300-820 · Question #112
An engineer must fix broken SSH tunnels between Expressway-C (192.168.10.5) and Expressway-E (192.168.20.5). The engineer is advised that the packet capture shows the required packets for the SSH…
The correct answer is D. port 2222 from Expressway-C to Expressway-E. SSH tunnels between Expressway-C and Expressway-E use TCP port 2222. These tunnels are initiated outbound from Expressway-C toward Expressway-E. Because the packet capture shows traffic leaving Expressway-C but not arriving at Expressway-E, the firewall between them is dropping…
Question
An engineer must fix broken SSH tunnels between Expressway-C (192.168.10.5) and Expressway-E (192.168.20.5). The engineer is advised that the packet capture shows the required packets for the SSH tunnels leaving the Expressway-C but not reaching the Expressway-E. Which firewall configuration must the engineer allow to resolve this issue?
Options
- Aport 2222 from Expressway-E to Expressway-C
- Bport 7001 from Expressway-C to Expressway-E
- Cport 7001 from Expressway-E to Expressway-C
- Dport 2222 from Expressway-C to Expressway-E
How the community answered
(30 responses)- A3% (1)
- C3% (1)
- D93% (28)
Explanation
SSH tunnels between Expressway-C and Expressway-E use TCP port 2222. These tunnels are initiated outbound from Expressway-C toward Expressway-E. Because the packet capture shows traffic leaving Expressway-C but not arriving at Expressway-E, the firewall between them is dropping the packets. The fix is to allow TCP port 2222 from Expressway-C (source) to Expressway-E (destination). Answer D is correct. Port 7001 is used for H.323 signaling, not SSH tunnels, so options B and C are wrong. Option A reverses the direction.
Topics
Community Discussion
No community discussion yet for this question.