CompTIA CySA+ Practice Test

Which ports are most commonly associated with web-based attacks?

1. 21 and 22

2. 80 and 443

3. 25 and 110

4. 53 and 139

The correct answer is: 80 and 443

The most commonly associated ports with web-based attacks are 80 and 443. Port 80 is the standard port used for HTTP traffic, which is the foundation of data communication on the World Wide Web. As such, it is frequently targeted in web-based attacks, including cross-site scripting (XSS), SQL injection, and other vulnerabilities that can be exploited through web applications. Port 443 is used for HTTPS traffic, which is HTTP over SSL/TLS, providing a layer of security through encryption. While HTTPS is designed to secure communications, it is not immune to attacks. Attackers may still target web applications using HTTPS, often utilizing encrypted channels to bypass traditional security measures. Furthermore, as more organizations migrate to HTTPS to secure their communications, understanding the potential vulnerabilities in these applications becomes crucial. The other options represent different protocols and services that are less directly related to web-based traffic. For instance, ports 21 and 22 are associated with FTP and SSH, respectively, while ports 25 and 110 relate to email protocols (SMTP and POP3). Ports 53 and 139 also serve different purposes, with port 53 being used for DNS queries and port 139 for NetBIOS file sharing, neither of which are directly aligned with typical