Which of the following ports should be open if a server is configured as an email server with high security for incoming connections? (Choose two.)

TCP 110 is standard unencrypted POP3, which transmits credentials and message content in plaintext and does not satisfy a high-security configuration.

TCP 143 is standard unencrypted IMAP, which lacks encryption and is therefore not appropriate for a high-security incoming mail server.

TCP 161 is used by SNMP for network device monitoring and management, and is unrelated to email services.

TCP 993 is IMAPS, the SSL/TLS-encrypted version of IMAP, used for secure incoming mail retrieval. It replaces plaintext IMAP on port 143 and satisfies the high-security requirement by encrypting all traffic between the client and server.

TCP 995 is POP3S, the SSL/TLS-encrypted version of POP3, used for secure incoming mail access. It replaces plaintext POP3 on port 110 and ensures that credentials and mail content are protected in transit.