Exam CS0-002 topic 1 question 184 discussion

DNS server on a database server is unnecessary.

Correct me if I'm wrong, but I believe IIS can be used to redirect http traffic to https. In my mind this means http/s are both needed, making ssh the only protocol that doesn't HAVE to be on either of the servers

You don't need DNS on a database server.

Why enable SSH on Windows Servers?

I agree that DNS is not needed on a database server

I wonder if this question is missing the "choose two options" verbiage, because it has 5 options which is typical of those types of questions, and both IIS and DNS should be disabled.

You have two ports that shouldn't be open. 1027 IIS on web server (non-standar) and 53 DNS on database server (unnecessary). so, if I had to choose only one option I would choose to disable port 1027 on the web server - in general, an open port on a web server running IIS (Internet Information Services) may be more vulnerable to attacks than a port running DNS (Domain Name System) on a database server. This is because web servers are often exposed to the internet and are frequently targeted by attackers, while database servers are typically located within a private network and are less frequently targeted

IIS is running on a non standard port.

It is a windows web server.. Why SSH?

Must be the worst question I have seen!! I'd have to opt for removal of SSH as nowhere in the question does it talk about the necessity for remote management. But 1027 should also be removed and don't think we need DNS on a SQL server!!! What a load of cods wallop

This question sux. while we have IIS running on a non-standard 1027 port, we also have DNS running on a SQL server. I have never ever seen the DNS running on a resource intensive server like SQL.

Services must run on standard ports.

IIS --> Windows MSSQL ---> Windows Why would you need ssh on a windows environment??? I think E is the right answer. I'm open to discuss it.

B. Dissable IIS on .1 - Policy states that services must run on standard ports and 1027 regardless of what service its running is not a standard port. Shutting that port down might cause temporary issues with a service but policy is policy.

bases on the company policies C its the best answer, everything else, based on company policies, its right

B for sure.

IIS running on port 1027 is non standard, and it's an additional open http port on the web server