Examkin

Question

Difficulty: MediumCommon Ports and Protocols

During a security audit, a network analyst identifies unencrypted directory query traffic originating from an internal application server to a domain controller over TCP port 389. To secure these identity lookup requests with TLS encryption, which protocol and default port combination must be permitted through the internal firewall?

  1. TCP port 636 for Lightweight Directory Access Protocol over SSL/TLS (LDAPS)Answer
  2. B
    UDP port 389 for Connectionless Lightweight Directory Access Protocol (CLDAP)
  3. C
    TCP port 3268 for Global Catalog queries
  4. D
    TCP port 443 for Hypertext Transfer Protocol Secure (HTTPS)

Answer

TCP port 636 for Lightweight Directory Access Protocol over SSL/TLS (LDAPS)
Lightweight Directory Access Protocol over SSL/TLS (LDAPS) operates over TCP port 636 to provide encrypted communication for directory lookups and authentication services, replacing the unencrypted LDAP service on TCP port 389.

Step-by-Step Solution

1
Identify the unencrypted service and port referenced in the scenario
TCP port 389 corresponds to unencrypted Lightweight Directory Access Protocol (LDAP).
Recognizing standard service port baselines is necessary to determine the appropriate secure alternative.
2
Determine the secure encrypted equivalent for directory service communication
LDAP over SSL/TLS (LDAPS) encrypts directory queries using TCP port 636.
LDAPS secures authentication and directory traffic using transport layer encryption.
3
Select the correct firewall rule permission entry
Permit TCP port 636 to allow secure LDAPS traffic.
Firewall ACLs must explicitly allow TCP 636 for encrypted LDAP communications to function.

Key Concept

Secure Directory Services Port Mapping (LDAP vs LDAPS)
Estimated Time:1m 0s
Rate this question

Topics

Common Ports and Protocols

More questions from this topic