A cybersecurity analyst has been asked to review firewall configurations and recommend which ports to deny in order to prevent users from making…

To prevent users from making outbound non-encrypted connections to the internet, it is essential to

block Port 80, which is used for unencrypted HTTP traffic.

Security Risk: HTTP transmits data in plaintext, making it vulnerable to interception and

eavesdropping.

Preferred Alternative: Use Port 443 (HTTPS), which encrypts data via TLS.

Mitigation: Blocking Port 80 ensures that users must use secure, encrypted connections.

Attack Vector: Unencrypted HTTP traffic can be intercepted using man-in-the-middle (MitM) attacks.

Incorrect Options:

A . Port 3389: Used by RDP for remote desktop connections.

B . Port 25: Used by SMTP for sending email, which can be encrypted using SMTPS on port 465.

C . Port 443: Used for encrypted HTTPS traffic, which should not be blocked.

Exact Extract from CCOA Official Review Manual, 1st Edition:

Refer to Chapter 5, Section "Network Security and Port Management," Subsection "Securing

Outbound Connections" - Blocking Port 80 is crucial to enforce encrypted communications.