XK0-005 · Question #375
A security team informs the Linux administrator that a specific sever is acting as a n pen relay. To which of the following is the security team referring?
The correct answer is D. The server has an email service configured to allow outside sources to send email to other. An open relay refers to an email service configured to allow unauthenticated external sources to send email through it to any destination, making it susceptible to abuse by spammers.
Question
A security team informs the Linux administrator that a specific sever is acting as a n pen relay. To which of the following is the security team referring?
Options
- AThe server it running the SSH service and is open to the internet allowing outside sources to
- BThe server is acting as an unmanaged router, open to the internal and is allowing outside
- CThe server is acting as a web proxy and allowing outside unauthenticated sources to connect
- DThe server has an email service configured to allow outside sources to send email to other
How the community answered
(35 responses)- A3% (1)
- C3% (1)
- D94% (33)
Why each option
An open relay refers to an email service configured to allow unauthenticated external sources to send email through it to any destination, making it susceptible to abuse by spammers.
An SSH service open to the internet refers to an SSH server being publicly accessible, which is a different security concern than an open relay. B: An unmanaged router open to the internet describes a network device misconfiguration, not an email relay. C: A web proxy allowing outside unauthenticated sources describes a web proxy server misconfiguration, which is distinct from an email open relay.
An "open relay" specifically describes an SMTP (email) server that is configured to accept and forward email from any sender to any recipient, including those outside its own domain, without proper authentication. This configuration is widely abused by spammers to send unsolicited email.
Concept tested: Email server security, open relay
Source: https://www.cloudflare.com/learning/email-security/what-is-an-open-relay/
Topics
Community Discussion
No community discussion yet for this question.