CompTIA Exam CV0-004 Topic 4 Question 13 Discussion

Actual exam question for CompTIA's CV0-004 exam

Question #: 13
Topic #: 4

A systems administrator notices a surge of network traffic is coming from the monitoring server. The administrator discovers that large amounts of data are being downloaded to an external source. While investigating, the administrator reviews the following logs:

Which of the following ports has been compromised?

APort 20

BPort 22

CPort 443

DPort 4443

EPort 8048

Show Suggested Answer

Suggested Answer: E

Based on the logs provided, the port that has been compromised is Port 8048. The state 'TIME_WAIT' indicates that this port was recently used to establish a connection that has now ended. This could be indicative of the recent activity where large amounts of data were downloaded to an external source, suggesting a potential security breach. Reference: CompTIA Cloud+ Study Guide (Exam CV0-004) by Todd Montgomery and Stephen Olson

by Cathern at Jul 04, 2024, 11:16 PM

Limited Time Offer

25%

Off

Get Premium CV0-004 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sylvie

4 months ago

I'm picturing the admin just sitting back, rubbing their hands together, and wondering who's going to choose the right port. Gotta love these tricky networking questions!

upvoted 0 times

...

Ty

4 months ago

Haha, the correct answer is definitely port 8048. It's like the admin was playing a game of 'guess the obscure port' and trying to stump us!

upvoted 0 times

...

Jarvis

4 months ago

I'm going to say port 22. SSH is a common target for attacks, and the logs point to some suspicious activity on that port.

upvoted 0 times

Eric

3 months ago

I think we should focus on investigating port 22 further.

upvoted 0 times

...

Aleta

3 months ago

True, but the logs seem to indicate activity on port 22.

upvoted 0 times

...

Toi

3 months ago

But what about port 443? It's also a common port for secure web traffic.

upvoted 0 times

...

Gabriele

3 months ago

I agree, port 22 is a common target for attacks.

upvoted 0 times

...

Marnie

5 months ago

Port 443 is the obvious choice here. It's used for HTTPS, and the large data downloads indicate a potential breach.

upvoted 0 times

...

Truman

5 months ago

I'm going with port 4443. That port number stands out, and it's not a common one, so it's likely the culprit.

upvoted 0 times

Earlean

3 months ago

Let's block port 4443 for now to prevent any further data exfiltration.

upvoted 0 times

...

Herminia

3 months ago

I think we should investigate further to see what exactly is going on with that port.

upvoted 0 times

...

Narcisa

3 months ago

I agree, port 4443 does seem suspicious. It's not a commonly used port for regular traffic.

upvoted 0 times

...

Sharan

4 months ago

Let's focus on port 4443 and see if we can block the unauthorized data transfer.

upvoted 0 times

...

Kasandra

4 months ago

Port 4443 is definitely worth looking into. Let's see if we can trace where the data is going.

upvoted 0 times

...

Ronnie

4 months ago

I agree, port 4443 does seem suspicious. We should investigate further.

upvoted 0 times

...

Ula

5 months ago

Hmm, from the logs, it looks like port 8048 is the one that's been compromised. That's not a typical port, so it seems suspicious.

upvoted 0 times

Margot

4 months ago

Yeah, let's block that port and see if the network traffic decreases.

upvoted 0 times

...

Fidelia

4 months ago

I agree, port 8048 does seem suspicious. We should investigate further.

upvoted 0 times

...

Leanora

5 months ago

That makes sense, Port 443 is a common target for attackers trying to steal data.

upvoted 0 times

...

Coral

5 months ago

I disagree, I believe it's Port 443 because it's commonly used for HTTPS traffic.

upvoted 0 times

...

Leanora

5 months ago

I think the compromised port is Port 22.

upvoted 0 times

...