XK0-005 · Question #659
An administrator attempts to connect to a remote server by running the following command: Which of the following can be said about the remote server?
The correct answer is A. A firewall is blocking access to the SSH server. This is because the port 22/tcp is shown as filtered by nmap, which means that nmap cannot determine whether the port is open or closed because a firewall or other device is blocking its probes. If the SSH server was not running on the remote server, the port would be shown as…
Question
An administrator attempts to connect to a remote server by running the following command:
Which of the following can be said about the remote server?
Options
- AA firewall is blocking access to the SSH server.
- BThe SSH server is not running on the remote server.
- CThe remote SSH server is using SSH protocol version 1.
- DThe SSH host key on the remote server has expired.
How the community answered
(24 responses)- A83% (20)
- B4% (1)
- C8% (2)
- D4% (1)
Explanation
This is because the port 22/tcp is shown as filtered by nmap, which means that nmap cannot determine whether the port is open or closed because a firewall or other device is blocking its probes. If the SSH server was not running on the remote server, the port would be shown as closed, which means that nmap received a TCP RST packet in response to its probe. If the remote SSH server was using SSH protocol version 1, the port would be shown as open, which means that nmap received a TCP SYN/ACK packet in response to its probe. If the SSH host key on the remote server had expired, the port would also be shown as open, but the SSH client would display a warning message about the host key verification failure. Therefore, the best explanation for the filtered state of the port 22/tcp is that a firewall is preventing nmap from reaching the SSH server.
Topics
Community Discussion
No community discussion yet for this question.