Question

Difficulty: Very hardCommon Ports and Protocols

A network security team is establishing strict edge firewall ACL rules for four specialized enterprise network services. Match each network service requirement on the left with its corresponding default transport layer protocol and destination port number on the right.

  • Secure Directory Services Authentication & Queries (LDAPS)TCP Port 636
  • Unsolicited Agent Event Notifications to Management Station (SNMP Trap)UDP Port 162
  • Encrypted System Log Forwarding (Syslog over TLS)TCP Port 6514
  • Client Message Submission to Mail Transfer Agent with Explicit TLS (SMTP Submission)TCP Port 587

Answer

Secure Directory Services Authentication & Queries (LDAPS) matches TCP Port 636; Unsolicited Agent Event Notifications to Management Station (SNMP Trap) matches UDP Port 162; Encrypted System Log Forwarding (Syslog over TLS) matches TCP Port 6514; Client Message Submission to Mail Transfer Agent with Explicit TLS (SMTP Submission) matches TCP Port 587.
Each service requirement strictly aligns with its IANA default transport protocol and port assignment: LDAPS requires TCP 636 for directory security; SNMP Traps use UDP 162 for agent notification forwarding; Syslog over TLS utilizes TCP 6514 for secure transport; and SMTP Submission uses TCP 587 for authenticated client mail delivery.

Step-by-Step Solution

1
Identify the protocol and transport requirements for directory services over TLS.
LDAPS secures LDAP traffic using SSL/TLS, operating over TCP port 636.
Standard unencrypted LDAP uses TCP 389, while encrypted LDAPS defaults to TCP 636.
2
Determine the transport protocol and port for asynchronous network monitoring alerts.
SNMP Traps are sent autonomously from network agents to the NMS on UDP port 162.
Standard SNMP queries use UDP 161, whereas unsolicited trap notifications use UDP 162.
3
Identify the standardized port for secure remote syslog delivery.
Syslog over TLS requires a connection-oriented transport and uses TCP port 6514.
Standard unencrypted Syslog uses UDP port 514, whereas secure TLS-wrapped syslog uses TCP port 6514.
4
Analyze mail submission protocol ports.
Modern client-to-server mail submission (SMTP Submission) uses TCP port 587.
Traditional server-to-server SMTP relay uses TCP port 25, while mail submission agents use TCP port 587.

Key Concept

Standard default port numbers and transport layer protocols for secure network operations and network management services.
Rate this question