XK0-005 · Question #302
Which of the following techniques would BEST allow a client computer to connect to a server that is not normally accessible because the server's application port is blocked by a firewall?
The correct answer is D. SSH port forwarding. When a server's application port is blocked by a firewall, SSH port forwarding is the best technique to establish a secure tunnel and bypass the restriction, allowing the client to connect to the inaccessible port.
Question
Which of the following techniques would BEST allow a client computer to connect to a server that is not normally accessible because the server’s application port is blocked by a firewall?
Options
- AX11 forwarding
- BTCP wrappers
- CRDP
- DSSH port forwarding
How the community answered
(42 responses)- A2% (1)
- B10% (4)
- C7% (3)
- D81% (34)
Why each option
When a server's application port is blocked by a firewall, SSH port forwarding is the best technique to establish a secure tunnel and bypass the restriction, allowing the client to connect to the inaccessible port.
X11 forwarding is used to securely run graphical applications from a remote server on a local machine, not for bypassing blocked application ports for non-graphical services.
TCP wrappers provide host-based network access control for services, preventing unauthorized access but not enabling connections to firewall-blocked ports.
RDP (Remote Desktop Protocol) is a protocol for accessing a graphical desktop on a remote Windows machine, and it does not inherently bypass firewall restrictions on arbitrary application ports.
SSH port forwarding creates a secure tunnel through an SSH connection, allowing traffic intended for a blocked port on the target server to be redirected through an open SSH port. This technique effectively bypasses firewall restrictions on the application port by encapsulating the blocked traffic within the permitted SSH connection.
Concept tested: Bypassing firewall with SSH tunneling
Source: https://www.ssh.com/academy/ssh/tunneling/example
Topics
Community Discussion
No community discussion yet for this question.