Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) — Question 223

An information security analyst inspects the .pcap file and observes encrypted unusual SSH traffic flow over nonstandard ports Which technology makes this behavior feasible?+

Answer options

• A. NAT
• B. tunneling
• C. P2P
• D. TOR

Correct answer: B

Explanation

Tunneling allows for the encapsulation of one protocol within another, which can facilitate SSH traffic over nonstandard ports. NAT is primarily used for address translation, while P2P focuses on peer-to-peer connections, and TOR is designed for anonymity rather than specifically for tunneling SSH traffic.