N10-009: CompTIA Network+ Certification Exam

Port 636 is used for LDAPS, the encrypted version of LDAP that Active Directory uses to securely query and manage identity and directory information across a Windows domain. Port 389 is unencrypted LDAP, 445 is used for SMB file sharing, and 68 is the DHCP client port, none of which provide secure identity management.

Increasing the MTU (Maximum Transmission Unit) enables the use of jumbo frames, typically 9000 bytes instead of the standard 1500 bytes. This reduces the number of packets required to transfer the same amount of data, decreasing CPU overhead and significantly improving throughput—especially beneficial for backup operations. QoS prioritizes traffic, SDN is an architectural approach, VXLAN creates overlays, and TTL controls hop count.

Microwave ovens operate in the same 2.4GHz band as the WAP and cause strong intermittent interference only while running, which matches symptoms that appeared specifically after the access point was relocated near one. Reflection, general noise, or channel overlap tend to produce a more constant degradation rather than the on-again/off-again pattern described.

Channel interference triggers APs to automatically switch to less congested channels to maintain performance. When users remain stationary but the connection drops and reconnects every 20-30 seconds with channel changes logged, automatic interference-driven channel selection is the cause, not roaming issues or coverage gaps.

An unauthorized person installing a rogue access point in a secure facility requires physical access to that facility. Tailgating (following an authorized person through a secure entrance) is the social engineering technique that bypasses physical security controls. Evil twin, honeytrap, and wardriving are attack methods that do not explain facility entry.