CompTIA JK0-022 - Questions & Answers

SSH uses TCP port 22. All protocols encrypted by SSH, including SFTP, SHTTP, SCP, SExec, and slogin, also use TCP port 22.

Incorrect Answers:
A, C: FTP ,and SSH do not make use of UDP ports.
B: FTP uses TCP port 21.

References:
Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, p 51.

SFTP encrypts authentication and data traffic between the client and server by making use of SSH to provide secure FTP communications. As a result, SFTP offers protection for both the authentication traffic and the data transfer taking place between a client and server.

Incorrect Answers:
A: SSH is employed by SFTP.
C: SMTP is the email-forwarding protocol used on the Internet and intranets.
D: Standard FTP does not provide any confidentiality protection because it sends all data in the clear.

References:
Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 49, 50.

FTP employs TCP ports 20 and 21 to establish and maintain client-to-server communications, whereas TFTP makes use of UDP port 69.

Incorrect Answers:
A: UDP is faster than TCP is because there is no form of flow control or error correction.
B: TFTP requires no authentication, whereas FTP allows authenticated connections.
C: As stated above, FTP employs TCP ports 20 and 21 and TFTP makes use of UDP port 69.

References:
Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 49, 50. (http://www.skullbox.net/tcpudp.php)

TFTP makes use of UDP port 69.

Incorrect Answers:
A, C: FTP (File Transfer Protocol) uses ports 20 and 21
D: Port 68 TCP/UDP is used by Bootstrap Protocol (BOOTP) Client; as well Dynamic Host Configuration Protocol (DHCP).

References:
Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, p 51. (http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers)

Telnet is a terminal-emulation network application that supports remote connectivity for executing commands and running applications but doesn't support transfer of fi les. Telnet uses TCP port 23. Because it's a clear text protocol and service, it should be avoided and replaced with SSH.

Incorrect Answers:
A, C: L2 switches may interconnect a small number of devices in a home or the office. They are normally used for LANs.
D: Port 25 is used by Simple Mail Transfer Protocol (SMTP) for e-mail routing between mail servers.

References:
Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, p 51. (http://en.wikipedia.org/wiki/Network_switch#Layer_2)
http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers

B: The Telnet program parameters are: telnet <hostname> <port> <hostname> is the name or IP address of the remote server to connect to. <port> is the port number of the service to use for the connection. TCP port 443 provides the HTTPS (used for secure web connections) service; it is the default SSL port. By
running the Telnet some-host 443 command, the security analyst is checking that routing is done properly and not blocked by a firewall.

Incorrect Answers:
A: The telnet command parameter used by the colleague is done to check what service is running, i.e. HTTPS, not an attempt to get a denial of service attack.
C: TCP port 443 will not allow an insecure remote session because is the default SSL port.
D: TCP port 443 is the default SSL port and SSH makes use of TCP port 22.

References:
https://support.microsoft.com/en-us/kb/290051
Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, p 83.

The LMHOSTS file provides a NetBIOS name resolution method that can be used for small networks that do not use a WINS server. NetBIOS has been adapted to run on top of TCP/IP, and is still extensively used for name resolution and registration in Windows-based environments.

Incorrect Answers:
A: Internet Control Message Protocol (ICMP) is a network health and link-testing protocol that is commonly used by tools such as ping, traceroute, and pathping. It is not include in the LMHOSTS file.
B: Border Gateway Protocol (BGP) is a standardized exterior gateway protocol designed to exchange routing and reachability information between autonomous systems (AS) on the Internet. It is not include in the LMHOSTS file.
C: Domain Name System (DNS) distributes the responsibility of assigning domain names and mapping those names to IP addresses by designating authoritative name servers for each domain.
It is not include in the LMHOSTS file.

References:
https://technet.microsoft.com/library/Cc977602
http://en.wikipedia.org/wiki/Border_Gateway_Protocol
http://en.wikipedia.org/wiki/Domain_Name_System

LDAP makes use of port 389.

Incorrect Answers:
A: RADIUS makes use of various UDP ports.
B: Kerberos makes use of port 88.
C: TACACS makes use of TCP port 49 by default.

References:
http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers

The question states that traffic on port 21, 69, 80, and 137-139 is blocked, while ports 22 and 443 are allowed.

Port 21 is used for FTP by default.
Port 69 is used for TFTP.
Port 80 is used for HTTP.
Ports 137-139 are used for NetBIOS.
VMM uses SFTP over default port 22.
Port 22 is used for SSH by default.
SCP runs over TCP port 22 by default.
Port 443 is used for HTTPS.

Incorrect Answers:
A: FTP uses port 21, which is blocked.
C: SFTP uses port 22, which is allowed.
D: HTTPS uses port 443, which is allowed. NetBIOS uses ports 137-139, which is blocked.

References:
https://technet.microsoft.com/en-us/library/dd548299.aspx
https://technet.microsoft.com/en-us/library/hh545212(v=sc.20)
.aspx (https://technet.microsoft.com/en-us/library/dd425238(v=office.13)
.aspx (https://technet.microsoft.com/en-us/library/hh427328.aspx)