15.6.4

Which daemon, or service, provides port tunneling to encrypt non-secure protocols such as email and X server traffic?

ssh

Which ssh option should you enter at the command prompt to set up an SSH tunnel for X server traffic?

ssh -X

The ssh command sets up an SSH tunnel from the client to the server, and includes several options. From the list on the left, drag the ssh command option to its correct definition on the right.

Overrides configuration file settings and creates a tunnel (if needed). Correct Answer: -g Ensures that SSH does not execute a remote command. Correct Answer: -N Specifies the server running the SSH daemon. Correct Answer: server Runs SSH in the background after the password prompt. Correct Answer: -f Specifies the port numbers and server address. Correct Answer: -L

You would like to use SSH port tunneling to work on a remote system. You also need to ensure that all data that you send to the remote system is encrypted. Which SSH configuration option, in the /etc/ssh/sshd_config file, needs to be set to yes?

AllowTCPForwarding

Which of the following is the second step in the SSH port tunneling process?

The SSH daemon intercepts all traffic sent to that port, encrypts it, and sends it to the SSH client.

What is the purpose of the -N option in the following command? ssh -f -N -L 2345:mail.mydomain.com:110 [email protected]

To ensure that SSH does not execute a remote command

The /etc/ssh/sshd_config file configures the SSH daemon on the server. Which of the following commonly used options for configuring an SSH tunnel allows any computer to act as a graphical terminal server?

VNC

When configuring the SSH daemon using the /etc/ssh/sshd_config file, which options can be set to prevent or allow unrestricted access to all GUI features on the client? (Select two.)

X11Forwarding ForwardX11Trusted

You can redirect the console using a local or remote SSH connection. Which of the following are characteristics of configuring and accessing local port forwarding? (Select two.)

You enter your password to authenticate to your machine. To establish the connection, you enter ssh -L port:hostname:port localhost in a terminal window on your client.

You can redirect the console using a local or a remote SSH connection. Which of the following are characteristics of configuring and accessing remote port forwarding? (Select two.)

You modify the /etc/ssh/sshd_config file to include the gateway entry at the end of the file. You enter the command ssh -R port:localhost:port username@hostname.