Examkin

Question

Difficulty: MediumNetworking Ports and Protocols

A systems engineer is hardening an Active Directory domain controller to ensure all directory service queries from client workstations are encrypted using Transport Layer Security (TLS). Which port must be open on the internal firewall to allow secure Lightweight Directory Access Protocol (LDAPS) traffic?

  1. TCP port 636Answer
  2. B
    TCP port 389
  3. C
    TCP port 445
  4. D
    UDP port 53

Answer

TCP port 636 is required to enable secure Lightweight Directory Access Protocol (LDAPS) communication over SSL/TLS.
TCP port 636 is the standard default port designated for LDAPS (Lightweight Directory Access Protocol Secure), which wraps LDAP communications within an SSL/TLS encrypted tunnel to protect directory queries and authentication credentials.

Step-by-Step Solution

1
Identify the protocol requested in the scenario
The requirement specifies secure directory access services (LDAPS) encrypted via TLS.
Understanding whether a protocol is secure or unencrypted determines the associated default port.
2
Differentiate between standard LDAP and LDAPS default port assignments
Standard unencrypted LDAP uses TCP port 389, while encrypted LDAPS uses TCP port 636.
CompTIA A+ requires memorization and distinction of default network port numbers for secure network services.

Key Concept

LDAP vs. LDAPS Port Specifications
Estimated Time:1m 0s
Rate this question

Topics

Networking Ports and Protocols

More questions from this topic