ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 67 - SK0-005 discussion

Report
Export

A company’s IDS has identified outbound traffic from one of the web servers coming over port 389 to an outside address. This server only hosts websites. The company’s SOC administrator has asked a technician to harden this server. Which of the following would be the BEST way to complete this request?

A.
Disable port 389 on the server
Answers
A.
Disable port 389 on the server
B.
Move traffic from port 389 to port 443
Answers
B.
Move traffic from port 389 to port 443
C.
Move traffic from port 389 to port 637
Answers
C.
Move traffic from port 389 to port 637
D.
Enable port 389 for web traffic
Answers
D.
Enable port 389 for web traffic
Suggested answer: A

Explanation:

The best way to complete the request to harden the server is to disable port 389 on the server. Port 389 is the default port used by LDAP (Lightweight Directory Access Protocol), which is a protocol that allows access and modification of directory services over a network. LDAP can be used for authentication, authorization, or information retrieval purposes. However, LDAP does not encrypt its data by default, which can expose sensitive information or credentials to attackers who can intercept or modify the network traffic. Therefore, port 389 should be disabled on a web server that only hosts websites and does not need LDAP functionality. Alternatively, port 636 can be used instead of port 389 to enable LDAPS (LDAP over SSL/TLS), which encrypts the data using SSL/TLS certificates.

asked 02/10/2024
Paola Aguirre
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first