A network team is onboarding a new application that uses a SOAP-based web service. The developer claims the service uses 'standard web ports.' The firewall team wants to know which ports to permit.
What ports does a SOAP web service typically use, and how can the firewall team verify what the application actually requires?
- A.SOAP (Simple Object Access Protocol) uses HTTP (TCP 80) or HTTPS (TCP 443) as its transport - the same ports as web traffic. To verify the actual ports, the firewall team should ask the developer for the WSDL (Web Services Description Language) file which defines the service endpoint URL (including port), or capture traffic with Wireshark during a test connection to identify actual ports and protocols used.
- B.SOAP uses its own dedicated protocol on TCP port 8008; it does not use HTTP.
- C.SOAP uses UDP port 80 for high-performance web service calls.
- D.SOAP always uses TCP port 80; HTTPS is not supported because SOAP is an older protocol.
Why A is correct