Exam CISSP topic 1 question 179 discussion

Port forwarding via SSH (SSH tunneling) creates a secure connection between a local computer and a remote machine through which services can be relayed. Because the connection is encrypted, SSH tunneling is useful for transmitting information that uses an unencrypted protocol, such as IMAP, VNC, or IRC

A. SSH supports port forwarding, which can be used to protect less secured protocols. Also known as SSH tunneling. SSH is used on less secure protocols like FTP to make them secure (SFTP) etc.

SFTP is an example

Based on the CISSP (Certified Information Systems Security Professional) perspective, the correct statement about Secure Shell (SSH) is: A. SSH supports port forwarding, which can be used to protect less secured protocols. SSH is a protocol used for secure remote access, file transfers and management of network devices. SSH supports port forwarding, also known as SSH tunnelling, which can provide a secure channel to transfer less secured protocols such as Telnet and FTP. SSH protects against man-in-the-middle (MITM) attacks by encrypting the communication between the two devices. It is not easy to deploy because it requires installing and configuring SSH client and server software. Finally, SSH is not concerned with maintaining a circuit, rather it is concerned with providing a secure and encrypted channel for communication.

Answer is A

read hear ! https://www.ftpgetter.com/ftp-ssh-tunnel.php

correct. also used for pivoting in pentest/attacking