mediumMultiple ChoiceObjective-mapped
220-1201 Practice Question: During a network security audit, a technician…
During a network security audit, a technician finds that an employee is using a protocol that allows remote control of a computer with full graphical interface but without encryption. Which protocol should be replaced with a more secure alternative?
⚠ Common exam trap
Candidates often confuse remote control (graphical) with remote access (command-line) protocols. They may mistakenly choose Telnet because it lacks encryption, forgetting that Telnet provides only text-based remote access, not full graphical interface.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
RDP
RDP (Remote Desktop Protocol) provides full graphical interface remote control but, by default in older versions or misconfigurations, transmits data without encryption, exposing keystrokes, screen content, and credentials to eavesdropping. The secure alternative is to use RDP with TLS/SSL encryption (e.g., via Network Level Authentication) or a VPN, or to replace it with an encrypted remote desktop solution like SSH with X11 forwarding or a modern RDP client enforcing encryption.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
RDP
Why this is correct
Remote Desktop Protocol (RDP) is a proprietary protocol developed by Microsoft, enabling a user to graphically connect to another computer over a network connection. It provides a full graphical user interface (GUI) experience, making it suitable for remote administration and user support. While modern RDP versions support encryption, misconfigurations, weak credentials, or outdated implementations can expose it to vulnerabilities, making it a critical focus during network security audits for potential unauthorized access or data interception.
- ✗
SSH
Why it's wrong here
Secure Shell (SSH) is a cryptographic network protocol for operating network services securely over an unsecured network. It is primarily used for remote command-line interface (CLI) access, enabling secure execution of commands and file transfers between systems. While SSH is encrypted by default, making it secure for its intended purpose, it does not provide a full graphical desktop experience, which is typically what a technician would be looking for when auditing for remote graphical control vulnerabilities.
- ✗
Telnet
Why it's wrong here
Telnet is an application protocol used to provide a bidirectional interactive text-oriented communication facility using a virtual terminal connection. Critically, Telnet transmits all data, including usernames and passwords, in plaintext, making it highly vulnerable to eavesdropping and interception. Like SSH, Telnet only offers command-line access and does not support a graphical user interface, rendering it unsuitable for remote graphical control and a significant security risk if found active in an audit.
- ✗
FTP
Why it's wrong here
File Transfer Protocol (FTP) is a standard network protocol used for the transfer of computer files between a client and server on a computer network. Its sole purpose is to facilitate the uploading and downloading of files, often without encryption unless FTPS is used. FTP does not provide any remote control capabilities, either graphical or command-line, making it irrelevant for a security audit specifically looking for unauthorized remote control access to systems.
Quick reference
VPN Protocol Comparison
| Protocol | Port | Encryption | Authentication | Use Case |
|---|---|---|---|---|
| IKEv2 / IPsec | UDP 500 / 4500 | AES-256 | Certificates / PSK | Site-to-site & remote access |
| SSL / TLS VPN | TCP 443 | TLS 1.3 | Certificates / MFA | Clientless remote access |
| L2TP / IPsec | UDP 1701 | AES (IPsec) | PSK / Certificates | Legacy remote access |
| WireGuard | UDP 51820 | ChaCha20 | Public keys | Modern high-performance VPN |
| PPTP | TCP 1723 | MPPE (weak) | MS-CHAPv2 | Legacy — avoid in production |
PPTP is considered insecure. IKEv2/IPsec and SSL VPN are the current recommended options.
Go deeper
Related to this question
About these practice questions
This 220-1201 question is part of Courseiva's 972-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1201 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1201 exam.