MENU
Exhibit:
Given the following extract from the snort log on a honeypot, what service is being exploited? :
Suggested Answer: A
Get Premium CPEH-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The connection is done to 172.16.1.104:21.
11 comments · newest first
MA
Madalyn
12 months ago
I’m not convinced, could be a trick question.
DE
Desiree
12 months ago
Wait, are we sure it’s not SMTP? That would be wild!
PA
Paola
1 year ago
Telnet is super outdated, but could be a possibility.
DE
Desmond
1 year ago
I think it's SSH, though. Seems more likely.
MI
Michal
1 year ago
Definitely looks like FTP is being exploited here.
BR
Brett
1 year ago
I feel like SMTP could be involved, but I don't have a clear memory of its common exploits in honeypots.
RO
Roselle
1 year ago
Telnet seems like a likely option too, but I can't recall the specific logs that indicate it.
FR
Francesco
1 year ago
I remember studying FTP vulnerabilities, but I'm not entirely sure if that's what's being exploited here.
MI
Miles
1 year ago
I think it might be SSH since I practiced a similar question about SSH brute force attacks last week.
SH
Sherell
1 year ago
Okay, let me think this through. We need to hide the bank account numbers, so I'm guessing the answer is either marking the variable as sensitive or turning on secure input. I'll have to double-check the details on each of those options.
PA
Pa
1 year ago
Hmm, I'm a bit unsure about this one. The question is asking about something that could affect services, but I'm not totally clear on the differences between the options. I'll need to review my notes to refresh my memory on these concepts.