CompTIA Cloud+ Practice Test

What network protocol is typically disabled by default on Windows Server 2019 for security reasons?

1. SMB 1

2. FTP

3. HTTP

4. Telnet

The correct answer is: SMB 1

The network protocol that is typically disabled by default on Windows Server 2019 for security reasons is SMB 1. This is due to significant vulnerabilities associated with the Server Message Block (SMB) version 1 protocol, which can be exploited by attackers to gain unauthorized access to sensitive data or to execute malware across the network. SMB 1 has been associated with various security breaches, including the infamous WannaCry ransomware attack, which utilized vulnerabilities within this protocol to spread rapidly across networks. As security best practices have evolved, Microsoft has recommended disabling this protocol to enhance the overall security posture of server environments. While FTP, HTTP, and Telnet can also pose security risks, they are not disabled by default on Windows Server 2019. Instead, administrators are often encouraged to secure them through proper configuration and, in many cases, implement more secure alternatives such as FTPS or SFTP for file transfers, HTTPS for web traffic, and SSH for remote connections.