CompTIA SK0-005 Exam - Topic 1 Question 18 Discussion

Actual exam question for CompTIA's SK0-005 exam

Question #: 18
Topic #: 1

A company's IDS has identified outbound traffic from one of the web servers coming over port 389 to an outside address. This server only hosts websites. The company's SOC administrator has asked a technician to harden this server. Which of the following would be the BEST way to complete this request?

ADisable port 389 on the server

BMove traffic from port 389 to port 443

CMove traffic from port 389 to port 637

DEnable port 389 for web traffic

Show Suggested Answer

Suggested Answer: C

https://www.auditmypc.com/tcp-port-637.asp

https://docs.microsoft.com/en-us/answers/QUESTION NO:s/66908/is-port-389-on-ad-in-anyway-used-or-required- when.html

by Beatriz at May 05, 2022, 07:08 AM

Limited Time Offer

25%

Off

Get Premium SK0-005 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Hillary

4 months ago

Wait, are we sure this traffic is malicious? Seems odd.

upvoted 0 times

...

Brunilda

4 months ago

Totally agree, port 389 should be closed!

upvoted 0 times

...

Buffy

4 months ago

Port 637? That's not a common web port, right?

upvoted 0 times

...

Brent

4 months ago

I think moving to port 443 makes more sense for security!

upvoted 0 times

...

Dorathy

5 months ago

Disabling port 389 is definitely the safest option.

upvoted 0 times

...

Amos

5 months ago

I practiced a similar question where we had to secure a server, and disabling unnecessary ports was always the recommended approach.

upvoted 0 times

...

My

5 months ago

I feel like enabling port 389 for web traffic doesn't make sense at all. Why would we want to allow that if it's not needed?

upvoted 0 times

...

Carylon

5 months ago

I'm not entirely sure, but I think moving traffic to port 443 might be a good idea since it's used for HTTPS. But would that even apply here?

upvoted 0 times

...

Gilbert

5 months ago

I remember studying that port 389 is typically used for LDAP, which doesn't really fit with a web server's purpose. Disabling it seems like a solid choice.

upvoted 0 times

...

Shenika

5 months ago

This question seems pretty straightforward. I think I can handle it.

upvoted 0 times

...

Arlene

5 months ago

Hmm, I'm not sure about the 'grant access using hierarchies' option. That could potentially have broader implications that I'd want to understand better before recommending it.

upvoted 0 times

...