Examkin

Question

Difficulty: MediumCommon Ports and Protocols

A network security team is replacing insecure legacy protocols across core infrastructure routers. The new baseline policy requires allowing only encrypted protocols for remote command-line administration and web-based graphical configuration. Which TWO of the following transport protocols and default port numbers must be permitted through the administrative management access control list (ACL) to meet these requirements?

  1. SSH operating over TCP port 22Answer
  2. HTTPS operating over TCP port 443Answer
  3. C
    Telnet operating over TCP port 23
  4. D
    HTTP operating over TCP port 80

Answer

SSH operating over TCP port 22 and HTTPS operating over TCP port 443 are the correct secure choices.
SSH on TCP port 22 provides secure, encrypted shell access for command-line management, while HTTPS on TCP port 443 provides encrypted web management using TLS. Together, these two fulfill the requirement for secure remote administration across CLI and GUI channels.

Step-by-Step Solution

1
Identify the remote management functional requirements.
Requirements specify encrypted command-line administration and secure web-based GUI configuration.
Cleartext protocols must be filtered out in favor of secure cryptographically backed alternatives.
2
Match secure command-line administration to its protocol and port.
SSH utilizes TCP port 22 to encrypt remote shell sessions.
Telnet on TCP port 23 is unencrypted and unacceptable.
3
Match secure web configuration to its protocol and port.
HTTPS utilizes TCP port 443 to encrypt HTTP traffic using TLS.
HTTP on TCP port 80 lacks payload encryption.

Key Concept

Secure remote management protocol and port pairing
Estimated Time:1m 15s
Rate this question

Topics

Common Ports and Protocols

More questions from this topic