When using RDP for remote support, which security practice is essential?

When using RDP for remote support, which security practice is essential?

• A. Expose port publicly with default credentials
• B. Ensure encryption and proper authorization
• C. Use weak passwords
• D. Disable encryption

Answer: (B)

Protecting a remote support session starts with safeguarding the data that travels between machines and making sure only the right people can connect. RDP carries sensitive information like screen output, keystrokes, and credentials, so encrypting that traffic keeps it confidential and intact even if someone taps the network. At the same time, strong authorization verifies who is attempting to connect and grants access only to trusted users, often using measures like Network Level Authentication and, ideally, multi-factor authentication, plus restricting access through secure gateways or VPNs. Exposing the RDP port to the public internet with default credentials makes an easy target for attackers, and using weak passwords or disabling encryption would undermine protection entirely. The combination of encryption and proper authorization directly addresses both confidentiality and access control, making it the essential security practice.

Protecting a remote support session starts with safeguarding the data that travels between machines and making sure only the right people can connect. RDP carries sensitive information like screen output, keystrokes, and credentials, so encrypting that traffic keeps it confidential and intact even if someone taps the network. At the same time, strong authorization verifies who is attempting to connect and grants access only to trusted users, often using measures like Network Level Authentication and, ideally, multi-factor authentication, plus restricting access through secure gateways or VPNs.

Exposing the RDP port to the public internet with default credentials makes an easy target for attackers, and using weak passwords or disabling encryption would undermine protection entirely. The combination of encryption and proper authorization directly addresses both confidentiality and access control, making it the essential security practice.