56) A security administrator at a corporation wishes to secure a Linux server th

Question

56) A security administrator at a corporation wishes to secure a Linux server that hosts multiple services. The administrator needs to ensure remote Administration services remain accessible. Other services that need to remain accessible are SMTP, TFTP, DNS, and FTP. All other services should be inaccessible from the rest of the network. The administrator runs a network status tool on the server and receives the following output:

Which of the following actions should the administrator take to meet these requirements? A Block ports 20, 22, 69, 143, and 547 on the host firewall B. Block ports 20, 67, 123, 143, and 547 on the host firewall C. Block ports 20, 88,123, 547, and 631 on the host firewall. D. Block ports 21, 25, 88,143, and 631 on the host firewall.

56)A security administrator at a corporation wishes to secure a Linux server that hosts multiple services. The administrator needs to ensure remote Administration services remain accessible. Other services that need to remain accessible are SMTP, TFTP, DNS, and FTP. All other services should be inaccessible from the rest of the network. The administrator runs a network status tool on the server and receives the following output: PROTO LOCAL ADDRESS TCP 0.0.0.0:22 TCP 0.0.0.0:25 TCP 0.0.0.0:53 UDP 0.0.0.0:69 TCP 0.0.0.0:88 TCP 0.0.0.0:110 TCP 127.0.0.1:123 TCP 127.0.0.1:631 TCP 192.168.1.10:20 0.0.0.0:* TCP 192.168.1.10:21 0.0.0.0: UDP 192.168.1.10:67 TCP 192.168.1.10:143 0.0.0.0: UDP6 :::547 FOREIGN ADDRESS 0.0.0.0: 0.0.0.0: 0.0.0.0:* 0.0.0.0: 0.0.0.0: 0.0.0.0: 0.0.0.0: 0.0.0.0: STATE LISTENING LISTENING LISTENING LISTENING LISTENING LISTENING LISTENING LISTENING LISTENING LISTENING LISTENING LISTENING LISTENING 0.0.0.0: Which ofthefollowing actions shoud the administrator take to meetthese requrements? A Block ports 20, 22, 69, 143, and 547 on the host firewall B. Block ports 20, 67, 123, 143, and 547 on the host firewall C. Block ports 20, 88,123, 547, and 631 on the host firewall D. Block ports 21, 25, 88,143, and 631 on the host firewall.

Explanation / Answer

We need remote Administration access, SMTP, TFTP, DNS AND FTP services working. All other should be blocked.

So option B is most appropriate as kerberos (port 88) is also used for remote Administration services.

Services Port Number SSH 22 Telnet 23 SMTP 25 TFTP 69 DNS 53 FTP 21

Related Questions

Navigate

• Browse (All)
• Browse 5
• Subjects

---

---

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.