
A web proxy allowing unauthenticated connections is a security risk but is distinct from an 'open relay,' which specifically applies to email services.
A server acting as an open relay means its email service, typically an SMTP server, is configured to accept email from any sender, including unauthenticated external sources, and deliver it to recipients outside of its local domain. This configuration is a severe security vulnerability as it allows spammers to use the server to send unsolicited bulk email anonymously.
Concept tested: Email security, Open mail relay
Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/configure-smtp-server-prevent-open-relay
Topics
Community Discussion
No community discussion yet for this question.