Exam CAS-004 topic 1 question 373 discussion

Actual exam question from CompTIA's CAS-004

Question #: 373
Topic #: 1

A security engineer is assessing a legacy server and needs to determine if FTP is running and on which port. The service cannot be turned off, as it would impact a critical application's ability to function. Which of the following commands would provide the information necessary to create a firewall rule to prevent that service from being exploited?

A. service –-status-all | grep ftpd
B. chkconfig –-list
C. netstat –tulpn
D. systemctl list-unit-file –-type service ftpd
E. service ftpd status

Show Suggested Answer

Suggested Answer: C 🗳️

by weaponxcel at Oct. 22, 2023, 6:50 p.m.

Comments

Submit Cancel

weaponxcel

Highly Voted 8 months ago

Selected Answer: C

C. netstat –tulpn -t : Display TCP connections. -u : Display UDP connections. -l : Display listening socket (services). -p : Display the process associated with the service. -n : Display numerical addresses instead of resolving hostnames. The output of this command will show all active network connections and listening ports along with the associated processes. You can then identify if FTP is running and on which port.

upvoted 7 times

...

OdinAtlasSteel

Most Recent 7 months, 2 weeks ago

Selected Answer: C

The most appropriate command to identify if FTP is running and on which port is netstat –tulpn. Once you identify the port, you can use that information to create a firewall rule to prevent exploitation.

upvoted 2 times

...