Question

Difficulty: MediumNetworking Ports and Protocols

A network administrator is configuring an automated appliance management server. The server must establish encrypted CLI connections to remote routers for administration and receive router system logs and configuration files via Trivial File Transfer Protocol (TFTP). Which of the following port and transport protocol combinations must be permitted through the enterprise firewall to support these services? (Select TWO.)

  1. TCP port 22Answer
  2. UDP port 69Answer
  3. C
    TCP port 23
  4. D
    TCP port 21

Answer

The firewall rules must permit TCP port 22 for encrypted Secure Shell (SSH) remote management and UDP port 69 for Trivial File Transfer Protocol (TFTP) file transfers.
Secure Shell (SSH) uses TCP port 22 to encrypt remote terminal administration sessions. Trivial File Transfer Protocol (TFTP) uses UDP port 69 to send configuration backup files without session overhead.

Step-by-Step Solution

1
Identify the required protocol and port for encrypted remote CLI access.
SSH provides encrypted CLI management over TCP port 22.
Telnet operates on TCP port 23 but transmits traffic unencrypted, failing security requirements.
2
Identify the required protocol and port for TFTP configuration file transfers.
TFTP operates over UDP port 69.
FTP operates over TCP ports 20 and 21, which is distinct from TFTP.

Key Concept

Networking Ports and Protocols (SSH on TCP 22 and TFTP on UDP 69)
Rate this question