easyMultiple ChoiceObjective-mapped
220-1201 Practice Question: A user wants to securely transfer files to a…
A user wants to securely transfer files to a remote server using a command-line tool. Which port is the default for SFTP (SSH File Transfer Protocol)?
⚠ Common exam trap
CompTIA A+ often tests the distinction between SFTP (port 22) and FTPS (port 990) or standard FTP (ports 20/21), expecting candidates to confuse secure file transfer protocols or to mistakenly associate SFTP with FTP's default ports.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
22
SFTP (SSH File Transfer Protocol) operates over the SSH protocol, which uses TCP port 22 by default. Unlike FTP or FTPS, SFTP does not use separate control and data channels; it encapsulates all file operations within a single encrypted SSH session. This makes port 22 the correct default for SFTP transfers.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
21
Why it's wrong here
Port 21 is the well-known port primarily used for the control channel of the File Transfer Protocol (FTP). This port establishes and manages the connection, handling commands like authentication and directory listings. However, standard FTP transmits data, including credentials, in plaintext, making it inherently insecure and unsuitable for the secure file transfer that SFTP provides.
- ✗
20
Why it's wrong here
Port 20 is specifically designated for the data channel of active mode File Transfer Protocol (FTP) connections. It facilitates the actual transfer of files between client and server once the control connection on port 21 is established. SFTP, however, encapsulates both control and data within a single, encrypted SSH tunnel, not utilizing separate data ports like traditional FTP.
- ✓
22
Why this is correct
Port 22 is the standard and correct port for the Secure Shell (SSH) protocol, which SFTP (SSH File Transfer Protocol) leverages to provide secure file transfer capabilities. SFTP encrypts both the authentication credentials and the data being transferred, protecting against eavesdropping and tampering. This integration makes SFTP a robust choice for securely moving files across untrusted networks.
- ✗
990
Why it's wrong here
Port 990 is typically associated with FTPS (FTP Secure), which is a different secure file transfer protocol than SFTP. FTPS secures standard FTP by adding an SSL/TLS encryption layer, often operating in implicit mode on port 990 where the entire session is encrypted from the outset. Unlike SFTP, which is built on SSH, FTPS uses SSL/TLS for its security mechanisms.
Go deeper
Related to this question
About these practice questions
One of 972 original 220-1201 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1201 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1201 exam.