GAQM CPEH-001 Exam - Topic 2 Question 117 Discussion

Actual exam question for GAQM's CPEH-001 exam

Question #: 117
Topic #: 2

While examining audit logs, you discover that people are able to telnet into the SMTP server on port 25. You would like to block this, though you do not see any evidence of an attack or other wrong doing. However, you are concerned about affecting the normal functionality of the email server. From the following options choose how best you can achieve this objective?

ABlock port 25 at the firewall.

BShut off the SMTP service on the server.

CForce all connections to use a username and password.

DSwitch from Windows Exchange to UNIX Sendmail.

ENone of the above.

Show Suggested Answer

Suggested Answer: E

Blocking port 25 in the firewall or forcing all connections to use username and password would have the consequences that the server is unable to communicate with other SMTP servers. Turning of the SMTP service would disable the email function completely. All email servers use SMTP to communicate with other email servers and therefore changing email server will not help.

by Caitlin at Nov 19, 2025, 04:19 AM

Limited Time Offer

25%

Off

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Elmira

10 hours ago

Forcing username and password sounds reasonable, but is it enough?

upvoted 0 times

...

Lakeesha

6 days ago

I disagree, shutting off the SMTP service would break email functionality!

upvoted 0 times

...

Gianna

11 days ago

Ah, the age-old debate: Windows vs. Unix. I say, let's just turn off the darn SMTP service and call it a day. No need to start a holy war here.

upvoted 0 times

...

Sabra

16 days ago

Switching to Sendmail? That's like trading your Honda Civic for a horse and buggy. Stick with what you know, folks.

upvoted 0 times

...

Galen

21 days ago

Forcing username and password authentication is overkill. Just turn off the SMTP service and call it a day.

upvoted 0 times

...

Vincenza

26 days ago

Blocking port 25 at the firewall might work, but it could cause issues with other services. Better to disable the SMTP service directly.

upvoted 0 times

...

Tammy

1 month ago

Option B is the way to go. Shutting off the SMTP service is the most straightforward solution.

upvoted 0 times

...

Rosio

1 month ago

I vaguely recall a practice question about switching email servers, but I don't think changing to UNIX Sendmail would solve the telnet issue either.

upvoted 0 times

...

Abel

1 month ago

Forcing connections to use a username and password sounds like a good idea, but I’m not sure if that would actually prevent telnet access.

upvoted 0 times

...

Kaitlyn

2 months ago

I think shutting off the SMTP service entirely would definitely stop telnet access, but then we wouldn't be able to send or receive emails at all.

upvoted 0 times

...

Annice

2 months ago

I remember we discussed how blocking port 25 might disrupt email delivery, but isn't it risky to leave it open?

upvoted 0 times

...

Lettie

2 months ago

I'm not sure about this one. Blocking port 25 seems like the obvious choice, but I don't want to cause any disruptions. Maybe I'll ask the instructor for some guidance on the best approach.

upvoted 0 times

...

Lamonica

2 months ago

I think A is the best choice. Block it at the firewall.

upvoted 0 times

...

Timothy

2 months ago

Forcing authentication could work, but that might be a hassle for users. I'm leaning towards blocking port 25 at the firewall, but I want to make sure I understand the implications first.

upvoted 0 times

...

Leonida

3 months ago

Blocking port 25 at the firewall seems like a solid move.

upvoted 0 times

...

Mari

3 months ago

Blocking port 25 is probably the simplest solution, but I'm worried about the impact on normal email functionality. I'll have to think this through carefully.

upvoted 0 times

...

Josephine

3 months ago

I'm a bit confused. Shutting off the SMTP service or switching to Sendmail seems a bit extreme. Maybe forcing authentication is a good compromise?

upvoted 0 times

...

Argelia

3 months ago

Hmm, this is a tricky one. I don't want to disrupt the email server, but blocking port 25 seems like the safest bet.

upvoted 0 times

Daniel

2 months ago

Blocking port 25 sounds reasonable. Better safe than sorry.

upvoted 0 times

...