1.1 Ports/Protocols Flashcards
Define ICMP.
Internet Control Message Protocol, it is a layer 3 protocol encapsulated within IP used for network diagnostics and node recognition.
What port does SSH use?
TCP/22
What port does DNS use?
UDP/53
What port does HTTP use?
TCP/80
What port does HTTPS use?
TCP/443
What port does SMTP use?
TCP/25
What port does SFTP use?
TCP/22
What port does SNMP use?
UDP/161
What port does FTPS use?
TCP/21
What port does FTP use?
TCP/20
TCP/21
What are the difference between the two FTP ports?
TCP/20 (data port) is used for transferring data.
TCP/21 (control port) controls the working directory and other control procedures.
Who controls the data flow with UDP?
sender
Who controls the data flow with TCP?
receiver
What is the difference between FTPS, and SFTP?
SFTP uses SSH to tunnel FTP through TCP/22.
SFTP is FTP with a SSL/TLS layer through TCP/21.
What is the difference between SMTP, SNMP, and ICMP?
SMTP is simple mail transfer protocol, sends data from a client to a mail server or between mail servers. TCP/25. Layer 7.
SNMP is Simple Network Management Protocol, it gathers information from managed devices on an IP network. UDP/161. Layer 7.
ICMP is Internet Control Message Protocol, encapsulated within and considered a part of IP. Used by routers and NICs to send error and diagnostic information. Port-less. Layer 3.
What are two common commands that use ICMP?
Ping, uses ICMP’s echo request and reply ability
Traceroute, uses ICMP’s TTL ability.
UDP/53
DNS
TCP/25
SMTP
UDP/161
SNMP
TCP/22
SSH, SFTP
TCP/23
Telnet
TCP/993
IMAPS
TCP/995
POPS
TCP/110
POP3
TCP/143
IMAP
UDP 67, 68
DHCP
What port does DHCP use?
UDP/67 - server
UDP/68 - clients
UDP/69
TFTP
TFTP uses what port
UDP/69
RDP uses what port
TCP/3389
NTP uses what port?
UDP/123
UDP/123
NTP
SIP uses what port
5060, 5061 TCP or UDP
5060/TCP
SIP
5061/TCP
SIP
TCP/445
SMB
Difference between LDAP, SMB?
Lightweight Directory Access Protocol, stores and retrieves information from a network directory such as users, devices, printers. (Active Directory). Port 389, Port 636.
Server Message Block, file and printer sharing between Windows systems. Port 445.
Difference between LDAP, SMB?
Lightweight Directory Access Protocol
Server Message Block
TCP/389
LDAP
LDAPS uses what port
TCP/636
TCP/636
LDAPS
H.323 uses what port?
TCP/1720
TCP/1720
H.323
Difference between H.323 and SIP?
H.323 is an older dialing/signaling standard for VoIP. Sets up, maintains, terminates, calls. Port 1720.
SIP is the modernized alternative to H.323 with extended voice communication options such as file transfer and instant messaging. Port 5060/5061.
Explain the difference between the SNMP versions.
SNMPv1 = unencrypted, small structured tables.
SNMPv2 = unencrypted, bulk transfers.
SNMPv3 = encryption, authentication, integrity.
Explain the difference between the SNMP versions.
SNMPv1 = unencrypted
SNMPv2 = unencrypted
SNMPv3 = encryption, authentication
Why is Telnet still useful today excluding legacy systems?
It is supported by almost every sever; it can be used to verify if servers are listening to a particular port
NETBIOS uses what port?
TCP/139
TCP/139
NETBIOS