Your organization has a Windows Active Directory (AD) domain named company.com. You are exploring the requirements to implement Microsoft 365, which supports cloud-based services. Your company currently uses smartcard-based authentication and third-party multi-factor authentication. Based on the company's requirements, you have decided to implement a federated hybrid solution. To achieve this, you have deployed Web Access Proxy (WAP) servers in your network's perimeter network and created a single Entra ID tenant. The next step is to install the Entra Connect tool and configure synchronization. However, you need to identify the firewall ports that must be open between Entra Connect and Web Application Proxy (WAP). Which of the following ports would you select? (Select three options).