Examkin

Question

Difficulty: MediumCommon Ports and Protocols

A network operations engineer is auditing firewall configurations and service rules across enterprise infrastructure. Match each protocol and default transport port on the left with its corresponding functional application on the right.

  • TACACS+ (TCP Port 49)Centralized AAA authentication for network infrastructure administration
  • SIP (TCP/UDP Port 5060)Session initiation, management, and teardown for VoIP communications
  • SMB (TCP Port 445)Direct network file system and shared printer resource access over IP
  • ISAKMP / IPsec (UDP Port 500)Security association negotiation and key exchange for site-to-site VPNs

Answer

TACACS+ (TCP Port 49) matches centralized AAA authentication for network infrastructure administration; SIP (TCP/UDP Port 5060) matches session initiation, management, and teardown for VoIP communications; SMB (TCP Port 445) matches direct network file system and shared printer resource access over IP; ISAKMP / IPsec (UDP Port 500) matches security association negotiation and key exchange for site-to-site VPNs.
Each protocol is accurately paired with its standardized default transport port and functional role within enterprise networking.

Step-by-Step Solution

1
Analyze administrative access protocol specifications
Identify TACACS+ as operating over TCP port 49 for infrastructure AAA management.
TACACS+ encrypts the entire payload and uses TCP port 49 specifically for administrative device AAA.
2
Identify VoIP control signaling requirements
Map SIP to TCP/UDP port 5060 for call session management.
SIP handles session signaling over port 5060, distinguishing it from the audio stream handled by RTP.
3
Evaluate network file sharing transport options
Match SMB with TCP port 445 for direct file and printer access.
Modern enterprise SMB operates natively over TCP 445 without needing NetBIOS over TCP/IP (ports 137-139).
4
Determine key management for encrypted tunnel establishment
Associate ISAKMP / IPsec with UDP port 500 for VPN security negotiation.
Internet Key Exchange (IKE/ISAKMP) negotiates IPsec security associations over UDP port 500.

Key Concept

Common Ports and Protocol Transport Layer Functions
Rate this question

Topics

Common Ports and Protocols

More questions from this topic