Was added AD domain required for replication AD port and ports as required

1, how to check the AD domain to copy it?

    Run repadmin / replsum to verify copy AD

2, AD domain replication requires that the firewall port it?

• TCP 53（DNS）

• TCP 88 (Kerberos Key Distribution Center)

• TCP 135 (Remote Procedure Call)

• TCP 139 (NetBIOS session service)

• TCP 389（LDAP）

• TCP 445 (SMB, network logon)

• TCP 464 (Kerberos password)

• TCP 3268 (global catalog)

• TCP 49152 - 65535 (randomly allocated high port)

• UDP 53（DNS）

• UDP 123（NTP）

• UDP 389（LDAP）

• UDP 445

• UDP 464

3, Windows 10 clients join an AD domain requires that port it?

• TCP 88 (Kerberos Key Distribution Center)

• TCP 135 (Remote Procedure Call)

• TCP 139 (NetBIOS session service)

• TCP 389（LDAP）

• TCP 445 (SMB, network logon)

• UDP 53（DNS）

• UDP 389 (LDAP, DC locator, network entry)

• TCP 49152-65535 (randomized high TCP ports)

4, Powershell how to test whether the port is open it?

      Test-NetConnection -ComputerName computer name / IP -Port port number

5, Microsoft officials refer to the article connected

    https://support.microsoft.com/zh-CN/kb/832017