CompTIA Exam CV0-004 Topic 1 Question 11 Discussion

Actual exam question for CompTIA's CV0-004 exam

Question #: 11
Topic #: 1

A systems administrator notices a surge of network traffic is coming from the monitoring server. The administrator discovers that large amounts of data are being downloaded to an external source. While investigating, the administrator reviews the following logs:

Which of the following ports has been compromised?

APort 20

BPort 22

CPort 443

DPort 4443

EPort 8048

Show Suggested Answer

Suggested Answer: E

Based on the logs provided, the port that has been compromised is Port 8048. The state 'TIME_WAIT' indicates that this port was recently used to establish a connection that has now ended. This could be indicative of the recent activity where large amounts of data were downloaded to an external source, suggesting a potential security breach. Reference: CompTIA Cloud+ Study Guide (Exam CV0-004) by Todd Montgomery and Stephen Olson

by Hyman at Jun 01, 2024, 01:50 AM

Limited Time Offer

25%

Off

Get Premium CV0-004 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Stephanie

10 months ago

Uh-oh, looks like the monitoring server is up to no good. I'm going to have to go with Port 22 on this one. It's always the sneaky ones, isn't it?

upvoted 0 times

Edward

9 months ago

Let's also check for any unauthorized access to the monitoring server to prevent future incidents.

upvoted 0 times

...

Renato

9 months ago

I think we should block all traffic on Port 22 until we figure out what's going on.

upvoted 0 times

...

Cassandra

10 months ago

I agree, Port 22 is definitely suspicious. We need to investigate further.

upvoted 0 times

...

Arthur

10 months ago

Alright, let's see here... The logs are pretty clear, I reckon Port 8048 is the one that's been compromised. Time to shut that bad boy down before it causes any more trouble!

upvoted 0 times

Wenona

9 months ago

Let's make sure to update our security measures to prevent this from happening again in the future.

upvoted 0 times

...

Krissy

9 months ago

I think we should also investigate how the breach happened in the first place. It's important to prevent future incidents.

upvoted 0 times

...

Lonny

9 months ago

I agree, Port 8048 seems to be the one that's compromised. We should definitely shut it down.

upvoted 0 times

...

Lashandra

10 months ago

Whoa, this is a tricky one! The logs show a lot of data being downloaded, but which port is the issue? I'm going with Port 443, seems like the most likely suspect.

upvoted 0 times

...

Floyd

10 months ago

I agree with Barrett, Port 22 seems to be the one compromised based on the logs.

upvoted 0 times

...

Susana

10 months ago

Hmm, looks like the monitoring server is the one causing the trouble. I'd say Port 4443 is the culprit. Gotta love it when the 'monitor' becomes the 'monitored'!

upvoted 0 times