2.7 Recommend Services to Disable, Given a Scenario 350-201 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A university has a server that runs a research data repository and also has the following services enabled: FTP (used by external researchers to upload data), SNMP (used for monitoring and not exposed to the internet), and Telnet (used by a legacy instrument for data transfer). The FTP service is exposed to the internet, and the Telnet service is also exposed. The researchers require FTP, and the instrument vendor requires Telnet. The security team wants to reduce risk. Which action should the security team take?

   • ADisable FTP and require researchers to use a secure file transfer service
   • BDisable SNMP and keep FTP and Telnet enabled
   • CDisable Telnet and require the instrument vendor to use SSH
   • DRestrict FTP and Telnet access to specific IP ranges and monitor for anomalies
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A government agency has a server that hosts a public-facing website and an internal document management system. The server also runs a legacy SNMP service with a weak community string, but the network team confirms it is not used for monitoring. Which service should be disabled?

   • AThe document management system
   • BThe public-facing website
   • CSNMP
   • DThe web server service
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A healthcare provider runs a server that hosts a patient portal and a database. The server also has a legacy FTP service enabled, but the provider now uses a secure API for data exchange. The security team plans to disable FTP. Which rationale should be included in the change request?

   • AFTP is not compliant with healthcare regulations.
   • BFTP is no longer used and transmits data in plaintext, creating a risk of data exposure.
   • CFTP is a legacy protocol that should be replaced with FTPS.
   • DFTP is difficult to monitor.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   A server runs a legacy FTP service that is no longer used by any application. Which justification best supports disabling the FTP service?

   • AFTP transmits credentials and data in cleartext, and the service is not needed for business operations
   • BFTP should be disabled because it is not a secure protocol, regardless of whether it is used
   • CFTP is a legacy service that should be disabled because all legacy services are insecure
   • DFTP is an outdated protocol that should be replaced with TFTP
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A hospital has a server that runs a patient records system and also has the following services enabled: Telnet (used by a legacy medical device vendor for diagnostics), SNMP (used for monitoring and not exposed to the internet), and FTP (used by a lab to upload test results). The Telnet service is exposed to the internet, and the vendor is not scheduled to migrate to SSH for another six months. The hospital's security team wants to reduce risk, but the vendor requires Telnet for support. Which action should the security team take?

   • ADisable SNMP and FTP to reduce the attack surface
   • BRestrict Telnet access to the vendor's IP address and monitor for anomalies
   • CDisable Telnet and require the vendor to use SSH immediately
   • DDisable all services except the patient records system
   Reveal Solution Discussion Select an answer first