Discuss ISC2 SSCP Exam Topic 8 Question 52

What is the primary reason why some sites choose not to implement Trivial File Transfer Protocol (TFTP)?

AIt is too complex to manage user access restrictions under TFTP

BDue to the inherent security risks

CIt does not offer high level encryption like FTP

DIt cannot support the Lightwight Directory Access Protocol (LDAP)

Suggested Answer: B

Some sites choose not to implement Trivial File Transfer Protocol (TFTP) due to the inherent security risks. TFTP is a UDP-based file transfer program that provides no security. There is no user authentication.

Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 88.

Get Premium SSCP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Alease 11 months ago

A is a valid point, but I think security is the bigger issue.

Lynette 12 months ago

Surprised to see TFTP still in discussion, isn't it pretty outdated?

Malcolm 12 months ago

I thought it was just about the lack of encryption, C makes sense too.

Malinda 12 months ago

Totally agree, B is definitely the main reason!

Aleisha 1 year ago

It's mainly the security risks that hold people back from using TFTP.

Tammara 1 year ago

I don't recall LDAP being a major issue with TFTP, so I think options B and C are more relevant here.

Brittni 1 year ago

I feel like user access management is a concern too, but it seems like security risks are more commonly cited in discussions.

Ryan 1 year ago

I remember practicing a question about TFTP and its lack of encryption. That might be a reason some sites avoid it.

Man 1 year ago

I think the main reason is probably related to security risks, but I'm not entirely sure if that's the only factor.

Clay 1 year ago

I feel confident I know the right approach for this. Configuring Citrix Gateway in the proper mode and enabling the right clientless access settings should do the trick.

Florinda 1 year ago

I'm a bit confused on whether to start with the baseline or target architecture. The question mentions that the target architecture is not very clear, so maybe it's better to start with the baseline and then iterate to the target?

Shawna 1 year ago

This looks like a straightforward Excel formatting question. I think the best approach is to use one of the pre-built themes in Excel, as that will give the document a professional and consistent look with minimal effort.

ISC2 SSCP Exam - Topic 8 Question 52 Discussion