200-201 Security Monitoring Practice Question
Which TWO protocols are commonly used for remote administration and should be monitored for unauthorized access?
⚠ Common exam trap
Cisco often tests the distinction between protocols used for remote administration (SSH, RDP) versus those used for network management (SNMP) or file transfer (FTP), and candidates may mistakenly include Telnet because it is historically associated with remote access, despite its lack of encryption and modern disuse.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SSH (port 22)
SSH (port 22) is correct because it provides encrypted remote administration, making it a common target for brute-force attacks and unauthorized access attempts. RDP (port 3389) is correct because it is the primary protocol for remote GUI administration on Windows systems and is frequently exploited via credential stuffing or vulnerability scanning. Both protocols should be monitored for anomalous login patterns and unauthorized access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Telnet (port 23)
Why it's wrong here
Telnet is unencrypted and rarely used for secure administration; SSH is preferred.
- ✓
SSH (port 22)
Why this is correct
SSH is a secure remote administration protocol.
- ✓
RDP (port 3389)
Why this is correct
RDP is a common remote desktop protocol for Windows.
- ✗
SNMP (port 161/162)
Why it's wrong here
SNMP is for network management, not remote administration.
- ✗
FTP (port 20/21)
Why it's wrong here
FTP is for file transfer, not remote administration.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 200-201 question from scratch — 979 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.