XK0-004 · Question #327
A systems administrator needs to install software packages on a server from an Internet-based repository. The server does not have Internet connectivity. Which of the following can be used to allow…
The correct answer is C. Remote SSH port forwarding. Remote SSH port forwarding tunnels TCP connections from a network-isolated server through the administrator's desktop, granting the server indirect internet access needed to reach a package repository.
Question
A systems administrator needs to install software packages on a server from an Internet-based repository. The server does not have Internet connectivity. Which of the following can be used to allow the server to connect to the Internet through the systems administrator’s desktop?
Options
- ALocal package repository
- BUUCP
- CRemote SSH port forwarding
- DX11 forwarding
How the community answered
(36 responses)- A11% (4)
- B6% (2)
- C81% (29)
- D3% (1)
Why each option
Remote SSH port forwarding tunnels TCP connections from a network-isolated server through the administrator's desktop, granting the server indirect internet access needed to reach a package repository.
A local package repository requires the administrator to pre-mirror all needed packages locally and does not grant the server any form of internet connectivity - it replaces the remote repository rather than proxying access to it.
UUCP is a legacy store-and-forward batch file transfer protocol that cannot provide the real-time TCP connectivity required to interact with an internet-based package repository.
SSH remote port forwarding (ssh -R) establishes a tunnel that maps a port on the isolated server back through the existing SSH connection to a socket on the administrator's internet-connected desktop. The server's package manager can then be configured to route repository traffic through this tunnel, using the desktop as an implicit proxy. This requires only an SSH client on the server and no additional infrastructure.
X11 forwarding tunnels graphical display data from a remote server back to a local X server and provides no general-purpose TCP port forwarding or internet routing capability.
Concept tested: SSH remote port forwarding for proxied internet access
Source: https://man7.org/linux/man-pages/man1/ssh.1.html
Topics
Community Discussion
No community discussion yet for this question.