2.7 Recommend Services to Disable, Given a Scenario 350-201 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   A security team is reviewing services on a database server. The server runs: a database service (required), SSH (used by admins), and a legacy web management console on port 8080 that is no longer used. Which service should be prioritized for disabling?

   • ALegacy web management console
   • BDatabase service
   • CSSH
   • DAll services should be disabled
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A healthcare provider has a server that runs a patient portal (HTTPS) and also has a legacy SNMP service enabled for device monitoring. The SNMP service is not used because the monitoring system was replaced by a modern agent. The SNMP service is exposed to the internet. The security team wants to reduce risk. Which service should be disabled?

   • AHTTPS service
   • BNeither service
   • CSNMP service
   • DBoth HTTPS and SNMP
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   A server in a DMZ runs the following services: HTTP (port 80), HTTPS (port 443), and FTP (port 21). The server hosts a public website that is accessed via HTTPS. Which service poses the greatest security risk?

   • AFTP (port 21)
   • BHTTP (port 80)
   • CHTTPS (port 443)
   • DAll services pose equal risk
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   A server runs a legacy application that uses the RPC service. The security team recommends disabling RPC to reduce risk. What operational impact should be considered before disabling RPC?

   • AThe server may become unable to communicate with other systems that rely on RPC
   • BThe server will automatically become more secure with no negative impact
   • CThe server will lose its ability to run any applications
   • DThe server will no longer be able to use TCP/IP
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A manufacturing company has a server that runs a production scheduling system and also has the following services enabled: TFTP (used for network device backups during quarterly maintenance), SNMP (used for monitoring and not exposed to the internet), and RDP (used by IT administrators for remote management and exposed to the internet). The TFTP service is only needed during maintenance windows. The security team wants to reduce risk while maintaining operational capability. Which action should the security team take?

   • ADisable RDP and use a VPN for remote management
   • BDisable TFTP and enable it only during maintenance windows, and restrict RDP to a management VLAN
   • CDisable SNMP and keep TFTP and RDP enabled
   • DDisable TFTP permanently and use a secure backup method
   Reveal Solution Discussion Select an answer first