Question 246 of 972
mediumMultiple ChoiceObjective-mapped
220-1201 Practice Question: A user needs to transfer files securely between…
A user needs to transfer files securely between two Linux servers over the internet. Which port should be allowed through the firewall for this purpose?
⚠ Common exam trap
Watch out — candidates often confuse FTP (ports 20/21) with secure file transfer, forgetting that FTP lacks encryption, or they mistakenly think HTTPS (port 443) is the standard for server-to-server file transfers, when SSH on port 22 is the correct protocol for secure Linux-to-Linux transfers.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
22
Secure file transfer between Linux servers typically uses SCP (Secure Copy) or SFTP (SSH File Transfer Protocol), both of which operate over SSH. SSH uses TCP port 22 by default, so allowing port 22 through the firewall enables encrypted authentication and data transfer. This is the correct choice because it provides confidentiality and integrity for the file transfer over the internet.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
21
Why it's wrong here
Port 21 is the well-known port for the File Transfer Protocol (FTP) control channel, primarily used for sending commands and authentication information. While FTP facilitates file transfers, it transmits all data, including usernames and passwords, in plaintext. This fundamental lack of encryption makes FTP inherently insecure for transferring files, especially over public networks like the internet, failing to meet the requirement for secure transfers.
- ✓
22
Why this is correct
Port 22 is the standard port for the Secure Shell (SSH) protocol, which establishes a secure, encrypted channel over an unsecured network. Secure File Transfer Protocol (SFTP) leverages this SSH connection to encrypt both the data and the commands exchanged during file transfers. This robust encryption, coupled with strong authentication mechanisms, makes Port 22 the correct choice for securely transferring files between two systems, ensuring confidentiality and integrity.
- ✗
20
Why it's wrong here
Port 20 is specifically designated as the data port for the File Transfer Protocol (FTP) when operating in active mode. In this configuration, the FTP server initiates a connection from its Port 20 to a client-specified port to transfer the actual file data. Despite handling the file content transfer, FTP on Port 20, like its control channel on Port 21, does not provide any encryption, rendering it unsuitable for secure file transfers.
- ✗
443
Why it's wrong here
Port 443 is the standard port for HTTPS (Hypertext Transfer Protocol Secure), which encrypts web traffic using SSL/TLS. While HTTPS provides secure communication for browsing websites and interacting with web-based applications, it is primarily designed for client-server interactions within a web browser context. It is not the appropriate protocol for direct, general-purpose file transfers between two systems using dedicated file transfer clients, even though it offers security.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jul 4, 2026
This 220-1201 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1201 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.