A systems administrator is configuring firewall ACL rules to segregate an administrative workstation network from a management server rack. The configuration policy requires permitting remote graphical desktop administration for Windows servers and allowing network infrastructure devices to forward unencrypted system log entries to a central log collector server. Which TWO of the following port and transport protocol combinations must be allowed in the firewall rule base?
- TCP port 3389Answer
- UDP port 514Answer
- CUDP port 3389
- DTCP port 514
Answer
TCP port 3389 and UDP port 514 must be permitted.
The scenario calls for two distinct services: Windows graphical remote desktop management and unencrypted event log collection. Remote Desktop Protocol (RDP) establishes connection-oriented management sessions on TCP port 3389. Standard Syslog event logging transmits unencrypted log entries over UDP port 514. Therefore, allowing TCP port 3389 and UDP port 514 satisfies both operational requirements.
Step-by-Step Solution
Key Concept
Standard Port Numbers and Transport Layer Protocol Pairings
Estimated Time:1m 30s