nerdexam
CompTIA

XK0-005 · Question #375

A security team informs the Linux administrator that a specific sever is acting as a n pen relay. To which of the following is the security team referring?

The correct answer is D. The server has an email service configured to allow outside sources to send email to other. An open relay refers to an email service configured to allow unauthenticated external sources to send email through it to any destination, making it susceptible to abuse by spammers.

Security

Question

A security team informs the Linux administrator that a specific sever is acting as a n pen relay. To which of the following is the security team referring?

Options

  • AThe server it running the SSH service and is open to the internet allowing outside sources to
  • BThe server is acting as an unmanaged router, open to the internal and is allowing outside
  • CThe server is acting as a web proxy and allowing outside unauthenticated sources to connect
  • DThe server has an email service configured to allow outside sources to send email to other

How the community answered

(35 responses)
  • A
    3% (1)
  • C
    3% (1)
  • D
    94% (33)

Why each option

An open relay refers to an email service configured to allow unauthenticated external sources to send email through it to any destination, making it susceptible to abuse by spammers.

AThe server it running the SSH service and is open to the internet allowing outside sources to

An SSH service open to the internet refers to an SSH server being publicly accessible, which is a different security concern than an open relay. B: An unmanaged router open to the internet describes a network device misconfiguration, not an email relay. C: A web proxy allowing outside unauthenticated sources describes a web proxy server misconfiguration, which is distinct from an email open relay.

BThe server is acting as an unmanaged router, open to the internal and is allowing outside
CThe server is acting as a web proxy and allowing outside unauthenticated sources to connect
DThe server has an email service configured to allow outside sources to send email to otherCorrect

An "open relay" specifically describes an SMTP (email) server that is configured to accept and forward email from any sender to any recipient, including those outside its own domain, without proper authentication. This configuration is widely abused by spammers to send unsolicited email.

Concept tested: Email server security, open relay

Source: https://www.cloudflare.com/learning/email-security/what-is-an-open-relay/

Topics

#Open Relay#Email Security#SMTP#Vulnerability

Community Discussion

No community discussion yet for this question.

Full XK0-005 Practice