PEN-200 Port Redirection and Tunneling Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Running two separate SSH processes to the same host.

  Why it's wrong here

  Running two SSH processes to the same host does not increase the depth of the reach into the network. It merely creates two identical tunnels to the same point. It is not considered pivoting as it does not advance the attacker further into the internal network topology or segments.

• ✗

  Using two different protocols simultaneously for redundancy.

  Why it's wrong here

  Using multiple protocols is a form of load balancing or redundancy, but it is not double pivoting. Pivoting is defined by the depth of network access, not the number of protocols used to maintain the connection. A pivot must bridge a new, previously unreachable network segment.

• ✓

  Tunneling through one compromised host to reach another.

  Why this is correct

  Double pivoting involves establishing a chain of tunnels through a sequence of compromised hosts. This allows the attacker to reach deep into an internal network where the target is separated by multiple firewalls or isolated VLANs that are only reachable by sequentially pivoting through multiple intermediate jump hosts.

• ✗

  Encrypting the tunnel twice for double security.

  Why it's wrong here

  Double encryption is technically possible by nesting tunnels, but this is not referred to as double pivoting. Double pivoting is a structural networking concept related to network topology reachability, whereas double encryption is a cryptographic choice that adds overhead without necessarily changing the network access level of the attacker.