7. Recognize Common Protocol Port Values (such as, SSH, Telnet, HTTP, HTTPS, and NETCONF) 200-901 Practice Questions (Page 6)

Questions 26–29

1. 26expert · hard

   A security audit reveals that a network device is listening on ports 22, 23, 80, 443, and 830. The audit recommends disabling all unencrypted management and web protocols. Which ports should be disabled to comply with the audit?

   • A23 only
   • B23 and 80
   • C80 only
   • D22, 443, and 830
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which TCP port is the default for NETCONF?

   • A22
   • B830
   • C443
   • D80
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A network administrator is configuring a firewall for a web server that hosts both a public-facing HTTPS site and an internal HTTP management interface. The firewall has a single inbound rule that currently allows TCP 443. The administrator wants to allow the internal management interface to be accessed only from the internal management subnet (192.168.10.0/24). Which configuration change is required?

   • AChange the existing rule to allow TCP 80 and 443 from any source
   • BAdd a rule allowing TCP 443 from the management subnet only
   • CModify the existing rule to allow TCP 80 from any source
   • DAdd a separate rule allowing TCP 80 from the management subnet only
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A network engineer is designing a firewall policy for a new branch office. The policy must allow: (1) secure remote administration of network devices from the corporate IT team, (2) secure web access to a public website, and (3) NETCONF-based configuration management from a central automation server. The engineer wants to minimize the number of open ports while meeting all requirements. Which set of TCP ports should be permitted?

   • A23, 443, and 830
   • B22, 443, and 830
   • C22, 80, and 830
   • D22, 443, and 23
   Reveal Solution Discussion Select an answer first