1.1 Ports/Protocols

Question 1

Define ICMP.

Answer 1

Internet Control Message Protocol, it is a layer 3 protocol encapsulated within IP used for network diagnostics and node recognition.

Question 2

What port does SSH use?

Answer 2

TCP/22

Question 3

What port does DNS use?

Answer 3

UDP/53

Question 4

What port does HTTP use?

Answer 4

TCP/80

Question 5

What port does HTTPS use?

Answer 5

TCP/443

Question 6

What port does SMTP use?

Answer 6

TCP/25

Question 7

What port does SFTP use?

Answer 7

TCP/22

Question 8

What port does SNMP use?

Answer 8

UDP/161

Question 9

What port does FTPS use?

Answer 9

TCP/21

Question 10

What port does FTP use?

Answer 10

TCP/20

TCP/21

Question 11

What are the difference between the two FTP ports?

Answer 11

TCP/20 (data port) is used for transferring data.

TCP/21 (control port) controls the working directory and other control procedures.

Question 12

Who controls the data flow with UDP?

Answer 12

sender

Question 13

Who controls the data flow with TCP?

Answer 13

receiver

Question 14

What is the difference between FTPS, and SFTP?

Answer 14

SFTP uses SSH to tunnel FTP through TCP/22.

SFTP is FTP with a SSL/TLS layer through TCP/21.

Question 15

What is the difference between SMTP, SNMP, and ICMP?

Answer 15

SMTP is simple mail transfer protocol, sends data from a client to a mail server or between mail servers. TCP/25. Layer 7.

SNMP is Simple Network Management Protocol, it gathers information from managed devices on an IP network. UDP/161. Layer 7.

ICMP is Internet Control Message Protocol, encapsulated within and considered a part of IP. Used by routers and NICs to send error and diagnostic information. Port-less. Layer 3.

Question 16

What are two common commands that use ICMP?

Answer 16

Ping, uses ICMP’s echo request and reply ability

Traceroute, uses ICMP’s TTL ability.

Question 17

UDP/53

Answer 17

DNS

Question 18

TCP/25

Answer 18

SMTP

Question 19

UDP/161

Answer 19

SNMP

Question 20

TCP/22

Answer 20

SSH, SFTP

Question 21

TCP/23

Answer 21

Telnet

Question 22

TCP/993

Answer 22

IMAPS

Question 23

TCP/995

Answer 23

POPS

Question 24

TCP/110

Answer 24

POP3

Question 25

TCP/143

Answer 25

IMAP

Question 26

UDP 67, 68

Answer 26

DHCP

Question 27

What port does DHCP use?

Answer 27

UDP/67 - server | UDP/68 - clients

Question 28

UDP/69

Answer 28

TFTP

Question 29

TFTP uses what port

Answer 29

UDP/69

Question 30

RDP uses what port

Answer 30

TCP/3389

Question 31

NTP uses what port?

Answer 31

UDP/123

Question 32

UDP/123

Answer 32

NTP

Question 33

SIP uses what port

Answer 33

5060, 5061 TCP or UDP

Question 34

5060/TCP

Answer 34

SIP

Question 35

5061/TCP

Answer 35

SIP

Question 36

TCP/445

Answer 36

SMB

Question 37

Difference between LDAP, SMB?

Answer 37

Lightweight Directory Access Protocol, stores and retrieves information from a network directory such as users, devices, printers. (Active Directory). Port 389, Port 636. Server Message Block, file and printer sharing between Windows systems. Port 445.

Question 38

Difference between LDAP, SMB?

Answer 38

Lightweight Directory Access Protocol Server Message Block

Question 39

TCP/389

Answer 39

LDAP

Question 40

LDAPS uses what port

Answer 40

TCP/636

Question 41

TCP/636

Answer 41

LDAPS

Question 42

H.323 uses what port?

Answer 42

TCP/1720

Question 43

TCP/1720

Answer 43

H.323

Question 44

Difference between H.323 and SIP?

Answer 44

H.323 is an older dialing/signaling standard for VoIP. Sets up, maintains, terminates, calls. Port 1720. SIP is the modernized alternative to H.323 with extended voice communication options such as file transfer and instant messaging. Port 5060/5061.

Question 45

Explain the difference between the SNMP versions.

Answer 45

SNMPv1 = unencrypted, small structured tables. SNMPv2 = unencrypted, bulk transfers. SNMPv3 = encryption, authentication, integrity.

Question 46

Explain the difference between the SNMP versions.

Answer 46

SNMPv1 = unencrypted SNMPv2 = unencrypted SNMPv3 = encryption, authentication

Question 47

Why is Telnet still useful today excluding legacy systems?

Answer 47

It is supported by almost every sever; it can be used to verify if servers are listening to a particular port

Question 48

NETBIOS uses what port?

Answer 48

TCP/139

Question 49

TCP/139

Answer 49

NETBIOS