SESK: Stuff Everyone Should Know · sesk.info/sec-no-exposed-rdp

CISA's ransomware guide says not to expose which service directly to the internet?

Q: CISA's ransomware guide says not to expose which service directly to the internet?

Remote desktop protocol (RDP), left open to the internet. CISA says threat actors often gain initial access through exposed and poorly secured remote services.

Remote desktop protocol (RDP), left open to the internet.

Start playing free

Printer drivers
Remote desktop protocol ✔
Calendar sharing

Why: Open remote access is a favorite way in for ransomware gangs. If someone needs remote access, put it behind a VPN or a secure gateway with multi-factor authentication.

Huh, didn't know that: CISA says threat actors often gain initial access through exposed and poorly secured remote services.

The dad joke

I would tell you a UDP joke, but you might not get it.

Like this card?

Play the game

References

Answer: Remote desktop protocol. Open remote access is a favorite way in for ransomware gangs. If someone needs remote access, put it behind a VPN or a secure gateway with multi-factor authentication.

CISA: #StopRansomware Guide www.cisa.gov/stopransomware/ransomware-guide
Do not expose services, such as remote desktop protocol, on the web.
Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyCISA says employees need phishing training how often?Security & PrivacyCISA says a strong business password should be at least how long?Security & PrivacyHow many accounts should each password be used for, according to CISA?

That's stuff everyone should know.

CISA's ransomware guide says not to expose which service directly to the internet?

References

More stuff everyone should know