CompTIA Exam CAS-004 Topic 1 Question 53 Discussion

Actual exam question for CompTIA's CAS-004 exam

Question #: 53
Topic #: 1

A security engineer is assessing a legacy server and needs to determine if FTP is running and on which port The service cannot be turned off, as it would impact a critical application's ability to function. Which of the following commands would provide the information necessary to create a firewall rule to prevent that service from being exploited?

Aservice ---status-ali I grep ftpd

Bchkconfig --list

Cneestat -tulpn

Dsysteactl list-unit-file ---type service ftpd

Eservice ftpd. status

Show Suggested Answer

Suggested Answer: C

The netstat -tulpn command is used to display network connections, routing tables, interface statistics, masquerade connections, and multicast memberships. The -tulpn options specifically show TCP and UDP connections with the process ID and the name that is listening on each port, which would provide the necessary information to identify if FTP is running and on which port without turning the service off. This information can then be used to create a precise firewall rule to prevent the FTP service from being exploited.

by Nana at Jun 23, 2024, 04:44 AM

Limited Time Offer

25%

Off

Get Premium CAS-004 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Antonio

5 months ago

I agree with Edna, option C seems like the best choice for determining the port number for FTP.

upvoted 0 times

...

Cordelia

5 months ago

Hey, guys, I've got a great idea! Why don't we just unplug the server and see what happens? That'll definitely solve the FTP problem, am I right? Or maybe we could just throw it out the window, that might work too.

upvoted 0 times

Rozella

3 months ago

C: Let's focus on using the right command to determine if FTP is running and on which port.

upvoted 0 times

...

Dalene

4 months ago

B: Yeah, that would cause a lot more problems. We need to find a more strategic solution.

upvoted 0 times

...

Vilma

4 months ago

A: No way, that's a terrible idea. We can't just unplug the server.

upvoted 0 times

...

Emogene

4 months ago

C) neestat -tulpn

upvoted 0 times

...

Willow

4 months ago

B) chkconfig --list

upvoted 0 times

...

Myra

4 months ago

A) service ---status-ali I grep ftpd

upvoted 0 times

...

Edna

5 months ago

That makes sense, but I still think option C is more relevant for identifying the port FTP is running on.

upvoted 0 times

...

Trinidad

5 months ago

I disagree, I believe the correct answer is D) systeactl list-unit-file --type service ftpd as it lists all the systemd unit files for the service.

upvoted 0 times

...

Bernardo

5 months ago

Whoa, whoa, whoa, hold up. Did you guys seriously just suggest 'neestat'? I think you need to lay off the caffeine, my friends. Option D is the way to go, no doubt about it.

upvoted 0 times