Question

Difficulty: MediumCommon Ports and Protocols

A network systems engineer is configuring edge firewall access control lists (ACLs) to allow administrators to deploy a secure web management portal that authenticates domain users against an encrypted centralized directory server. Which TWO of the following port and transport protocol combinations must be permitted through the firewall to support these services? (Select TWO.)

  1. TCP 443Answer
  2. TCP 636Answer
  3. C
    UDP 636
  4. D
    TCP 389

Answer

The firewall must permit TCP port 443 for HTTPS web access and TCP port 636 for secure LDAPS directory service authentication.
The scenario requires permitting secure web portal traffic (HTTPS) and encrypted directory authentication (LDAPS). HTTPS relies on TCP port 443 for TLS-encrypted communication. LDAPS relies on TCP port 636 to secure directory queries over TLS. Therefore, permitting TCP 443 and TCP 636 fulfills all secure connectivity requirements.

Step-by-Step Solution

1
Identify the required secure web service protocol and its default transport port.
Secure web management uses HTTPS, which operates over TCP port 443.
HTTPS uses TLS encryption on connection-oriented TCP port 443.
2
Identify the required secure directory service authentication protocol and its default transport port.
Encrypted directory authentication uses LDAPS, which operates over TCP port 636.
LDAPS provides encrypted access to directory services over TLS on TCP port 636.
3
Evaluate transport layer protocol and port number requirements against invalid options.
Rule out UDP port 636 and TCP port 389.
LDAPS requires TCP for reliable connection management (ruling out UDP), and standard unencrypted LDAP uses port 389 rather than port 636.

Key Concept

Common Secure Network Ports and Protocols (HTTPS and LDAPS)
Rate this question