Last updated
Services such as RDP or Telnet should not be facing the outside world. If you're able to access a machine via RDP over the internet that would be a unexpected perimeter service finding.
They can use a whitelist of IP's that can access the service if they insist on keeping it outwards facing to combat having it fully exposed.
Last updated