CyberCertPrepNetwork FundamentalsCommon Protocols & PortsEASYFree question
Scenario
During a penetration test, a tester discovers TCP port 3306 open on a Linux server accessible from a development workstation. The server is in the production network segment.
What service uses TCP 3306, what data can the tester potentially access, and what is the correct network control to mitigate this?
- A.TCP 3306 is the PostgreSQL port; it is safe to expose because PostgreSQL requires SSL certificates.
- B.TCP 3306 is the Oracle Database port; MySQL uses port 1521.
- C.TCP 3306 is used by Microsoft SQL Server for named instance discovery.
- D.TCP 3306 is MySQL's default port. If accessible, the tester can attempt to authenticate to the MySQL server and potentially access all databases, tables, stored procedures, and credentials. Mitigation: bind MySQL to 127.0.0.1 (localhost only) or restrict access via firewall rules to only the application server IPs that need database access.
Why D is correct