Exam 312-50 topic 8 question 349 discussion

Actual exam question from ECCouncil's 312-50

Question #: 349
Topic #: 8

While examining audit logs, you discover that people are able to telnet into the SMTP server on port 25. You would like to block this, though you do not see any evidence of an attack or other wrong doing. However, you are concerned about affecting the normal functionality of the email server. From the following options choose how best you can achieve this objective?

A. Block port 25 at the firewall.
B. Shut off the SMTP service on the server.
C. Force all connections to use a username and password.
D. Switch from Windows Exchange to UNIX Sendmail.
E. None of the above.

Show Suggested Answer

Suggested Answer: E 🗳️

by dimaste at March 4, 2021, 3:25 p.m.

Comments

Submit Cancel

boog

6 months, 2 weeks ago

Selected Answer: C

By enforcing authentication using a username and password for SMTP connections, you can ensure that only authorized users are able to access the SMTP server. This can be achieved by implementing SMTP authentication mechanisms such as SMTP-AUTH or STARTTLS, which require clients to provide valid credentials before establishing a connection to the server. Blocking port 25 at the firewall (option A) would indeed prevent telnet access to the SMTP server, but it would also affect legitimate email communication as port 25 is the standard SMTP port used for email delivery. Shutting off the SMTP service on the server (option B) would completely disable email functionality. Switching from Windows Exchange to UNIX Sendmail (option D) is not necessary to address the issue at hand and would involve a significant infrastructure change. ---ChatGPT

upvoted 1 times

...

gauravtewari

2 years ago

Blocking port 25 in the firewall or forcing all connections to use username and password would have the consequences that the server is unable to communicate with other SMTP servers. Turning of the SMTP service would disable the email function completely. All email servers use SMTP to communicate with other email servers and therefore changing email server will not help. So None of the above option is true.

upvoted 2 times

...

dimaste

2 years, 9 months ago

Why not C

upvoted 1 times

fishPSU21

2 years, 8 months ago

a hacker can just get the username and password from an employee and then it will be be compromised. This wouldn't be an effective method.

upvoted 1 times

...