If you’re planning on taking the Security+ you should have a basic understanding of logical ports. Questions continue to appear in the SY0-401 exam, just as they appeared in the SY0-201 exam and the SY0-301 exam, they are sometimes different.
There are 65,536 TCP and 65, 536 UDP ports. The first 1024 (0 to 1023) are well known ports and commonly used with default protocols. For example, the default port for HTTP is port 80 and the default port for HTTPS is 443.
Here’s a short explanation of how the ports were used when you accessed this Web page. When you clicked a link for the blog, your computer created the request and put it into a packet with source and destination IP addresses and ports. The IP address of forums.getcertifiedgethead.com (the destination) is 72.47.224.115 and since HTTP is used, the destination port is 80.
Your computer then identified an unused port in the dynamic and private port range (49,152 to 65,535) and mapped it to your Web browser for this request. For this explanation, imagine that it picked 49,152. Additionally, imagine that your computer (the source) has an IP address of 74.86.130.70. Here’s what we have:
- Destination IP: 72.47.224.115 (the forums.getcertifiedgethead.com server)
- Destination Port: 80
- Source IP: 74.86.130.70 (the client’s system)
- Source Port: 49152
Another way of looking at the destination port from the client’s perspective is that it is an outgoing port. If you want to block outgoing HTTP traffic, you can block port 80 at your network firewall. On the other hand, the source IP is an incoming port from the server’s perspective. If you want to block incoming HTTP traffic, you can block incoming port 80.
TCP/IP then used the destination IP to get the packet to the forums.getcertifiedgethead.com Web server. When the server received the packet, it looked at the destination port (80) and sent the packet to the service handing the HTTP protocol (the Web server application).
The Web server formatted the Web page, and sent it back to your computer. In this case, the destination IP addresses and ports are swapped and would look like this:
- Destination IP: 74.86.130.70 (the client’s system)
- Destination Port: 49152
- Source IP: 72.47.224.115 (the certapps.com server)
- Source Port: 80
TCP/IP used the destination IP to get the packet back to your system. When the packet arrived, your system looked at the destination port and saw that it is mapped to your Web browser. It then forwarded the packet to your Web browser to display. Of course, the Web page may have been sent in several packets, but each packet used the same process.
Ports are used the same way for multiple services. Some of the common ports you should know are:
Remember, you can memorize these ports and then write them down as you start the test. If you get any port questions, you only need to look down at your notes to answer the question.
