Copyright (c) 2026 MindMesh Academy. All rights reserved. This content is proprietary and may not be reproduced or distributed without permission.

2.4.1. Common Ports and Protocols

Memorize these—the exam tests port numbers directly:

ProtocolPort(s)TransportPurposeSecure Alternative
FTP20 (data), 21 (control)TCPFile transferSFTP (22), FTPS (990)
SSH22TCPSecure remote access
Telnet23TCPRemote access (insecure)SSH (22)
SMTP25TCPSend emailSMTPS (587 submission)
DNS53TCP/UDPName resolutionDoH (443), DoT (853)
DHCP67 (server), 68 (client)UDPIP address assignment
TFTP69UDPSimple file transfer
HTTP80TCPWeb trafficHTTPS (443)
NTP123UDPTime synchronizationNTS
SNMP161 (queries), 162 (traps)UDPNetwork managementSNMPv3
LDAP389TCPDirectory accessLDAPS (636)
HTTPS443TCPSecure web traffic
SMB445TCPWindows file sharing
Syslog514UDPLog collection
RDP3389TCPRemote desktop
SIP5060 (plain), 5061 (TLS)TCP/UDPVoIP signaling5061

⚠️ Exam Trap: Know which ports use TCP vs. UDP. DNS uses both—UDP for standard queries (fast), TCP for zone transfers and large responses (reliable). DHCP and TFTP are UDP-only. Web protocols (HTTP, HTTPS, SMTP) use TCP for reliability.

Alvin Varughese
Written byAlvin Varughese
Founder15 professional certifications