Ethical Hacking Essentials Practice Test

What is a major security consideration when using FTP for file transfers?

1. It uses strong encryption.

2. It supports multi-factor authentication.

3. It does not encrypt data.

4. It logs activities securely.

The correct answer is: It does not encrypt data.

Using FTP for file transfers introduces significant security concerns primarily because it does not encrypt data. When files are transferred over FTP, they are sent in plain text, making it easy for attackers to intercept and read the information during the transfer process. This lack of encryption means that sensitive data, such as usernames, passwords, and any files being transferred, can be easily compromised by anyone who has access to the network traffic. The other choices do not address the core issue at hand. For instance, strong encryption is not a characteristic of FTP; rather, secure alternatives like SFTP (SSH File Transfer Protocol) or FTPS (FTP Secure) provide encryption to protect the data in transit. Multi-factor authentication is also not a standard feature of FTP, which can leave systems vulnerable if only a single layer of verification (like a password) is implemented. Finally, while logging activities is a crucial aspect of maintaining system security, it does not mitigate the risks associated with unencrypted data transfers over FTP. Thus, the absence of encryption is the most pressing security consideration when using FTP.