Certified Ethical Hacker (CEH v11) — Question 206

Based on the below log, which of the following sentences are true?
Mar 1, 2016, 7:33:28 AM 10.240.250.23 - 54373 10.249.253.15 - 22 tcp_ip

Answer options

• A. Application is FTP and 10.240.250.23 is the client and 10.249.253.15 is the server.
• B. Application is SSH and 10.240.250.23 is the server and 10.249.253.15 is the client.
• C. SSH communications are encrypted; it's impossible to know who is the client or the server.
• D. Application is SSH and 10.240.250.23 is the client and 10.249.253.15 is the server.

Correct answer: D

Explanation

The correct answer is D because the log shows that a connection was made from 10.240.250.23 to 10.249.253.15 on port 22, which is used by SSH. Options A and B incorrectly identify the application and the roles of the IP addresses, while option C is misleading as SSH does provide information about the client and server in this context.