3.4 Identify and Describe Tunneling Protocols (e.g., SSH, TLS, IKE) CYBERSECURITY-APPRENTICE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A network administrator needs to securely access a database server's management console from a laptop on an untrusted public Wi-Fi network. The database server only listens on a private IP address inside the corporate network and does not have a public IP. The administrator has SSH access to a Linux jump host that has both a public IP and connectivity to the database server's private network. Which approach should the administrator use to reach the database console securely?

   • AConnect to the database server directly using TLS by entering its private IP address in the browser, since TLS will encrypt the traffic end-to-end.
   • BConfigure the database server to accept connections over IKE and establish an IPsec tunnel directly from the laptop to the database server.
   • CEstablish an SSH local port forward from the laptop to the jump host, mapping a local port to the database server's private IP and management port.
   • DUse SSH to open a remote shell on the jump host and run a text-based database client from that shell, avoiding the need for any port forwarding.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary function of TLS in a network communication?

   • ATo route packets between different networks.
   • BTo provide encryption and integrity for data transmitted between applications.
   • CTo assign IP addresses to devices on a network.
   • DTo translate domain names into IP addresses.
   Reveal Solution Discussion Select an answer first
4. 18application · easy

   A developer needs to securely transfer a file from a local workstation to a remote server. The remote server only supports SSH for administrative access. The developer wants to ensure the file transfer is encrypted and authenticated. Which command-line tool should the developer use?

   • Atelnet
   • Bftp
   • Cscp
   • Dtftp
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A system administrator needs to securely access a web-based admin panel that is only available on an internal server. The administrator is currently at home and can only reach the corporate network through an SSH jump server. Which SSH feature should the administrator use to access the web panel from their local browser?

   • ADynamic port forwarding
   • BRemote port forwarding
   • CSSH agent forwarding
   • DLocal port forwarding
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company runs a web application that customers access over the internet. The security team wants to ensure that all traffic between customers and the web server is encrypted, and they also want to protect against eavesdropping on the path between the load balancer and the backend application servers inside the data center. The load balancer terminates the customer-facing connection. What should the security team configure to meet both requirements?

   • AUse SSH tunneling between the load balancer and the backend servers, and use plain HTTP on the customer-facing side because SSH is stronger than TLS.
   • BUse IKE to establish an IPsec tunnel between the load balancer and the backend servers, and rely on the IPsec tunnel to also encrypt the customer-facing traffic.
   • CEnable TLS only on the customer-facing listener and leave the internal connection unencrypted, since the data center is already a trusted network.
   • DEnable TLS on the customer-facing listener and also enable TLS on the connection between the load balancer and the backend servers.
   Reveal Solution Discussion Select an answer first