Tech question of the day (Security+): Examine the netstat results in the figure. What protocol is this computer running for sign-on security? Bonus: What type of operating system is running here, and what is its primary role?

(see answer below and video response)

Answer

The protocol being used for sign-on security is the Lightweight Directory Access Protocol (LDAP). It uses port 389 (by default) as can be seen within the local address column on the first row of the netstat results. This means that it is accepting incoming connections (sign-ons) on port 389. This implies that we are dealing with a Windows Server (in fact Server 2012) acting in the role of a domain controller – users log on to the domain via this computer. If you require secure LDAP, then port 636 would be used (again, by default) utilizing SSL/TLS connections.

Video Solution:

Answer at 41 seconds.

Do you enjoy learning by watching? Then check out the CompTIA Security+ (SY0-401) Complete Video Course by fellow instructor Michael J Shannon.