nerdexam
CompTIA

XK0-005 · Question #328

A security team informs the Linux administrator that a specific server is acting as an open relay. To which of the following is the security team referring?

The correct answer is D. The server has an email service configured to allow outside sources to send email to other. An open relay refers to an email server configured to accept and forward email from unauthenticated external sources to any arbitrary destination on the Internet, often exploited for spam distribution.

Security

Question

A security team informs the Linux administrator that a specific server is acting as an open relay. To which of the following is the security team referring?

Options

  • AThe server is running the SSH service and is open to the Internet, allowing outside sources to log
  • BThe server is acting as an unmanaged router, open to the Internet, and is allowing outside
  • CThe server is acting as a web proxy and allowing outside unauthenticated sources to connect to
  • DThe server has an email service configured to allow outside sources to send email to other

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    8% (3)
  • D
    86% (31)

Why each option

An open relay refers to an email server configured to accept and forward email from unauthenticated external sources to any arbitrary destination on the Internet, often exploited for spam distribution.

AThe server is running the SSH service and is open to the Internet, allowing outside sources to log

An SSH server open to the Internet is a security concern if not properly secured but does not define an 'open relay,' which specifically relates to email forwarding.

BThe server is acting as an unmanaged router, open to the Internet, and is allowing outside

A server acting as an unmanaged router allowing outside traffic defines a network routing issue, not an 'open relay,' which is specific to email.

CThe server is acting as a web proxy and allowing outside unauthenticated sources to connect to

A web proxy allowing unauthenticated connections is a security risk but is distinct from an 'open relay,' which specifically applies to email services.

DThe server has an email service configured to allow outside sources to send email to otherCorrect

A server acting as an open relay means its email service, typically an SMTP server, is configured to accept email from any sender, including unauthenticated external sources, and deliver it to recipients outside of its local domain. This configuration is a severe security vulnerability as it allows spammers to use the server to send unsolicited bulk email anonymously.

Concept tested: Email security, Open mail relay

Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/configure-smtp-server-prevent-open-relay

Topics

#Email security#Open relay#SMTP#Security vulnerabilities

Community Discussion

No community discussion yet for this question.

Full XK0-005 Practice