CISSP · Question #1253
Which of the following statements is TRUE about Secure Shell (SSH)?
The correct answer is B. SSH supports port forwarding, which can be used to protect less secured protocols.. The true statement about Secure Shell (SSH) is that SSH supports port forwarding, which can be used to protect less secured protocols. SSH is a protocol that provides secure and encrypted communication and connection between two systems or devices over an unsecured or public netw
Question
Options
- ASSH does not protect against man-in-the-middle (MITM) attacks.
- BSSH supports port forwarding, which can be used to protect less secured protocols.
- CSSH can be used with almost any application because it is concerned with maintaining a circuit.
- DSSH is easy to deploy because it requires a Web browser only.
How the community answered
(63 responses)- A2% (1)
- B90% (57)
- C5% (3)
- D3% (2)
Explanation
The true statement about Secure Shell (SSH) is that SSH supports port forwarding, which can be used to protect less secured protocols. SSH is a protocol that provides secure and encrypted communication and connection between two systems or devices over an unsecured or public network, such as the internet. SSH supports port forwarding, which is a technique that allows the user to redirect or tunnel the network traffic from one port or system to another port or system, through the SSH connection. Port forwarding can be used to protect less secured protocols, such as Telnet, FTP, or HTTP, by encrypting and securing the network traffic that uses those protocols, and preventing any interception, modification, or eavesdropping of the data or the information. The other statements are not true about SSH. SSH does protect against man-in-the- middle (MITM) attacks, which are attacks where an attacker intercepts, modifies, or relays the communication or the connection between two systems or devices, without their knowledge or consent. SSH protects against MITM attacks by using public key cryptography and digital signatures, which ensure the identity and the authenticity of the systems or devices, and prevent any tampering or spoofing of the data or the information. SSH cannot be used with almost any application, because it is not concerned with maintaining a circuit, but rather with establishing a session. A circuit is a physical or logical path or connection between two systems or devices, and it can be used by various applications or protocols, such as TCP or UDP. A session is a logical or virtual connection between two systems or devices, and it is used by a specific application or protocol, such as SSH or Telnet. SSH is not easy to deploy, because it does not require a web browser only, but rather a client and a server software, and a pair of public and private keys. A web browser is a software application that allows the user to access and view the web pages or the websites on the internet, and it uses the HTTP or HTTPS protocol, not the SSH protocol. A client is a software application that allows the user to initiate and request the SSH connection to another system or device. A server is a software application that allows the system or device to accept and respond to the SSH connection from another system or device. A public key is a cryptographic key that is shared or distributed to the other systems or devices, and it is used to encrypt or verify the data or the information. A private key is a cryptographic key that is kept secret or private by the system or device, and it is used to decrypt or sign the data or the
Topics
Community Discussion
No community discussion yet for this question.