ITPEC FE Morning April 2021 Question 42

A secure channel for server maintenance over a public network — SSH encrypts remote login, command execution and file transfer between an administrator and a server.

SSH (Secure Shell, TCP port 22) replaced Telnet, rlogin and FTP, which send passwords and commands in plain text. It authenticates the server with its host key, encrypts the whole session, and authenticates the user either with a password or with a public key pair, where the server stores the user's public key and the client proves it holds the private key. SCP and SFTP run file transfer over the same channel.

Answer (c)

Why not others:

• •(a) — wrong on the facts: public key authentication is a core SSH method and is usually preferred over passwords
• •(b) — HTTPS runs HTTP over TLS, not over SSH; SSH has nothing to do with loading web pages
• •(d) — no rule makes SSH mandatory inside an intranet; it is most needed where traffic crosses networks the administrator does not control

Key rule: Secure remote administration is SSH on port 22; secure web traffic is HTTPS, which is HTTP over TLS on port 443.

Security · AI-written, may contain errors