Based on the below log, which of the following sentences are true? Mar 1, 2016, 7:33:28 AM 10.240.250.23 ?54373 10.249.253.15 - 22 tcp_ip

While SSH traffic is encrypted, the log metadata - including source IP, destination IP, and destination port - is visible in network logs and clearly identifies both endpoints and the protocol.

FTP uses ports 20 and 21, not port 22; the log shows destination port 22 which is SSH, not FTP.

Port 22 is the well-known port for SSH (Secure Shell). In a TCP connection log, the host using the high ephemeral source port (54373) is always the initiating client, while the host listening on the well-known service port (22) is the server. Therefore 10.240.250.23 is the SSH client and 10.249.253.15 is the SSH server.

10.249.253.15 is the server (listening on port 22) and 10.240.250.23 is the client (using ephemeral port 54373); the answer incorrectly labels 10.240.250.23 as the server.