3.1 Secure Protocols

Question 1

Well-known ports

Answer 1

Ports 0-1023 are considered well known ports

Question 2

Registered Ports

Answer 2

Ports 1024-49,151 are considered registered and are usually assigned to proprietary protocols

Question 3

Dynamic or private ports

Answer 3

Ports 49,152-65,535 can be used by any application

Question 4

Port 21

Answer 4

FTP File transfer protocol is used to transfer files from host to host

Question 5

Port 22

Answer 5

SSH, SCP, SFTP: Secure shell is used to remotely administer network devices and systems. SCP is used for secure cpy and SFTP for secure FTP

Question 6

Port 23

Answer 6

Telnet: Unencrypted method to remotely administer network devices (should not be used)

Question 7

Port 25

Answer 7

SMTP: Simple mail transfer protocol is used to send email over the internet

Question 8

Port 53

Answer 8

DNS: Domain name service is used to resolve hostnames to IP’s and IP’s to hostnames

Question 9

Port 69

Answer 9

TFTP: Trivial FTP is used as a simplified version of FTP to put a file on a remote host, or get a file from a remote host

Question 10

Port 80

Answer 10

HTTP: Hyper text transfer protocol is used to transmit web page data to a client for unsecured web browsing

Question 11

Port 88

Answer 11

Kerberos: used for network authentication using a system of tickets within a windows domain

Question 12

Port 110

Answer 12

POP3: Post office protocol v3 is used to receive email from a mail server

Question 13

Port 119

Answer 13

NNTP: network news transfer protocol is used to transport Usenet articles

Question 14

Port 135

Answer 14

RPC/DCOM-scm: Remote procedure call is used to located DCOM ports request a service from a program on another computer on the network

Question 15

Port 137-139

Answer 15

NetBIOS: used to conduct name querying, sending of dat, and other functions over a NetBIOS connection

Question 16

Port 143

Answer 16

IMAP: Internet message access protocol is used to receive email from a mail server with more features than POP3

Question 17

Port 161

Answer 17

SNMP: Simple network management protocol is used to remotely monitor network devices

Question 18

Port 162

Answer 18

SNMPTRAP: Used to send trap and informrequests to the SNMP manager on a network

Question 19

Port 389

Answer 19

LDAP: Lightweight directory access protocol is used to maintain directories of users and other objects

Question 20

Port 443

Answer 20

HTTPS: Hyper text transfer protocol secure is used to transmit web page data to a client over an encrypted SSL connection

Question 21

Port 445

Answer 21

SMB: Server message block is used to provide shared access to files and other resources on a network

Question 22

Port 465/587

Answer 22

SMTP with SSL/TLS: Simple mail protocol used to send email over the internet with an SSL and TLS secured connection

Question 23

514

Answer 23

Syslog: Used to conduct computer message logging, especially for routers and firewall logs

Question 24

636

Answer 24

LDAP SSL/TLS: Used to maintain directories of users and other objects over an encrypted SSL/TLS connection

Question 25

860

Answer 25

iSCSI: used for linking data storage facilities over IP

Question 26

989/990

Answer 26

FTPS: File transfer protocol secure is used to transfer files from host to host over an encrypted network

Question 27

993

Answer 27

IMAP4 with SSL/TLS: Internet message access protocol is used to receive email from a mail server over an SSL/TLS encrypted connection

Question 28

995

Answer 28

POP3 SSL/TLS: Post office protocol version 3 used to receive email from a mail server over SSL/TLS

Question 29

1433

Answer 29

Ms-sql-s: Microsoft sql server is used to receive SQL database queries from clients

Question 30

1645/1646

Answer 30

RADIUS: remote authentication dial-in user service is used for authentication and authorization (1645) and accounting (1646)

Question 31

1701

Answer 31

L2TP: Layer 2 tunnel protocol is used as an underlying VPN protocol but has no security

Question 32

1723

Answer 32

PPTP: point to point tunneling protocol underlying VPN protocol with built in security

Question 33

1812/1813

Answer 33

RADIUS: remote authentication dial-in user service is used for authentication and authorization (1812) and accounting (1813)

Question 34

3225

Answer 34

FCIP: fibre channel IP is used to encapsulate fibre channel frames within TCP/IP packets

Question 35

3260

Answer 35

iSCSI target: used for linking data storage facilities over IP

Question 36

3389

Answer 36

RDP: Remote desktop protocol is used to remotely view and control other windows systems via a GUI

Question 37

3868

Answer 37

Diameter: a more advanced AAA protocol that is a replacement for RADIUS

Question 38

6514

Answer 38

Syslog over TLS: It is used to conduct computer message logging, routers and firewall logs, over a TLS encrypted connection