Question

Difficulty: MediumCommon Ports and Protocols

A systems administrator is configuring perimeter firewall access control rules to enable centralized administrative access across enterprise infrastructure. The security baseline requires deploying TACACS+ for AAA management of network switches and Remote Desktop Protocol (RDP) for graphical management of remote Windows servers. Which of the following port and transport layer protocol combinations must be permitted through the firewall to support these services? (Select TWO)

  1. TCP port 49Answer
  2. TCP port 3389Answer
  3. C
    UDP port 49
  4. D
    UDP port 3389

Answer

The correct port and protocol combinations are TCP port 49 for TACACS+ and TCP port 3389 for RDP.
TACACS+ uses TCP port 49 to provide reliable, connection-oriented transmission for network access authentication, authorization, and accounting. Remote Desktop Protocol (RDP) uses TCP port 3389 to establish graphical administrative sessions on Windows systems.

Step-by-Step Solution

1
Identify the transport layer protocol and default port for TACACS+.
TACACS+ uses connection-oriented TCP on port 49 to ensure reliable delivery of AAA payloads.
Unlike RADIUS which uses UDP ports 1812/1813, TACACS+ encrypts the entire packet body over TCP port 49.
2
Identify the transport layer protocol and default port for Remote Desktop Protocol (RDP).
RDP uses TCP port 3389 for remote desktop session initiation and control.
Graphical remote desktop traffic requires a reliable connection provided by TCP port 3389.

Key Concept

Identifying transport layer protocols (TCP/UDP) and default well-known port numbers for administrative remote management services (TACACS+ and RDP).
Rate this question