Question

Difficulty: MediumRemote Access Technologies and Tools

A network administrator is configuring inbound firewall rules on an internal router to enable remote management for a new branch office. Technicians located at the corporate headquarters must perform unattended graphical desktop administration on Windows 11 Enterprise workstations and secure, encrypted command-line administration on Linux database servers. Which TWO of the following protocol and port configurations must be permitted through the firewall to fulfill these requirements? (Select TWO.)

  1. Allow inbound traffic on TCP port 3389 for Remote Desktop Protocol (RDP) access to Windows workstations.Answer
  2. B
    Allow inbound traffic on TCP port 23 for Secure Shell (SSH) access to Linux database servers.
  3. Allow inbound traffic on TCP port 22 for Secure Shell (SSH) access to Linux database servers.Answer
  4. D
    Allow inbound traffic on UDP port 3389 exclusively while blocking TCP port 3389 to enforce Microsoft Remote Assistance (MSRA).

Answer

To support the requested remote access capabilities, the firewall must permit inbound TCP port 3389 for Remote Desktop Protocol (RDP) graphical administration on Windows workstations and inbound TCP port 22 for Secure Shell (SSH) encrypted command-line administration on Linux servers.
The requirement calls for two specific access modes: unattended graphical administration on Windows systems and secure command-line administration on Linux servers. Remote Desktop Protocol (RDP) operates over TCP port 3389 to provide graphical desktop management on supported Windows editions. Secure Shell (SSH) operates over TCP port 22 to provide encrypted command-line administration for Linux hosts.

Step-by-Step Solution

1
Identify the protocol and port required for Windows graphical remote management.
Remote Desktop Protocol (RDP) provides unattended graphical access to Windows Enterprise editions and listens by default on TCP port 3389.
Windows 11 Enterprise supports incoming RDP connections, and firewall rules must permit TCP port 3389 for session establishment.
2
Identify the protocol and port required for secure Linux command-line management.
Secure Shell (SSH) provides encrypted CLI administration and listens by default on TCP port 22.
Telnet (TCP port 23) transmits data in cleartext, whereas SSH (TCP port 22) satisfies the requirement for secure, encrypted command-line management.

Key Concept

Remote Access Protocols and Default Port Assignments
Rate this question