Question

Difficulty: MediumCommon Ports and Protocols

A network administrator is updating perimeter firewall Access Control Lists (ACLs) to support secure, encrypted remote administration and file management across enterprise servers, replacing legacy unencrypted management traffic. Which of the following port and transport protocol combinations must be permitted through the firewall to support these secure services? (Select TWO.)

  1. TCP port 22Answer
  2. TCP port 443Answer
  3. C
    TCP port 23
  4. D
    UDP port 69

Answer

TCP port 22 and TCP port 443 should be permitted on the firewall.
TCP port 22 (SSH/SFTP) and TCP port 443 (HTTPS) provide encrypted session channels for secure remote administration and file transfer capabilities required by modern security standards.

Step-by-Step Solution

1
Identify the functional requirement
The firewall rules must permit secure, encrypted management and file transfer protocols while excluding unencrypted legacy alternatives.
Enterprise security baseline policies mandate transport-layer or session-layer encryption for administrative access.
2
Evaluate remote administration and secure file transfer options
SSH and SFTP utilize TCP port 22 to provide secure interactive shell access and encrypted file transfer. HTTPS uses TCP port 443 for secure web browser management.
Port 22 (SSH/SFTP) and Port 443 (HTTPS) provide cryptographic confidentiality and integrity.
3
Eliminate unencrypted protocol distractors
Telnet (TCP port 23) and TFTP (UDP port 69) transmit data without encryption.
Telnet sends credentials in plaintext and TFTP provides no authentication or encryption over UDP.

Key Concept

Common Secure Ports and Protocols for Remote Management
Rate this question