A security engineer is hardening a company’s multihomed SFTP server.

Question

A security engineer is hardening a company’s multihomed SFTP server. When scanning a public-facing network interface, the engineer finds the following ports are open:
22
25
110
137
138
139
445
Internal Windows clients are used to transferring files to the server to stage them for customer download as part of the company’s distribution process.
Which of the following would be the BEST solution to harden the system?

Accepted Answer

A. Close ports 110, 138, and 139. Bind ports 22, 25, and 137 to only the internal interface.

Answer

B. Close ports 25 and 110. Bind ports 137, 138, 139, and 445 to only the internal interface.

Answer

C. Close ports 22 and 139. Bind ports 137, 138, and 445 to only the internal interface.

Answer

D. Close ports 22, 137, and 138. Bind ports 110 and 445 to only the internal interface.

Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Exam CAS-004 All Questions

CompTIA CASP CAS-004 Question # 162 Topic 17 Discussion

Correct Answer:

Options Selected by Other Users:

Contribute your Thoughts: