MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Which protocol primarily uses port 389 for communication in cloud environments?
   a. DNS
   b. LDAP
   c. HTTP
   d. FTP
   Answer: b. LDAPcbtnuggets+1
2. In Active Directory services, port 389 is used for which of the following purposes?
   a. DHCP communication
   b. Directory replication and authentication
   c. File transfer
   d. Web browsing
   Answer: b. Directory replication and authenticationlearn.microsoft+1
3. What is the default state of data transmitted over port 389?
   a. Encrypted
   b. Compressed
   c. Plain text
   d. Signed
   Answer: c. Plain textsecurity+1
4. Which port should be used for encrypted LDAP communications?
   a. 80
   b. 389
   c. 443
   d. 636
   Answer: d. 636nwkings+1
5. What does LDAPS refer to when securing LDAP traffic?
   a. LDAP over SSH
   b. DNS over HTTPS
   c. LDAP over SSL/TLS
   d. FTP over SSL
   Answer: c. LDAP over SSL/TLSituonline+1
6. Which of the following authentication methods does LDAP over port 389 support?
   a. Simple bind and SASL
   b. Kerberos only
   c. OAuth only
   d. SAML only
   Answer: a. Simple bind and SASLsslinsights+1
7. What is a major security risk of using port 389 for LDAP?
   a. Slower performance
   b. Eavesdropping and data interception
   c. Incompatibility with legacy systems
   d. Lack of support for directory replication
   Answer: b. Eavesdropping and data interceptionvideoexpertsgroup+1
8. Which protocol is primarily associated with port 389?
   a. HTTP
   b. LDAP
   c. SMTP
   d. POP3
   Answer: b. LDAPnfina+1
9. For cloud environments, what aspect makes port 389 unsuitable for sensitive data?
   a. Speed limit
   b. Lack of encryption
   c. High latency
   d. Limited compatibility
   Answer: b. Lack of encryptioncbtnuggets+1
10. Which of these is a best practice for LDAP security in cloud networks?
    a. Use port 389 without any firewall
    b. Encrypt LDAP traffic using LDAPS or StartTLS
    c. Disable multi-factor authentication
    d. Allow unrestricted internet access
    Answer: b. Encrypt LDAP traffic using LDAPS or StartTLSnwkings+1
11. What type of attack is port 389 most vulnerable to due to its cleartext transmission?
    a. Ransomware
    b. Man-in-the-Middle
    c. Phishing
    d. SQL Injection
    Answer: b. Man-in-the-Middlesecurity+1
12. On which transport protocol does LDAP using port 389 operate?
    a. UDP only
    b. TCP only
    c. TCP and UDP
    d. ICMP only
    Answer: c. TCP and UDPsslinsights+1
13. What is the primary use of port 389 in enterprise cloud networks?
    a. Email transmission
    b. Network file transfers
    c. Directory queries and authentication
    d. Streaming media
    Answer: c. Directory queries and authenticationcbtnuggets+1
14. Which cloud service commonly interacts with LDAP servers using port 389?
    a. Microsoft Azure Active Directory
    b. Google Cloud Storage
    c. Amazon S3
    d. Salesforce CRM
    Answer: a. Microsoft Azure Active Directoryencryptionconsulting+1
15. What is the impact of exposing port 389 to untrusted networks?
    a. Improved security
    b. Unauthorized directory access
    c. Enhanced performance
    d. Reduced authentication
    Answer: b. Unauthorized directory accessvideoexpertsgroup+1
16. What method can upgrade an LDAP connection on port 389 to encrypted?
    a. VPN
    b. StartTLS
    c. SSL Proxy
    d. Kerberos ticketing
    Answer: b. StartTLSituonline+1
17. For secure LDAP communication, which setup should be implemented?
    a. Port 389 with plain text
    b. Port 636 with SSL/TLS
    c. HTTP proxy over port 80
    d. UDP socket on port 53
    Answer: b. Port 636 with SSL/TLSnwkings+1
18. What is the purpose of directory services utilizing port 389?
    a. Video streaming
    b. Data encryption
    c. Managing user accounts and access
    d. Social media interaction
    Answer: c. Managing user accounts and accesssslinsights+1
19. What security recommendation applies to the use of LDAP port 389 in cloud environments?
    a. Regularly expose it publicly
    b. Restrict access using firewall rules
    c. Disable logging
    d. Ignore failed authentication attempts
    Answer: b. Restrict access using firewall rulescbtnuggets+1
20. Which function is NOT performed by LDAP over port 389?
    a. Modifying directory entries
    b. Encrypting directory traffic by default
    c. Authenticating users
    d. Allowing address book lookup
    Answer: b. Encrypting directory traffic by defaultvideoexpertsgroup+1
21. Why is port 389 called a “clear text” port?
    a. Traffic is compressed
    b. Traffic is encrypted
    c. Traffic is sent in plain text
    d. Traffic is prioritized
    Answer: c. Traffic is sent in plain textsecurity+1
22. What protocol upgrade can secure LDAP on port 389?
    a. SSH tunneling
    b. StartTLS
    c. HTTP/2
    d. SFTP
    Answer: b. StartTLSituonline+1
23. Which version of LDAP is most likely to run on port 389?
    a. LDAPv1
    b. LDAPv2
    c. LDAPv3
    d. LDAPv4
    Answer: c. LDAPv3nfina+1
24. Which operating systems commonly support LDAP over port 389?
    a. Windows only
    b. Linux only
    c. Cross-platform support
    d. macOS only
    Answer: c. Cross-platform supportsslinsights+1
25. What should administrators ensure when using StartTLS with port 389?
    a. Firewall is disabled
    b. Certificates are valid and trusted
    c. SSL settings are ignored
    d. Directory entries are not backed up
    Answer: b. Certificates are valid and trustednwkings+1
26. What is a risk when port 389 is open on a network device?
    a. Increased bandwidth
    b. Denial of Service (DoS) attacks
    c. Improved encryption
    d. Faster directory response
    Answer: b. Denial of Service (DoS) attackssecurity+1
27. Which scenario justifies using port 389 instead of 636 for LDAP?
    a. Exposing traffic to public internet
    b. Highly secure, isolated internal network
    c. Handling financial transactions
    d. Storing passwords in directory
    Answer: b. Highly secure, isolated internal networkituonline+1
28. When authenticating users, which request does the LDAP client send over port 389?
    a. Authorization token
    b. Bind request with credentials
    c. HTTP header
    d. DNS query
    Answer: b. Bind request with credentialsupguard+1
29. Why is using port 389 a bad practice in cloud-integrated environments?
    a. It is deprecated
    b. It allows attackers to intercept sensitive data
    c. It uses excessive memory
    d. It does not support authentication
    Answer: b. It allows attackers to intercept sensitive dataairowire+1
30. Which best describes the start-to-finish process of an LDAP connection on port 389?
    a. The client connects, executes queries, authenticates, and receives data in plaintext
    b. The client encrypts data before sending
    c. The client uses token-based authentication
    d. The client signs data before sending
    Answer: a. The client connects, executes queries, authenticates, and receives data in plaintextcbtnuggets+1
31. What type of data is often retrieved using LDAP on port 389?
    a. Multimedia files
    b. Usernames, email addresses, group memberships
    c. Encrypted databases
    d. System logs only
    Answer: b. Usernames, email addresses, group membershipsvideoexpertsgroup+1
32. Which aspect should NOT be present in LDAP traffic over port 389?
    a. Sensitive authentication details
    b. Directory queries
    c. Address book lookups
    d. Modifying user attributes
    Answer: a. Sensitive authentication detailscbtnuggets+1
33. What administrative function does port 389 enable in cloud-based directory services?
    a. User and group management
    b. Firewall configuration
    c. Data compression
    d. Web application deployment
    Answer: a. User and group managementcbtnuggets+1
34. LDAP over port 389 is often used for which type of communication?
    a. Secure communication by default
    b. Internal directory service operations
    c. External authentication over public internet
    d. Firmware updates
    Answer: b. Internal directory service operationsnwkings+1
35. What is a recommended security control when exposing LDAP via port 389 in cloud setups?
    a. Use multi-factor authentication and monitor traffic
    b. Disable password policies
    c. Allow anonymous access
    d. Ignore authentication logs
    Answer: a. Use multi-factor authentication and monitor trafficnfina+1
36. What network devices might require open port 389 for LDAP operation in cloud platforms?
    a. Email servers
    b. Directory servers
    c. Web servers
    d. Print servers
    Answer: b. Directory serversencryptionconsulting+1
37. Which operation is NOT recommended using port 389 over public networks?
    a. User logins
    b. Directory search
    c. Administrative commands
    d. None of the above
    Answer: a. User loginssecurity+1
38. Which is a common client-server setup for LDAP on port 389?
    a. LDAP client on user device connects to LDAP server using port 389
    b. LDAP server connects to client over port 389
    c. Peer-to-peer over UDP
    d. SSH tunnel between client and server
    Answer: a. LDAP client on user device connects to LDAP server using port 389cbtnuggets+1
39. What can attackers achieve by sniffing traffic on port 389?
    a. Boost performance
    b. Gain sensitive organizational information
    c. Encrypt intercepted packets
    d. Disable access logs
    Answer: b. Gain sensitive organizational informationvideoexpertsgroup+1
40. What protocol suite does LDAP port 389 belong to?
    a. Internet Protocol Suite (TCP/IP)
    b. Bluetooth
    c. Wi-Fi Direct
    d. Zigbee
    Answer: a. Internet Protocol Suite (TCP/IP)upguard+1
41. What firewall rule is essential for cloud LDAP deployment on port 389?
    a. Allow unrestricted all-IP access
    b. Restrict to specific trusted IP ranges
    c. Open all ports by default
    d. Block port 389 under all circumstances
    Answer: b. Restrict to specific trusted IP rangescbtnuggets+1
42. What is a mitigation for LDAP injection attacks on port 389?
    a. Validate and sanitize LDAP queries
    b. Ignore input validation
    c. Disable directory backups
    d. Remove firewall protection
    Answer: a. Validate and sanitize LDAP queriesnwkings+1
43. Which command is often used to test LDAP connectivity over port 389?
    a. telnet <server> 389
    b. ping <server>
    c. ssh <server>
    d. curl <server>
    Answer: a. telnet <server> 389sslinsights+1
44. How does LDAP over port 389 impact hybrid cloud identity management?
    a. Centralizes authentication and user data
    b. Fragmentation of user accounts
    c. Disables multi-cloud integration
    d. Forces manual syncing
    Answer: a. Centralizes authentication and user datanfina+1
45. Which is a non-standard port for LDAP communication?
    a. 389
    b. 636
    c. 3268
    d. 21
    Answer: d. 21encryptionconsulting+1
46. What is a key function LDAP performs over port 389 in cloud enterprise networks?
    a. Provide address resolution only
    b. Manage authentication and authorization
    c. Implement distributed denial-of-service mitigation
    d. Control printer settings
    Answer: b. Manage authentication and authorizationcbtnuggets+1
47. When does port 389 become vulnerable to credential harvesting?
    a. When traffic is unencrypted and exposed
    b. When only internal users access it
    c. When password policies are strong
    d. When directory is read-only
    Answer: a. When traffic is unencrypted and exposedsecurity+1
48. What protocol can enhance LDAP security over port 389 without switching to port 636?
    a. SSL Proxy
    b. StartTLS
    c. FTP
    d. Telnet
    Answer: b. StartTLSituonline+1
49. How can organizations ensure compliance when using LDAP communication over port 389?
    a. Audit and monitor LDAP traffic for anomalies
    b. Ignore failed authentications
    c. Disable directory logging
    d. Allow unrestricted access
    Answer: a. Audit and monitor LDAP traffic for anomaliesnfina+1
50. What distinguishes port 389 from port 636 in LDAP networking?
    a. Port 389 is standard and unencrypted; port 636 is secure and encrypted
    b. Port 389 is always encrypted; port 636 is deprecated
    c. Port 389 is for email only; port 636 is for databases
    d. Port 389 supports only SASL; port 636 supports only Kerberos
    Answer: a. Port 389 is standard and unencrypted; port 636 is secure and encryptedsslinsights+2

1. https://www.cbtnuggets.com/blog/technology/networking/ldap-port-389-vs-636
2. https://sslinsights.com/what-is-port-389/
3. https://learn.microsoft.com/en-us/answers/questions/66908/is-port-389-on-ad-in-anyway-used-or-required-when
4. https://www.cbtnuggets.com/common-ports/what-is-port-389
5. https://www.security.gov.uk/services-resources/cyber-and-domains-protection/domain-and-vulnerability-knowledge-base/open-port-389-lightweight-directory-access-protocol-ldap/
6. https://web.nwkings.com/ldap-port-389-vs-port-636
7. https://www.ituonline.com/blogs/ldap-ports/
8. https://sslinsights.com/port-389-vs-636/
9. https://www.videoexpertsgroup.com/glossary/port-389
10. https://nfina.com/ldap-port/
11. https://www.encryptionconsulting.com/ports-required-for-active-directory-and-pki/
12. https://www.upguard.com/blog/ldap
13. https://airowire.com/why-is-it-a-bad-idea-to-use-port-389-for-ldap-communication-between-clearpass-and-your-active-directory/
14. https://cloudericks.com/blog/essential-network-protocols-and-ports-for-cloud-computing/
15. https://orca.security/resources/blog/application-load-balancer-allows-inbound-access-to-udp-port-389-ldap/
16. https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/service-overview-and-network-port-requirements
17. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFVCA0
18. https://access.redhat.com/solutions/7065633
19. https://www.sonicwall.com/support/knowledge-base/cannot-connect-to-ldap-server-on-port-389-3268-and-636/170504922409869
20. https://orca.security/resources/blog/aws-ec2-instance-allows-public-ingress-access-on-ldap-port-389/