1.1 – Ports & Protocols Flashcards
What port does this protocol use?
SSH
TCP 22
What port does this protocol use?
DNS
UDP 53
What port does this protocol use?
SMTP
TCP 25
What port does this protocol use?
FTP
TCP 20, 21
What port does this protocol use?
TFTP
UDP 69
What port does this protocol use?
TELNET
TCP 23
What port does this protocol use?
DHCP
UDP 67, 68
(client sends requests using port 67)
(server sends answers to client using port 68)
What port does this protocol use?
HTTP
TCP 80
What port does this protocol use?
HTTPS
TCP 443
What port does this protocol use?
SNMP
UDP 161
What port does this protocol use?
RDP
TCP 3389
What port does this protocol use?
NTP
UDP 123
What port does this protocol use?
SIP
TCP 5060, 5061
What port does this protocol use?
POP
TCP 110
What port does this protocol use?
IMAP
TCP 143
What port does this protocol use?
LDAP
TCP 389
What port does this protocol use?
LDAPS
TCP 636
What port does this protocol use?
H.323
TCP 1720
What protocol typically uses this port?
22
SSH
and, SFTP
What protocol typically uses this port?
53
DNS
What protocol typically uses this port?
25
SMTP
What protocol typically uses this port?
20
FTP (for an active mode data transfer)
What protocol typically uses this port?
21
FTP (for control information between the client and the server)
What protocol typically uses this port?
69
TFTP
What protocol typically uses this port?
23
TELNET
What protocol typically uses this port?
67
DHCP (client sends requests using port 67)
What protocol typically uses this port?
68
DHCP (server sends answers to client using port 68)
What protocol typically uses this port?
80
HTTP
What protocol typically uses this port?
443
HTTPS
What protocol typically uses this port?
161
SNMP
What protocol typically uses this port?
3389
RDP
What protocol typically uses this port?
123
NTP
What protocol typically uses this port?
5060
SIP
What protocol typically uses this port?
5061
SIP
What protocol typically uses this port?
445
SMB
What protocol typically uses this port?
110
POP
What protocol typically uses this port?
143
IMAP
What protocol typically uses this port?
389
LDAP
What protocol typically uses this port?
636
LDAPS
What protocol typically uses this port?
1720
H.323
List four types of protocols.
- ICMP
- UDP
- TCP
- IP
What are TCP and UDP?
Two different ways to move data across a network connection.
They are transported inside of IP (encapsulated by the IP protocol).
They operate at OSI Layer 4 (the transport layer).
What are the most common Layer 4 protocols?
TCP and UDP.
If someone is referring to a Layer 4 protocol, it will almost always be either TCP or UDP.
What is TCP?
Transmission Control Protocol
- A connection-oriented protocol.
- A “reliable” delivery method.
- It can recover from errors, and manage out-of-order messages or retransmissions.
- Flow control. The receiver can manage how much data is sent.
What does it mean for a delivery method to be “reliable”?
It means that for every package of data that is received, an acknowledgement will be sent back.
What is UDP?
User Datagram Protocol
- A connectionless protocol.
- An “unreliable” form of delivery. No receipt acknowledgement for data; no error recovery, no reordering of data or retransmissions.
- No flow control. The sender determines the amount of data transmitted.
What is a non-ephemeral port?
Permanent port numbers.
- Usually defined as Ports 0 – 1,023
- Commonly used by applications or services that are running on a server.
What is an ephemeral port?
Temporary port numbers
- Usually defined as Ports 1,024 – 65,535
- Usually decided on randomly by a client, in real-time / on the fly.
What is ICMP?
Internet Control Message Protocol
Works like “text messaging” for your network devices.
- Another protocol carried by IP.
- Typically not used for data transfer.
- Devices can request and replt to requests.
What is the difference between a connection-oriented and a connectionless protocol?
What is an example of each?
- A connection-oriented protocol has a formal connection setup and close.
- TCP is connection-oriented.
- A connectionless protocol has no formal open or close to the connection.
- UDP is connectionless.
What is Telnet?
Telecommunication Network
- Allows you to login to devices remotely and gain text-based console access.
- Its communication is in-the-clear (non-encrypted), including the username and password. Therefore it is not a secure option.
What is SSH?
Secure Shell
Looks and acts the same as Telnet, but it all communication is secure (encrypted).
What port does this protocol use?
SFTP
TCP 22
What is TFTP?
Trivial File Transfer Protocol
- A very simple file transfer application. Read and write files.
- No authentication, no encryption.
What is SNMP?
Simple Network Management Protocol
Gathers metrics from network devices.
Queries and receives data.
What are the features and differences between versions of SNMP?
SNMPv1
• structured tables
• no encryption
SNMPv2
• data type enhancements
• bulk transfers (can request and receive a lot of information)
• still no encryption
SNMPv3
• message integrity
• authentication
• encryption
What is SIP?
Session Initiation Protocol
- Used for Voice over IP (VoIP) control
- Sets up and manages VoIP sessions (call, ring, hang up)
- Also extends voice communication by adding video conferencing, instant messaging, file transfer, and other applications.
What is LDAP?
Lightweight Directory Access Protocol
Allows you to store and retrieve information in a network directory, such as Active Directory.
Also has a secure version (LDAPS)
What is H.323?
ITU Telecommunication H.32x protocol series
- Used for Voice over IP (VoIP) control
- Sets up and manages VoIP sessions (call, ring, hang up)
- One of the earliest VoIP standards, but still in use today.
What protocols are typically used for VoIP?
Both SIP and H.323
What is FTPS?
File Transfer Protocol Secure
- FTP over SSL
- Also known as FTP-SSL
- Not the same as SFTP
What is the difference between FTPS and SFTP?
FTPS uses FTP over SSL.
SFTP is FTP over SSH.
What is SFTP?
SSH File Transfer Protocol
• FTP using SSH.
What is TFTP?
Trivial File Transfer Protocol
- Very simple file transfer application. Just read file and write files.
- No authentication or encryption.
- Usually used to download configurations, such as for VoIP phones.
What is SMTP?
Simple Message Transfer Protocol
The protocol used by mail servers to send e-mail to other mail servers.
Note, it is not involved in sending e-mail from a server to the client / end user.
What is POP?
Post Office Protocol
Current version is POP3
Used by local e-mail clients to retrieve e-mail from a remote server over TCP/IP connection.
What is NetBIOS?
Network Basic Input/Output System
Provides services allowing applications on separate computers to communicate over a LAN for file and printer sharing.
Uses port 139.
What port does this protocol use?
NetBIOS
TCP 139
What protocol uses this port?
TCP 139
NetBIOS
What are common examples of connectionless protocols?
ICMP
UDP
IP
IPX
What are common examples of connection-oriented protocols?
TCP
SSH
SSL