which port does not need to be open?

If there is a firewall between Cisco ISE and an Active Directory external identity store, which
port does not need to be open?

A.
TCP 88

B.
TCP 445

C.
UDP 53

D.
UDP 123

E.
UDP/TCP 389