Exam CS0-002 topic 1 question 104 discussion

TCP port 465 is commonly used for Secure SMTP (SMTPS) traffic, which is an encrypted version of Simple Mail Transfer Protocol (SMTP). SMTPS is used for secure communication between mail servers and other mail clients. If the security analyst is noticing encrypted inbound traffic on TCP port 465 from a database server, it is most likely that someone has configured an unauthorized SMTP application over SSL. This could pose a security risk if the encrypted traffic is carrying sensitive information, as it could potentially be intercepted and decrypted by an attacker. The security analyst should investigate the cause of the traffic and determine if the SMTP application is authorized and properly secured, and take necessary action to remediate any security risks identified.

B: "Someone has configured an unauthorized SMTP application over SSL" as the reason for the traffic on TCP port 465. SMTP (Simple Mail Transfer Protocol) is commonly used for sending email messages, and port 465 is typically associated with SMTP over SSL (Secure Sockets Layer) or SMTPS. The use of encryption on this port suggests that the traffic is related to email communication, and the fact that it is inbound traffic from a database server indicates that an unauthorized SMTP application over SSL may have been configured.

B. Although, this port has been deprecated, A&D could also use this port, but it is not "Most Likely" those would use port 465. https://www.mailgun.com/blog/email/which-smtp-port-understanding-ports-25-465-587/

chat GBT says B

Port 465 is used for implicit TLS and can be used to facilitate secure communications for mail services.

Can someone please tell me why we chose B? Thanks in advance.

looks good to me

correct answer