An NGFW alerts that a web server in the DMZ is sending suspicious traffic. A network administrator finds that port 25 is open, and the traffic is originating from this port. The only purpose of this server is to deliver website traffic. Which of the following should the network administrator recommend to the systems administrator?
A) Disable Telnet service on the server.
B) Disable DHCP service on the server.
C) Disable the SMTP service on the server
D) Disable FTP service on the server.

Question

Quizplus · Accepted Answer

Port 25 is used for SMTP, which is not needed for a web server that only delivers website traffic. Disabling SMTP will stop the suspicious traffic.

An NGFW Alerts That a Web Server in the DMZ