Soru

Zorluk: Çok zorNetworking Ports and Protocols

A network engineer is creating an Access Control List (ACL) on a core switch to restrict traffic from a network management workstation. The workstation must be allowed to dynamically query domain name resolutions from an internal server and establish encrypted command-line management sessions to remote routers. However, the policy must strictly prohibit the workstation from acting as a dynamic IP addressing service or establishing unencrypted legacy terminal sessions. Which of the following transport protocol and port combinations must be permitted outbound from the workstation to fulfill this security policy?

  1. UDP port 53 and TCP port 22Cevap
  2. B
    UDP port 67 and TCP port 23
  3. C
    UDP port 68 and TCP port 22
  4. D
    TCP port 53 and UDP port 23

Cevap

The firewall policy must explicitly permit outbound traffic targeted to UDP port 53 for DNS hostname resolution and TCP port 22 for encrypted SSH terminal management.
Standard DNS client queries use UDP port 53 to resolve domain names to IP addresses quickly without connection setup overhead. Secure Shell (SSH) uses TCP port 22 to establish an encrypted, reliable remote terminal connection. Therefore, permitting UDP port 53 and TCP port 22 satisfies both requirements.

Adım Adım Çözüm

1
Identify the protocol and transport requirements for dynamic hostname resolution.
Domain Name System (DNS) operates primarily over UDP port 53 for standard client query resolution.
UDP provides fast, connectionless querying necessary for routine DNS lookup operations.
2
Identify the protocol and transport requirements for secure, encrypted remote terminal sessions.
Secure Shell (SSH) operates over TCP port 22.
TCP port 22 guarantees reliable, encrypted session transport for command-line administration, replacing unsecure Telnet (TCP port 23).
3
Verify and eliminate prohibited service ports.
DHCP server (UDP 67) and DHCP client (UDP 68) ports must not be substituted for DNS, and Telnet (TCP 23) must be blocked due to lack of encryption.
Ensures adherence to the strict security baseline prohibiting unencrypted administrative traffic and improper service roles.

Anahtar Kavram

Port and protocol identification for secure administrative access (SSH/TCP 22) and core network infrastructure services (DNS/UDP 53 vs DHCP/UDP 67/68).
Tahmini Süre:2m 0s
Bu soruyu puanla