Service and port management in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a network port in the context of service and port management?

A network port is a virtual point where network connections start and end. It helps computers identify specific services or applications on a device.

beginner

Why is managing open ports important for cybersecurity?

Managing open ports is important because open ports can be entry points for attackers. Closing unused ports reduces the risk of unauthorized access.

intermediate

What is the difference between TCP and UDP ports?

TCP ports use a connection-based method to ensure data is received correctly, while UDP ports send data without confirming receipt, making UDP faster but less reliable.

beginner

What tool can you use to check which ports are open on your computer?

You can use tools like 'netstat' or 'nmap' to see which ports are open and which services are listening on those ports.

beginner

What is a common port number for HTTP service?

The common port number for HTTP service is 80.

Which port number is typically used for HTTPS?

A 443

B 80

C 21

D 25

Port 443 is the standard port for HTTPS, which is the secure version of HTTP.

What does it mean if a port is 'open' on a computer?

A The port is blocked by a firewall

B The port is used only for outgoing traffic

C A service is listening and ready to accept connections on that port

D The port is closed and inactive

An open port means a service is actively listening for incoming connections on that port.

Which protocol uses ports to manage communication endpoints?

A IP

B TCP/UDP

C HTTP

D FTP

TCP and UDP protocols use ports to identify communication endpoints for services.

Why should unused ports be closed on a server?

A To improve internet speed

B To allow more users to connect

C To increase power consumption

D To reduce security risks by limiting access points

Closing unused ports reduces the number of ways attackers can access the server.

Which tool is commonly used to scan open ports on a network?

A Nmap

B Photoshop

C Excel

D Word

Nmap is a popular tool used to scan and discover open ports on devices.

Explain what a network port is and why it is important in managing services.

Think about how computers know which program to send data to.

Describe why closing unused ports is a good security practice.

Consider how attackers might use open doors to get inside.

Practice

1. What is the main purpose of managing services and ports on a computer system?

easy

A. To control which services are accessible and improve security

B. To increase the speed of the internet connection

C. To install new software automatically

D. To backup all files on the system

Solution

1. Step 1: Understand service and port roles

   Services use ports to communicate over networks, so managing them controls access.

2. Step 2: Identify the security benefit

   Closing unused ports prevents unauthorized access, improving system security.

3. Final Answer:

   To control which services are accessible and improve security -> Option A

4. Quick Check:

   Service and port management = Control access [OK]

Hint: Managing ports controls access to services for security [OK]

Common Mistakes:

• Confusing port management with internet speed
• Thinking it installs software
• Assuming it backs up files

2. Which of the following is the correct way to specify a port number when configuring a service?

easy

A. Using letters instead of numbers

B. Using any number above 70000

C. Using negative numbers

D. Using a number between 0 and 65535

Solution

1. Step 1: Recall valid port number range

   Ports are numbered from 0 to 65535 according to networking standards.

2. Step 2: Eliminate invalid options

   Numbers above 65535, negative numbers, or letters are invalid for ports.

3. Final Answer:

   Using a number between 0 and 65535 -> Option D

4. Quick Check:

   Port numbers range 0-65535 [OK]

Hint: Ports must be 0-65535, no letters or negatives [OK]

Common Mistakes:

• Choosing numbers above 65535
• Using negative numbers
• Using letters as ports

3. Consider a server running a web service on port 80 and an SSH service on port 22. If the firewall blocks port 22 but allows port 80, what will happen?

medium

A. Users can access the web service but cannot connect via SSH

B. Users can connect via SSH but cannot access the web service

C. Both web and SSH services will be accessible

D. Neither web nor SSH services will be accessible

Solution

1. Step 1: Identify allowed and blocked ports

   Port 80 (web) is allowed; port 22 (SSH) is blocked by the firewall.

2. Step 2: Determine service accessibility

   Web service on port 80 will be accessible; SSH on port 22 will be blocked.

3. Final Answer:

   Users can access the web service but cannot connect via SSH -> Option A

4. Quick Check:

   Firewall blocks port 22, allows 80 = Web yes, SSH no [OK]

Hint: Blocked port means service on it is inaccessible [OK]

Common Mistakes:

• Assuming blocked port still allows access
• Confusing port numbers with services
• Thinking all services are blocked

4. A system administrator tries to start a service on port 21 but gets an error. The port is already in use by another service. What is the best way to fix this?

medium

A. Restart the computer without checking the port

B. Ignore the error and run both services on port 21

C. Change the new service to use a different free port

D. Uninstall the operating system

Solution

1. Step 1: Understand port conflict

   Two services cannot use the same port simultaneously; this causes errors.

2. Step 2: Choose a solution to avoid conflict

   Changing the new service to a free port resolves the conflict safely.

3. Final Answer:

   Change the new service to use a different free port -> Option C

4. Quick Check:

   Port conflict fixed by using different port [OK]

Hint: Use a free port to avoid conflicts [OK]

Common Mistakes:

• Restarting without fixing port conflict
• Trying to run two services on same port
• Taking extreme actions like uninstalling OS

5. You want to secure a server by closing all unused ports but keep services on ports 22 (SSH), 80 (HTTP), and 443 (HTTPS) open. Which approach is best?

hard

A. Disable all services including SSH, HTTP, and HTTPS

B. Configure the firewall to block all ports except 22, 80, and 443

C. Open all ports to avoid blocking any service

D. Only block port 80 and 443, keep others open

Solution

1. Step 1: Identify required open ports

   Services on ports 22, 80, and 443 must remain accessible for SSH and web traffic.

2. Step 2: Apply firewall rules to block unused ports

   Blocking all other ports except these three limits exposure and secures the server.

3. Final Answer:

   Configure the firewall to block all ports except 22, 80, and 443 -> Option B

4. Quick Check:

   Block unused ports, keep needed open = Secure server [OK]

Hint: Block all except needed ports for best security [OK]

Common Mistakes:

• Disabling needed services
• Opening all ports reduces security
• Blocking needed ports breaks services