Workstations query a directory server for account information. Which port does that directory protocol use?
Select an answer to reveal the explanation.
Short Explanation
The workstations are asking a directory, not a file share, a mail server, or a name server. You permit TCP 389, the LDAP port. The other three ports belong to those other conversations.
Full Explanation
LDAP is the directory protocol workstations use to look up account information, and it uses TCP port 389. That is the port to permit. TCP port 445 is SMB file sharing. It is not a directory lookup. TCP port 25 is SMTP mail transfer. TCP port 53 is DNS. A name lookup is not the directory query in this stem. Exam caveat: a protected directory may also listen on a different port. The plain directory protocol on the outline is LDAP on 389. Operational check: permit TCP 389, look up an account from a workstation, and confirm the query is not sent to the file-share port. Look up one account and confirm the query uses the directory port. If the directory is the protected one, follow that port instead of assuming 389. Write the result on the ticket before you close it.