A penetration tester observes that several high-numbered ports are listening on a public web server. However, the system owner says the application only uses port 443. Which of the following would be BEST to recommend?
A) Transition the application to another port.
B) Filter port 443 to specific IP addresses.
C) Implement a web application firewall.
D) Disable unneeded services.

Question

Quizplus · Accepted Answer

Disabling unneeded services will close the high-numbered ports that are unnecessarily open, reducing the attack surface and aligning with the system owner's claim that only port 443 is needed.

A Penetration Tester Observes That Several High-Numbered Ports Are Listening