350-201 Question 74
Select 3A company's cybersecurity team is tasked with hardening a newly deployed web server running on Cisco infrastructure. During the assessment, the team identifies several services running on the server, including FTP, Telnet, HTTP, SSH, and HTTPS. Which services should the team recommend disabling to reduce security risks while maintaining secure web server functionality?
- A
FTP
- B
Telnet
- C
HTTP
- D
SSH
- E
HTTPS
Show answer and explanation
Correct answers: A, B, C
Explanation
To harden the security of the web server, it is critical to disable insecure and outdated protocols like FTP, Telnet, and HTTP, as they transmit data in plaintext and are susceptible to eavesdropping and other attacks. SSH and HTTPS, on the other hand, provide secure encrypted communication channels and should remain enabled to maintain secure server functionality.
- A. Correct.
FTP is an insecure protocol because it transmits data, including credentials, in plaintext. Disabling FTP is recommended unless absolutely necessary.
- B. Correct.
Telnet is an outdated and insecure protocol that transmits data in plaintext. It should be disabled in favor of SSH for secure remote access.
- C. Correct.
HTTP is an unencrypted protocol for web traffic. It should be disabled in favor of HTTPS to ensure secure communication.
- D. Incorrect.
SSH is a secure protocol used for remote management and should be kept enabled to allow secure server administration.
- E. Incorrect.
HTTPS is an encrypted protocol for web traffic and is essential for secure communication. It should remain enabled.