Page 770 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide
P. 770
Telnet, TCP Port 23 This is a terminal emulation network application
that supports remote connectivity for executing commands and
running applications but does not support transfer of files.
File Transfer Protocol (FTP), TCP Ports 20 (Passive
Data)/Ephemeral (Active Data) and 21 (Control Connection)
This is a network application that supports an exchange of files that
requires anonymous or specific authentication.
Trivial File Transfer Protocol (TFTP), UDP Port 69 This is a
network application that supports an exchange of files that does not
require authentication.
Simple Mail Transfer Protocol (SMTP), TCP Port 25 This is a
protocol used to transmit email messages from a client to an email
server and from one email server to another.
Post Office Protocol (POP3), TCP Port 110 This is a protocol used to
pull email messages from an inbox on an email server down to an
email client.
Internet Message Access Protocol (IMAP), TCP Port 143 This is a
protocol used to pull email messages from an inbox on an email server
down to an email client. IMAP is more secure than POP3 and offers
the ability to pull headers down from the email server as well as to
delete messages directly off the email server without having to
download to the local client first.
Dynamic Host Configuration Protocol (DHCP), UDP Ports 67 and
68 DHCP uses port 67 as the destination port on the server to receive
client communications and port 68 as the source port for client
requests. It is used to assign TCP/IP configuration settings to systems
upon bootup. DHCP enables centralized control of network
addressing.
Hypertext Transfer Protocol (HTTP), TCP Port 80 This is the
protocol used to transmit web page elements from a web server to web
browsers.
Secure Sockets Layer (SSL), TCP Port 443 (for HTTP
Encryption) This is a VPN-like security protocol that operates at the
Transport layer. SSL was originally designed to support secured web

