nerdexam
CompTIA

XK0-004 · Question #327

A systems administrator needs to install software packages on a server from an Internet-based repository. The server does not have Internet connectivity. Which of the following can be used to allow…

The correct answer is C. Remote SSH port forwarding. Remote SSH port forwarding tunnels TCP connections from a network-isolated server through the administrator's desktop, granting the server indirect internet access needed to reach a package repository.

Server Side & Network Concepts

Question

A systems administrator needs to install software packages on a server from an Internet-based repository. The server does not have Internet connectivity. Which of the following can be used to allow the server to connect to the Internet through the systems administrator’s desktop?

Options

  • ALocal package repository
  • BUUCP
  • CRemote SSH port forwarding
  • DX11 forwarding

How the community answered

(36 responses)
  • A
    11% (4)
  • B
    6% (2)
  • C
    81% (29)
  • D
    3% (1)

Why each option

Remote SSH port forwarding tunnels TCP connections from a network-isolated server through the administrator's desktop, granting the server indirect internet access needed to reach a package repository.

ALocal package repository

A local package repository requires the administrator to pre-mirror all needed packages locally and does not grant the server any form of internet connectivity - it replaces the remote repository rather than proxying access to it.

BUUCP

UUCP is a legacy store-and-forward batch file transfer protocol that cannot provide the real-time TCP connectivity required to interact with an internet-based package repository.

CRemote SSH port forwardingCorrect

SSH remote port forwarding (ssh -R) establishes a tunnel that maps a port on the isolated server back through the existing SSH connection to a socket on the administrator's internet-connected desktop. The server's package manager can then be configured to route repository traffic through this tunnel, using the desktop as an implicit proxy. This requires only an SSH client on the server and no additional infrastructure.

DX11 forwarding

X11 forwarding tunnels graphical display data from a remote server back to a local X server and provides no general-purpose TCP port forwarding or internet routing capability.

Concept tested: SSH remote port forwarding for proxied internet access

Source: https://man7.org/linux/man-pages/man1/ssh.1.html

Topics

#SSH port forwarding#tunneling#proxy connectivity#network access

Community Discussion

No community discussion yet for this question.

Full XK0-004 Practice