Ethical Hacking Essentials Practice Test

Which of the following is true about Telnet in the context of security?

1. It securely encrypts all communications.

2. It allows unencrypted connections.

3. It only supports IPv6 networks.

4. It requires strong password policies.

The correct answer is: It allows unencrypted connections.

Telnet is a network protocol that is widely recognized for allowing remote access to devices, but it has significant security flaws. It operates over the internet, enabling users to log into remote systems. One of the key characteristics of Telnet is that it does not encrypt its communications, meaning that data, including usernames and passwords, is transmitted in plain text. This lack of encryption makes it vulnerable to interception and attacks like eavesdropping. In securing network communications, protocols with encryption capabilities, such as SSH (Secure Shell), are often recommended instead of Telnet. The fact that Telnet allows unencrypted connections is central to understanding why it is considered insecure for sensitive applications. Other options are misleading in the context of Telnet’s functionality. While strong password policies are crucial for maintaining security in any user authentication system, they do not inherently change the security status of Telnet's unencrypted nature. Similarly, Telnet does not limit itself to IPv6 networks; it supports both IPv4 and IPv6. Lastly, it does not secure communications; rather, it operates without encryption, which is a fundamental security concern. Therefore, the accurate assessment of Telnet's ability to allow unencrypted connections highlights its inadequacy in secure communications.