DRAG DROP
Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2008 R2. The network contains an Exchange Server 2010 Service Pack 1 (SP1)
organization. Corporate security policy states that all user connections from the Internet to the
Exchange organization must be encrypted. You plan to deploy the following client connection
methods for the Exchange organization:
• POP3
• IMAP4
• Outlook Web App
• Outlook Anywhere
You need to identify which firewall ports must be opened to meet the security policy. The solution
must use the default TCP ports of each connection method. Which TCP ports should you identify?
To answer, drag the appropriate TCP port to the correct connection method in the answer area.
Answer: 
Explanation:
Secure ports to be open
Pop = 995
IMAP = 993
Outlook Web App = 443
If you already use Outlook Web App with SSL or Exchange ActiveSync with SSL, you don’t have to
open any additional ports from the Internet.
http://technet.microsoft.com/en-us/library/bb123741.aspx