220-1102 Question 806
Single answerSecure Shell (SSH)A technician needs to securely manage a headless Linux server located in a remote branch office. The technician must access the command line over the network without sending usernames, passwords, or commands in clear text. Which protocol should the technician use?
- A
SSH
- B
Telnet
- C
FTP
- D
RDP
Show answer and explanation
Correct answer: A
Explanation
The best answer is SSH because it is the standard protocol for secure remote command-line administration. In this scenario, the key requirement is encrypted terminal access to a headless Linux server, which matches SSH directly. Telnet is a common distractor because it also provides terminal access, but it is insecure due to lack of encryption. FTP is for file transfer rather than shell management, and RDP is intended for remote desktop sessions rather than terminal-based administration. Best practices and vendor documentation consistently recommend SSH for secure remote shell access, especially when managing Linux servers across untrusted networks.
- A. Correct.
Correct. Secure Shell (SSH) is designed for encrypted remote administration of systems over a network. It protects the session contents, including login credentials and commands, from being transmitted in clear text. SSH is commonly used to securely access Linux and Unix systems from a terminal.
- B. Incorrect.
Incorrect. Telnet provides remote command-line access, but it does not encrypt the session. Usernames, passwords, and commands can be intercepted on the network, which makes it unsuitable for secure remote administration.
- C. Incorrect.
Incorrect. FTP is primarily used for file transfers and does not provide secure remote shell access. Standard FTP also sends credentials in clear text unless a secure alternative is used, and it would not meet the requirement for interactive command-line management.
- D. Incorrect.
Incorrect. RDP is used for remote graphical desktop access, most commonly on Windows systems. Although it can be secured and is appropriate for GUI-based remote management, it is not the standard protocol for secure terminal access to a headless Linux server.