Question

Difficulty: HardCommon Ports and Protocols

A network engineer is establishing stateful firewall rules to support specific secure enterprise applications and communication services. Match each network service requirement on the left with its corresponding default port number and transport protocol on the right.

  • Direct network file sharing without NetBIOS transport encapsulationTCP port 445
  • Encrypted Active Directory directory service queries over SSL/TLSTCP port 636
  • Centralized AAA authentication and authorization traffic for network accessUDP port 1812
  • Unencrypted VoIP call initiation and session control signalingUDP port 5060

Answer

Direct file sharing without NetBIOS matches TCP port 445; Encrypted directory service queries over SSL/TLS matches TCP port 636; Centralized AAA authentication and authorization traffic matches UDP port 1812; Unencrypted VoIP session control matches UDP port 5060.
Direct SMB hosting runs on TCP port 445. Secure directory access (LDAPS) uses TCP port 636. Centralized RADIUS authentication operates on UDP port 1812. Cleartext SIP VoIP call setup uses UDP port 5060.

Step-by-Step Solution

1
Analyze the file sharing requirement.
Direct SMB over TCP/IP corresponds to TCP port 445.
Modern Server Message Block (SMB) communicates natively over TCP port 445, bypassing NetBIOS session service (TCP port 139).
2
Analyze the directory service security requirement.
LDAPS requires TCP port 636.
Standard unencrypted LDAP operates on TCP port 389, while SSL/TLS wrapper protection (LDAPS) assigns TCP port 636.
3
Analyze the network authentication protocol requirement.
RADIUS authentication and authorization matches UDP port 1812.
RADIUS separates authentication/authorization (UDP port 1812) from accounting services (UDP port 1813).
4
Analyze the VoIP signaling protocol requirement.
Unencrypted SIP signaling corresponds to UDP port 5060.
Session Initiation Protocol (SIP) default cleartext signaling runs on UDP/TCP port 5060, whereas secure TLS-encrypted SIP uses TCP port 5061.

Key Concept

Common Enterprise Network Ports and Transport Layer Protocols
Rate this question