Soru

Zorluk: OrtaCommon Ports and Protocols

A network systems engineer is documenting security perimeter rules and directory services infrastructure. Match each network service on the left with its corresponding default transport layer port and operational profile on the right.

  • Kerberos Authentication ServiceTCP/UDP port 88 used for issuing ticket-granting tickets during centralized domain authentication.
  • Internet Message Access Protocol Secure (IMAPS)TCP port 993 used for retrieving mailbox content over an encrypted TLS transport connection.
  • Internet Key Exchange (IKE)UDP port 500 used to negotiate security associations and exchange keys for IPsec VPN tunnels.
  • Lightweight Directory Access Protocol (LDAP)TCP port 389 used for cleartext directory queries and user attribute lookups.

Cevap

Kerberos Authentication Service matches TCP/UDP port 88; IMAPS matches TCP port 993; Internet Key Exchange (IKE) matches UDP port 500; Lightweight Directory Access Protocol (LDAP) matches TCP port 389.
Each service is accurately mapped to its standardized port assignment: Kerberos to TCP/UDP port 88 for authentication tokens, IMAPS to TCP port 993 for encrypted mail access, IKE to UDP port 500 for IPsec setup, and LDAP to TCP port 389 for plain text directory lookups.

Adım Adım Çözüm

1
Identify the authentication protocol operating port for domain ticketing.
Kerberos uses port 88 (TCP/UDP) for key distribution center (KDC) authentication.
Domain controllers respond to ticket granting requests on port 88.
2
Distinguish between secure mail retrieval ports and legacy unencrypted variants.
IMAPS requires TCP port 993 for implicit SSL/TLS encapsulation, whereas standard IMAP uses TCP port 143.
Secure email retrieval protocols mandate dedicated encrypted listening ports.
3
Determine the negotiation protocol for establishing IPsec tunnels.
IKE negotiates SA parameters over UDP port 500.
Phase 1 and Phase 2 ISAKMP/IKE negotiations run over UDP port 500 (or UDP 4500 when NAT-Traversal is engaged).
4
Identify the unencrypted directory access port.
LDAP runs unencrypted over TCP port 389, distinct from LDAPS which uses TCP port 636.
Standard directory access baseline services default to port 389.

Anahtar Kavram

Standard default port numbers and transport layer encapsulation for administrative, email, VPN, and directory protocols.
Bu soruyu puanla