A network administrator is creating a firewall rule for a legacy application that performs plain LDAP directory lookups (no SSL/TLS) against an on-premises Active Directory domain controller. Which inbound TCP port must be opened so the application can successfully query the directory service?
Lightweight Directory Access Protocol (LDAP) uses TCP (and UDP) port 389 for unencrypted directory queries. Port 636 is used for LDAP over SSL/TLS (LDAPS), 3268 is for Global Catalog lookups, and 445 is used by SMB, not LDAP. Therefore, permitting TCP 389 allows the required plain-text LDAP traffic to reach the domain controller, while the other ports would not satisfy the application's needs.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.