Discuss GAQM CPEH-001 Exam Topic 2 Question 117

While examining audit logs, you discover that people are able to telnet into the SMTP server on port 25. You would like to block this, though you do not see any evidence of an attack or other wrong doing. However, you are concerned about affecting the normal functionality of the email server. From the following options choose how best you can achieve this objective?

ABlock port 25 at the firewall.

BShut off the SMTP service on the server.

CForce all connections to use a username and password.

DSwitch from Windows Exchange to UNIX Sendmail.

ENone of the above.

Suggested Answer: E

Blocking port 25 in the firewall or forcing all connections to use username and password would have the consequences that the server is unable to communicate with other SMTP servers. Turning of the SMTP service would disable the email function completely. All email servers use SMTP to communicate with other email servers and therefore changing email server will not help.

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

30 comments · newest first

Melda 6 months ago

E could be an option too. Maybe we need more info.

Valentin 6 months ago

I agree with C. Username and password adds security.

Martha 7 months ago

Shutting off SMTP? That's drastic! B is not wise.

Susana 7 months ago

A seems straightforward. Better safe than sorry.

Audrie 7 months ago

But won't that disrupt email? Maybe C is safer.

Beatriz 7 months ago

Switching to UNIX Sendmail might not be necessary if we can just secure port 25.

Jade 7 months ago

Wait, people are still using telnet for SMTP? That's wild!

Elmira 8 months ago

Forcing username and password sounds reasonable, but is it enough?

Lakeesha 8 months ago

I disagree, shutting off the SMTP service would break email functionality!

Gianna 8 months ago

Ah, the age-old debate: Windows vs. Unix. I say, let's just turn off the darn SMTP service and call it a day. No need to start a holy war here.

Sabra 8 months ago

Switching to Sendmail? That's like trading your Honda Civic for a horse and buggy. Stick with what you know, folks.

Galen 9 months ago

Forcing username and password authentication is overkill. Just turn off the SMTP service and call it a day.

Vincenza 9 months ago

Blocking port 25 at the firewall might work, but it could cause issues with other services. Better to disable the SMTP service directly.

Tammy 9 months ago

Option B is the way to go. Shutting off the SMTP service is the most straightforward solution.

Rosio 9 months ago

I vaguely recall a practice question about switching email servers, but I don't think changing to UNIX Sendmail would solve the telnet issue either.

Abel 9 months ago

Forcing connections to use a username and password sounds like a good idea, but I’m not sure if that would actually prevent telnet access.

Kaitlyn 9 months ago

I think shutting off the SMTP service entirely would definitely stop telnet access, but then we wouldn't be able to send or receive emails at all.

Annice 10 months ago

I remember we discussed how blocking port 25 might disrupt email delivery, but isn't it risky to leave it open?

Lettie 10 months ago

I'm not sure about this one. Blocking port 25 seems like the obvious choice, but I don't want to cause any disruptions. Maybe I'll ask the instructor for some guidance on the best approach.

Lamonica 10 months ago

I think A is the best choice. Block it at the firewall.

Timothy 10 months ago

Forcing authentication could work, but that might be a hassle for users. I'm leaning towards blocking port 25 at the firewall, but I want to make sure I understand the implications first.

Leonida 11 months ago

Blocking port 25 at the firewall seems like a solid move.

Mari 11 months ago

Blocking port 25 is probably the simplest solution, but I'm worried about the impact on normal email functionality. I'll have to think this through carefully.

Josephine 11 months ago

I'm a bit confused. Shutting off the SMTP service or switching to Sendmail seems a bit extreme. Maybe forcing authentication is a good compromise?

Argelia 11 months ago

Hmm, this is a tricky one. I don't want to disrupt the email server, but blocking port 25 seems like the safest bet.

Jina 6 months ago

↳ replying to Argelia

Switching to UNIX Sendmail could be overkill for this issue.

Shannan 6 months ago

↳ replying to Argelia

I agree, we need to maintain normal operations.

Raina 6 months ago

↳ replying to Argelia

Maybe forcing username and password is a better option?

Catina 6 months ago

↳ replying to Argelia

But what if it disrupts email functionality?

Daniel 10 months ago

↳ replying to Argelia

Blocking port 25 sounds reasonable. Better safe than sorry.

GAQM CPEH-001 Exam - Topic 2 Question 117 Discussion