Copyright (c) 2026 MindMesh Academy. All rights reserved. This content is proprietary and may not be reproduced or distributed without permission.

2.4.1. Common Ports and Protocols

Memorize these—the exam tests port numbers directly:

ProtocolPort(s)TransportPurposeSecure Alternative
FTP20 (data), 21 (control)TCPFile transferSFTP (22), FTPS (990)
SSH22TCPSecure remote access—
Telnet23TCPRemote access (insecure)SSH (22)
SMTP25TCPSend emailSMTPS (587 submission)
DNS53TCP/UDPName resolutionDoH (443), DoT (853)
DHCP67 (server), 68 (client)UDPIP address assignment—
TFTP69UDPSimple file transfer—
HTTP80TCPWeb trafficHTTPS (443)
POP3110TCPRetrieve email (downloads it)POP3S (995)
NTP123UDPTime synchronizationNTS
IMAP143TCPRetrieve email (kept on server)IMAPS (993)
SNMP161 (queries), 162 (traps)UDPNetwork managementSNMPv3
LDAP389TCPDirectory accessLDAPS (636)
HTTPS443TCPSecure web traffic—
SMB445TCPWindows file sharing—
Syslog514UDPLog collection—
Microsoft SQL Server1433TCPDatabase access—
RDP3389TCPRemote desktop—
SIP5060 (plain), 5061 (TLS)TCP/UDPVoIP signaling5061

⚠️ Exam Trap: Know which ports use TCP vs. UDP. DNS uses both—UDP for standard queries (fast), TCP for zone transfers and large responses (reliable). DHCP and TFTP are UDP-only. Web protocols (HTTP, HTTPS, SMTP) use TCP for reliability.

See how it connects
Alvin Varughese
Written byAlvin Varughese
Founder•20 professional certifications