A network security administrator is configuring access control rules on an internal perimeter firewall for a dedicated network telemetry server. The server requires encrypted command-line administrative access for system maintenance and must receive metric polling queries from remote management consoles using standard Simple Network Management Protocol (SNMP) polling. Which of the following port and transport layer protocol combinations must be permitted through the firewall to support these requirements? (Select TWO.)
- TCP port 22 for secure command-line administrationAnswer
- UDP port 161 for SNMP metric polling queriesAnswer
- CTCP port 161 for SNMP metric polling queries
- DUDP port 67 for internal hostname resolution
Answer
The firewall rules must permit TCP port 22 to allow secure SSH management access and UDP port 161 to support SNMP metric polling.
Encrypted command-line administration requires SSH, which uses connection-oriented TCP transport on port 22. Standard SNMP status polling requires connectionless UDP transport on port 161.
Step-by-Step Solution
Key Concept
Mapping network services to their exact transport layer protocols (TCP vs UDP) and default port numbers