A city still transfers sensitive files with FTP that moves credentials in cleartext. What is the core risk?
Select an answer to reveal the explanation.
Short Explanation
FTP is the postcard of file transfer—anyone along the path can read it, including the login. Sensitive city data deserves sealed envelopes like SFTP or HTTPS. If credentials ride in the clear, treat that as a real finding.
Full Explanation
Protocols that transmit authentication material and payloads without encryption enable eavesdropping and credential theft on traversed networks. Internal trust assumptions do not eliminate this risk because many breaches involve internal packet visibility. Replacing cleartext services with encrypted alternatives and removing legacy listeners reduces a common, well-understood attack surface. Reports should tie the protocol weakness to confidentiality impact for the data actually moved.