4

.pdf

School

St. Petersburg College *

*We aren’t endorsed by this school

Course

1358

Subject

Information Systems

Date

Feb 20, 2024

Type

pdf

Pages

10

Uploaded by MasterRain12063

4.3.7 Section Quiz Candidate: Anthony Patrizzi (apatrizzi324@gmail.com) Date: 2/2/2024, 9:57:20 PM • Time Spent: 02:41 Score: 90% Passing Score: 80% Question 1. Correct You have placed a File Transfer Protocol (FTP) server in your DMZ behind your firewall. The FTP server is to be used to distribute software updates and demonstration versions of your products. However, users report that they are unable to access the FTP server. What should you do to enable access? Open ports 20 and 21 for outbound connections. Install a VPN. Move the FTP outside of the firewall. Define user accounts for all external visitors. Explanation To allow FTP traffic into your DMZ, you must open the correct ports on the firewall. For FTP, the correct ports are 20 and 21 for outbound connections. Installing a VPN is not necessary to grant access to external users. Defining user accounts may be required in some situations, but this scenario requires anonymous access. Moving the FTP server outside the firewall is not a secure action. References 4.3.2 File System Security Facts 5.1.2 Security Zones 5.1.3 Security Zone Facts 5.2.1 Demilitarized Zones 5.2.2 Configuring a DMZ 5.2.3 Configure a DMZ Individual Response about:srcdoc 1 of 10 2/17/2024, 3:45 PM
Question 2. Correct FTPS uses which mechanism to provide security for authentication and data transfer? IPsec Multi-factor authentication Token devices SSL Explanation File Transfer Protocol Secure (FTPS) uses Secure Sockets Layer (SSL) to provide security for authentication and data transfer. FTPS is an FTP replacement that brings reasonable security to an otherwise unsecure file-transfer mechanism. FTP by itself is unsecure because FTP transmits logon credentials in cleartext and does not encrypt transmitted files. References 4.3.1 File Server Security 4.3.2 File System Security Facts 4.3.3 File Permission Facts 4.3.4 Configuring NTFS Permissions 10.1.3 Secure Protocol Facts q_file_sys_sec_ftps_secp7.question.fex Question 3. Correct Individual Response about:srcdoc 2 of 10 2/17/2024, 3:45 PM
To transfer files to your company's internal network from home, you use FTP. The administrator has recently implemented a firewall at the network perimeter and disabled as many ports as possible. Now, you can no longer make the FTP connection. You suspect the firewall is causing the issue. Which ports need to remain open so you can still transfer the files? (Select two.) 80 20 21 23 443 Explanation FTP uses port 21 for connection requests and port 20 for data transfers. Both ports need to remain open for you to transfer files to your company's internal network from home. Telnet uses port 23, SSL uses port 443, and HTTP uses port 80. References 4.3.1 File Server Security 4.3.2 File System Security Facts 4.3.3 File Permission Facts 4.3.4 Configuring NTFS Permissions 10.1.3 Secure Protocol Facts q_file_sys_sec_ftp_secp7.question.fex Question 4. Incorrect You want to close all ports associated with NetBIOS on your network's firewalls to prevent attacks directed against NetBIOS. Which ports should you close? 67, 68 Individual Response about:srcdoc 3 of 10 2/17/2024, 3:45 PM
135, 137-139 161, 162 389, 636 Explanation NetBIOS uses the following ports: TCP 135 TCP and UDP 137 TCP and UDP 138 TCP 139 Dynamic Host Configuration Protocol (DHCP) uses ports 67 and 68. Simple Network Management Protocol (SNMP) uses ports 161 and 162. Lightweight Directory Access Protocol (LDAP) uses ports 389 and 636. References 4.3.2 File System Security Facts q_file_sys_sec_netbios_secp7.question.fex Question 5. Correct Which of the following file transfer protocols use SSH to provide confidentiality during the transfer? (Select two.) SFTP SCP HTTPS FTP Individual Response about:srcdoc 4 of 10 2/17/2024, 3:45 PM
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help