Ports and Protocols (OBJ 4.5)

Question 1

FTP - File Transfer Protocol

Answer 1

Port 21
TCP
Transfers files from host to host

Question 2

SSH - Secure shell
SCP - Secure Copy Protocol
SFTP - Secure FTP

Answer 2

Port 22
TCP

SSH - Provides secure remote terminal access and file transfer capabilities.
SCP - Provides secure copy function.
SFTP - Provides secure file transfers.

Question 3

Telnet

Answer 3

Port 23

TCP

Remotely accessing network devices using text-based environment.

It is an older version of Telnet.

It is unencrypted and considered insecure, and should not be used.

Note: Many questions will focus on using remote control over telnet and ask how you can better secure it. The answer is to use SSH.

Question 4

SMTP
Simple Mail Transfer Protocol

Answer 4

Port 25

TCP

Provides the ability to send emails over the network.

Question 5

DNS
Domain Name System

Answer 5

Port 53

TCP and UDP

Translates Domain names into IP addresses.

Question 6

TFTP
Trivial File Transfer Protocol

Answer 6

Port 69

UDP

Used as a lightweight file transfer method for sending configuration files or network booting of an operating system.

Question 7

HTTP
Hyper Text Transfer Protocol

Answer 7

Port 80

TCP

Used for insecure browsing

Question 8

Kerberos

Answer 8

Port 88

UDP

Network authentication protocol.

Question 9

POP3
Post Office Protocol Version 3

Answer 9

Port 110

TCP

Responsible retrieving emails from a server to a local device.

Question 10

NNTP
Network News Transfer Protocol

Answer 10

Port 119

TCP

Used to exchange news articles, and manage newsgroups.

Question 11

RPC
Remote Procedure Call

Answer 11

Port 135

TCP and UDP

Facilitates communication between different system processes.
Often used as part of Windows file sharing system.

Question 12

NetBIOS

Answer 12

Port 137, 138 & 139

TCP and UDP

A network protocol that allows applications on different computers to communicate over a local area network (LAN).

Question 13

IMAP
Internet Message Access Protocol

Answer 13

Port 143

TCP

Allows users to access their email messages from a mail server.

Question 14

SNMP
Simple Network Management Protocol

Answer 14

Port 161

UDP

A protocol that allows network administrators to monitor and manage network devices.

Question 15

SNMP Trap

Answer 15

Port 162

UDP

An SNMP trap is a message sent from a network device to a management system to notify it of a significant event or status change.

Question 16

LDAP
Lightweight Directory Access Protocol

Answer 16

Port 389

TCP

A standard protocol for accessing and managing directory services over a network.

Question 17

HTTPS
Hyper Text Transfer Protocol Secure

Answer 17

Port 443

TCP

Provides secure web communication.

Question 18

SMB
Server Message Block

Answer 18

Port 445

TCP

A network protocol that allows users to share files, printers, and other resources.
It is a client-server protocol, meaning the client requests and the server responds.

Question 19

SMTPS
SMTP Secure

Answer 19

Port 465 and 587

TCP

Provide secure SMTP communication

Question 20

Syslog

Answer 20

Port 514

UDP

Used for sending system log messages

Question 21

LDAP Secure

Answer 21

Port 636

TCP

LDAP communication over SSL/TLS

Question 22

IMAPS
Internet Message Access Protocol over SSL/TLS

Answer 22

Port 993

TCP

Allows users to access their email messages from a mail server securely.

Question 23

POP3S
Post Office Protocol version 3 Secure

Answer 23

Port 995

TCP

Responsible for retrieving emails from a server to a local device.

Question 24

MSSQL

Answer 24

Port 1433

TCP

Used to facilitate communication with MSSQL Server

Question 25

RADIUS TCP Remote Authentication Dial-In User Service

Answer 25

Port 1645, 1646 TCP The RADIUS request includes a shared secret key that the server uses to authenticate the client. What RADIUS does ? Authentication: Determines if a user can access a network Authorization: Establishes what privileges a user has on a network Accounting: Records a user's activity while they're connected to a network

Question 26

RADIUS UDP

Answer 26

Port 1812 and 1813 UDP Used for authentication and accounting as defined by the Internet Engineering Task Force (IETF)

Question 27

RDP Remote Desktop Protocol

Answer 27

Port 3389 TCP Enables Remote Desktop access

Question 28

Syslog TLS

Answer 28

Port 6514 TCP Used in a secure syslog that uses SSL/TLS to encrypt the IP packets using a certificate before sending them across the IP network to the syslog collector.

Question 29

Session Initiation Protocol (SIP), port 5060

Answer 29

Session Initiation Protocol (SIP), port 5060, is used for signaling in Voice over IP (VoIP) services. Unauthorized access to this port can result in toll fraud or unauthorized call control.