Which two inbound TCP ports should you open on the firewall?

Your network contains an Active Directory forest named contoso.com. The forest contains a
member server named Server1 that runs Windows Server 2016. Server1 is located in the perimeter
network. You install the Active Directory Federation Services server role on Server1. You create
an Active Directory Federation Services (ADFS) farm by using a certificate that has a subject name
of sts.contoso com. You need to enable certificate authentication from the Internet on Server1.
Which two inbound TCP ports should you open on the firewall? Each correct answer presents part
of the solution.

A.
389

B.
443

C.
3389

D.
8531

E.
49443