Examkin

Soru

Zorluk: Çok zorCommon Ports and Protocols

An enterprise network administrator is configuring perimeter firewall rules to isolate an application subnet while enabling secure integration with centralized infrastructure services in the management zone. The application servers require three network communication capabilities:

1. Directory lookup services using StartTLS (explicit TLS negotiation over the standard directory port).
2. Centralized event logging using secure transport (Syslog over TLS according to RFC 5425).
3. Ticket-granting user authentication via Kerberos.

Which combination of transport protocols and destination port numbers must be permitted on the firewall to satisfy all three requirements?

  1. TCP 389 for LDAP StartTLS, TCP 6514 for Syslog over TLS, and TCP/UDP 88 for KerberosCevap
  2. B
    TCP 636 for LDAP StartTLS, UDP 6514 for Syslog over TLS, and TCP 88 for Kerberos
  3. C
    TCP 389 for LDAP StartTLS, UDP 514 for Syslog over TLS, and UDP 445 for Kerberos
  4. D
    TCP 636 for LDAP StartTLS, TCP 514 for Syslog over TLS, and TCP/UDP 389 for Kerberos

Cevap

TCP 389 for LDAP StartTLS, TCP 6514 for Syslog over TLS, and TCP/UDP 88 for Kerberos
The option specifying TCP 389 for LDAP StartTLS, TCP 6514 for Syslog over TLS, and TCP/UDP 88 for Kerberos is correct. StartTLS uses explicit TLS negotiation initiating over standard LDAP TCP port 389. Syslog over TLS (RFC 5425) is standardized to use TCP port 6514 for reliable encrypted log transmission. Kerberos authentication uses port 88 over both TCP and UDP.

Adım Adım Çözüm

1
Determine the transport port and protocol required for LDAP StartTLS.
LDAP StartTLS begins as cleartext on the standard LDAP port TCP 389 and upgrades to TLS encryption within the session via the STARTTLS extended request. (Implicit LDAPS uses TCP 636).
Explicit TLS protocols initiate on standard unencrypted ports before upgrading, whereas implicit TLS protocols listen on dedicated secure ports.
2
Determine the transport port and protocol required for Syslog over TLS.
Syslog over TLS (RFC 5425) uses TCP port 6514 to ensure reliable delivery and TLS session encryption. Standard unencrypted syslog operates on UDP port 514.
Secure syslog requires connection-oriented TCP to maintain the TLS session and guarantee log packet delivery.
3
Determine the transport ports and protocols required for Kerberos authentication.
Kerberos authentication services operate on destination port 88 using both TCP and UDP.
Kerberos utilizes UDP for lightweight ticket requests and falls back to TCP for larger ticket payloads or TCP-only enforcement.
4
Combine the identified protocol and port requirements.
The correct rule configuration allows TCP 389, TCP 6514, and TCP/UDP 88.
This exact rule set satisfies all three security and functional requirements.

Anahtar Kavram

Common Ports and Protocols
Bu soruyu puanla

Konular

Common Ports and Protocols

Bu konudan daha fazla soru