SK0-004 · Question #399
An administrator is setting up LDAP in the environment to allow directory services authentication and login, and wants to allow secure connection only. Which of the following network ports should be…
The correct answer is C. 3268. LDAP Global Catalog queries in Active Directory environments use port 3268, making it the correct port to allow for directory services authentication.
Question
An administrator is setting up LDAP in the environment to allow directory services authentication and login, and wants to allow secure connection only. Which of the following network ports should be allowed on the internal and external firewalls?
Options
- A443
- B989
- C3268
- D3389
How the community answered
(53 responses)- A8% (4)
- B15% (8)
- C74% (39)
- D4% (2)
Why each option
LDAP Global Catalog queries in Active Directory environments use port 3268, making it the correct port to allow for directory services authentication.
Port 443 is reserved for HTTPS web traffic and has no role in LDAP or directory services authentication.
Port 989 is assigned to FTPS data channel transfers and is unrelated to LDAP or directory services.
Port 3268 is the Microsoft Active Directory Global Catalog LDAP port, which allows directory service queries across an entire AD forest for authentication and login. Among the listed options, only port 3268 is associated with LDAP and directory services, making it the appropriate port to permit on firewalls for this purpose. The Global Catalog on this port enables cross-domain authentication lookups required for enterprise LDAP implementations.
Port 3389 is used for Remote Desktop Protocol (RDP) remote management sessions, not for LDAP directory services.
Concept tested: LDAP Global Catalog port for directory services
Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/config-firewall-for-ad-domains-and-trusts
Topics
Community Discussion
No community discussion yet for this question.