Secure LDAP Port Configuration

N10-009 By islever Editorial Last updated

Explain common networking ports, protocols, services, and traffic types.

Short answer

C Port 636 should be opened in the firewall to allow secure LDAP (LDAPS) communications.

Question

A systems administrator is configuring a new domain server in the network. Which of the following ports should the administrator open in the firewall to allow secure LDAP communications between the domain and the desktops?
  1. 389
  2. 587
  3. 636 Correct Answer
  4. 3389

Key Takeaways

The trap is confusing standard LDAP (port 389) with secure LDAP (LDAPS). You must distinguish between unencrypted and encrypted directory services protocols.

This N10-009 question asks which firewall port enables secure LDAP communications. The correct answer is port 636, which supports LDAPS encryption.

Common mistake: Many candidates select port 389 because it is the default port for LDAP. However, 389 transmits data in cleartext by default, failing the 'secure' requirement specified in the scenario.

Expert Analysis

The question specifies the need for secure LDAP communications. Standard LDAP operates on port 389, but this traffic is unencrypted by default. To ensure security, the protocol must be encapsulated with SSL/TLS, known as LDAPS.

LDAPS specifically uses TCP port 636. This port handles the encrypted directory service communications between the domain server and client desktops. Opening port 389 would allow LDAP traffic but fail to meet the 'secure' requirement unless additional encryption layers are manually configured, which is not the standard default behavior implied here.

Port 587 is used for mail submission (SMTP), and port 3389 is for Remote Desktop Protocol (RDP). Therefore, only port 636 satisfies the specific constraint of secure LDAP.

Exam Strategy

Always look for keywords like 'secure', 'encrypted', or 'TLS/SSL' when dealing with ports. If a standard port (like 389 for LDAP or 25 for SMTP) has a secure counterpart (636 for LDAPS or 587 for SMTP submission), choose the secure one if the scenario explicitly demands security.

Frequently Asked Questions

What is the difference between LDAP and LDAPS?

LDAP (Lightweight Directory Access Protocol) typically uses port 389 and sends data in cleartext. LDAPS (LDAP over SSL/TLS) uses port 636 and encrypts the communication channel, providing confidentiality and integrity.

Why isn't port 389 sufficient for secure LDAP?

Port 389 is the default for unencrypted LDAP. While StartTLS can be used on 389 to upgrade to encryption, LDAPS on port 636 establishes an encrypted connection from the start, making it the direct answer for 'secure LDAP' configurations.

More N10-009 FAQ →

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. ERB14 👍 1 Answered C
    LDAPS (LDAP over SSL/TLS): Operates on TCP port 636. It encrypts directory services communications using SSL/TLS, making it the standard port required for secure LDAP communications.
  2. Skri113xX 👍 1 Answered A
    This feels like a 50/50 between two options. I'll go with A.
  3. smittywerbenjagermanjensen 👍 1 Answered C
    LDAPS 636. Skri is a bot

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Why does a moved 2.4GHz WAP cause intermittent laptop issues?

S-grade

How to Reduce Network Congestion and Improve Performance?

S-grade

Why did the telephone system lose connection with a working console and module access?

S-grade

What is the transport layer transmission format for connectionless communication?

S-grade

Practice All N10-009 Questions

Access 100 questions with complete answers and detailed explanations.

View Full N10-009 Practice Test →

← Back to N10-009 Study Guide