A Linux server is running a log collector that needs to be hardened. A network administrator executes netstat to find open ports on the server. Which of the following ports should be disabled?

Rationale

Port 162 should be disabled on the Linux server.

Port 162 is associated with SNMP (Simple Network Management Protocol) traps, which can expose the server to potential security vulnerabilities if not properly secured. Disabling this port helps to reduce the attack surface of the server, especially if SNMP is not in use.

A (22) YOUR ANSWER

Port 22 is used for SSH (Secure Shell), a secure method for remote administration and file transfer. Disabling this port would prevent administrators from securely accessing the server, which is essential for maintenance and troubleshooting activities. Therefore, this port should typically remain open if remote access is needed.

B (80) YOUR ANSWER

Port 80 is the default port for HTTP traffic, allowing web services to be accessible. If the server hosts a web application or website, this port needs to remain open to serve content to users. Disabling it would hinder the server's ability to provide web services, which may not be desirable.

C (162) CORRECT

Port 162 is used for receiving SNMP traps, which are notifications sent from network devices. If the server does not utilize SNMP for monitoring or management, this port should be disabled to minimize the risk of unauthorized access or exploitation through SNMP-related vulnerabilities.

D (514) YOUR ANSWER

Port 514 is commonly used for syslog, a protocol for sending log messages to a logging server. If the server is configured to collect logs centrally, this port should remain open. Disabling it could disrupt logging functionality, which is crucial for security monitoring and troubleshooting.

Conclusion

In securing a Linux server, it is important to disable unnecessary ports to minimize vulnerabilities. Port 162, used for SNMP traps, poses a risk if SNMP is not in use and should be disabled to enhance security. In contrast, ports like 22, 80, and 514 serve essential functions for remote access, web services, and log management, respectively, and should remain active if those functionalities are required.

A Linux server is running a log collector that needs to be hardened. A network administrator executes netstat to find open ports on the server. Which of the following ports should be disabled?

Port 162 should be disabled on the Linux server.

Related Questions

Related Quizzes

How familiar were you with this question?

Report an Issue

Rate this Practice Test