A network security technician is auditing stateless firewall access control lists (ACLs) to enforce the principle of least privilege for specific enterprise infrastructure services. Match each network service requirement on the left with its corresponding protocol, transport layer protocol, and default port number configuration on the right.
- Encrypted remote console management and interactive secure file transfers (SFTP)SSH / SFTP over TCP port 22
- Secure directory service authentication queries over an SSL/TLS tunnelLDAPS over TCP port 636
- Encrypted remote retrieval and synchronization of email messages while retaining server copiesIMAPS over TCP port 993
- Automated IP address assignment and host configuration across subnets via relay agentsDHCP over UDP ports 67 and 68
Cevap
Encrypted remote console management (SFTP) matches SSH/SFTP over TCP port 22. Secure directory authentication matches LDAPS over TCP port 636. Encrypted email synchronization preserving server copies matches IMAPS over TCP port 993. Automated dynamic IP configuration matches DHCP over UDP ports 67 and 68.
Each service requirement maps precisely to its standard well-known port, transport layer protocol, and security profile: SFTP/SSH on TCP 22, LDAPS on TCP 636, IMAPS on TCP 993, and DHCP on UDP 67/68.
Adım Adım Çözüm
Anahtar Kavram
Common Application Layer Protocols, Transport Layer Selection (TCP vs UDP), and Secure Port Mappings