Certified Information Systems Security Professional (CISSP) — Question 4

Which of the following statements is TRUE about Secure Shell (SSH)?

Answer options

• A. SSH supports port forwarding, which can be used to protect less secured protocols.
• B. SSH does not protect against man-in-the-middle (MITM) attacks.
• C. SSH is easy to deploy because it requires a Web browser only.
• D. SSH can be used with almost any application because it is concerned with maintaining a circuit.

Correct answer: A

Explanation

Option A is correct because SSH indeed supports port forwarding, which allows it to secure less secure protocols. Option B is incorrect as SSH does provide protections against MITM attacks through its authentication mechanisms. Option C is wrong since SSH does not solely rely on a Web browser for deployment and typically requires a command-line interface. Option D is misleading because while SSH can work with various applications, its primary function is providing secure connections rather than maintaining a circuit.