GSLC-2020: GIAC Security LeadershipDemo

By GIAC · Question Mode

QuestionQ260

Network Security Architecture

You are a Network Administrator for NetPerfect Inc. A firewall has been implemented on the company network. You need to ensure that external users cannot access the internal FTP servers on the network. What should you do to accomplish this task?

  • A Block the TCP port 443 on the firewall.
  • B Block the UDP port 1701 and TCP port 1723 on the firewall.
  • C Block the TCP port 80 on the firewall.
  • D Block the TCP ports 20 and 21 on the firewall.
Explanation

FTP uses TCP port 21 for control connections and TCP port 20 for active-mode data connections. Blocking TCP ports 20 and 21 at the firewall prevents external FTP access to the internal servers.

Community Discussion

No comments yet. Be the first to start the discussion!