nerdexam
CompTIA

XK0-006 · Question #3

While hardening a system, an administrator runs a port scan with Nmap, which returned the following output: Which of the following is the best way to address this security issue?

The correct answer is D. Disabling and removing the Telnet service on the server. Port 23/tcp indicates Telnet, which is insecure because it transmits data in plaintext. The best hardening approach is to disable and remove the Telnet service entirely, eliminating the vulnerability rather than just blocking it at the firewall. Secure alternatives like SSH…

Security Best Practices

Question

While hardening a system, an administrator runs a port scan with Nmap, which returned the following output:

Which of the following is the best way to address this security issue?

Exhibit

XK0-006 question #3 exhibit

Options

  • AConfiguring a firewall to block traffic on port 23 on the server
  • BChanging the systems administrator's password to prevent unauthorized access
  • CClosing port 80 on the network switch to block traffic
  • DDisabling and removing the Telnet service on the server

How the community answered

(26 responses)
  • A
    12% (3)
  • B
    4% (1)
  • C
    4% (1)
  • D
    81% (21)

Explanation

Port 23/tcp indicates Telnet, which is insecure because it transmits data in plaintext. The best hardening approach is to disable and remove the Telnet service entirely, eliminating the vulnerability rather than just blocking it at the firewall. Secure alternatives like SSH should be

Topics

#Telnet#port scanning#service hardening#Nmap

Community Discussion

No community discussion yet for this question.

Full XK0-006 Practice