Question 68

Explanation

Correct Answer: D. File Transfer Protocol (FTP) Explanation: Among the given services, File Transfer Protocol (FTP) poses the greatest risk when enabled within firewall rules. FTP is a standard network protocol used for transferring files between a client and a server on a computer network. While FTP can be a useful service for file sharing and transfer, it introduces significant security risks. FTP operates over clear text, which means that the data transferred between the client and server is not encrypted. This lack of encryption makes FTP susceptible to eavesdropping, data interception, and unauthorized access. Attackers can potentially capture sensitive information, including usernames, passwords, and the actual content of transferred files. In contrast, the other services mentioned have inherent security features that mitigate some of the risks. For example, HTTP (Hypertext Transfer Protocol) can be secured using HTTPS (Hypertext Transfer Protocol Secure) with encryption. SMTP (Simple Mail Transfer Protocol) can employ encryption methods such as Transport Layer Security (TLS) for secure email communication. SSH (Secure Shell) provides encrypted communication and secure remote administration. However, FTP remains a significant risk due to its lack of built-in encryption and vulnerability to unauthorized access and data interception. As an IS auditor, it is essential to identify the risks associated with enabled services within firewall rules and recommend appropriate security measures, such as replacing FTP with secure file transfer protocols like SFTP (Secure File Transfer Protocol) or implementing encryption mechanisms to protect sensitive data during file transfers.