CompTIA Exam CV0-004 Topic 6 Question 15 Discussion

Actual exam question for CompTIA's CV0-004 exam

Question #: 15
Topic #: 6

A systems administrator notices a surge of network traffic is coming from the monitoring server. The administrator discovers that large amounts of data are being downloaded to an external source. While investigating, the administrator reviews the following logs:

Which of the following ports has been compromised?

APort 20

BPort 22

CPort 443

DPort 4443

EPort 8048

Show Suggested Answer

Suggested Answer: E

Based on the logs provided, the port that has been compromised is Port 8048. The state 'TIME_WAIT' indicates that this port was recently used to establish a connection that has now ended. This could be indicative of the recent activity where large amounts of data were downloaded to an external source, suggesting a potential security breach. Reference: CompTIA Cloud+ Study Guide (Exam CV0-004) by Todd Montgomery and Stephen Olson

by Afton at Jul 16, 2024, 07:13 PM

Limited Time Offer

25%

Off

Get Premium CV0-004 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Barb

4 months ago

Aha! Port 22 is the obvious choice. If I were a hacker, that's the first port I'd try to compromise. Gotta love the classics, am I right?

upvoted 0 times

King

2 months ago

Helga: We should definitely investigate further to prevent any data breaches.

upvoted 0 times

...

Helga

2 months ago

Yeah, it's definitely a popular choice for unauthorized access.

upvoted 0 times

...

Raina

3 months ago

I agree, Port 22 is a common target for hackers.

upvoted 0 times

...

Quentin

4 months ago

My money's on port 443. It's the standard HTTPS port, and a hacker could be using that to mask their activities. Tricky, but not unheard of.

upvoted 0 times

...

Tambra

4 months ago

Hmm, port 8048 is a bit suspicious. Who uses that port, anyway? Definitely worth a closer look.

upvoted 0 times

Lai

3 months ago

Let's block that port until we figure out what's happening.

upvoted 0 times

...

Horace

3 months ago

We should definitely investigate further to see what's going on with that port.

upvoted 0 times

...

Raymon

3 months ago

Maybe it's being used for some kind of unauthorized data transfer.

upvoted 0 times

...

Wilburn

3 months ago

I agree, port 8048 seems out of the ordinary.

upvoted 0 times

...

Mitsue

4 months ago

I'd say it's port 4443. That's an uncommon port, and it might be used to bypass security measures. Better investigate that one.

upvoted 0 times

Ira

4 months ago

I'm with you both. Let's prioritize checking port 4443 for any security breaches.

upvoted 0 times

...

Katy

4 months ago

Yeah, I agree. Let's focus on investigating that port further.

upvoted 0 times

...

Gussie

4 months ago

I think it's port 4443 too. It looks suspicious.

upvoted 0 times

...

Ben

4 months ago

That's true, both ports are high-risk. We should investigate further to be sure.

upvoted 0 times

...

Virgina

5 months ago

Port 443 is for HTTPS, which is also a common target. It could be compromised too.

upvoted 0 times

...

Luke

5 months ago

But Port 22 is commonly used for SSH, it could be a target for attackers.

upvoted 0 times

...

Arlene

5 months ago

Port 22 looks like the culprit. That's the default port for SSH, and it would make sense for a hacker to use that to gain unauthorized access.

upvoted 0 times

Kallie

3 months ago

I think we should block Port 22 temporarily to prevent any further data exfiltration. We can then analyze the logs to determine the extent of the breach.

upvoted 0 times

...