PEN-200 Port Redirection and Tunneling Practice Question
Why might a penetration tester use a 'jump host' when attempting to access an internal network segment?
⚠ Common exam trap
Candidates frequently mistake jump hosts for simple proxies or VPNs. They fail to recognize that the jump host's primary purpose is bridging two distinct network segments that have no direct routing.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Because the target segment is firewalled from the attacker.
A jump host acts as an intermediary system that has dual-homed network access, connecting the untrusted zone (or the internet) to the restricted internal segment. By compromising the jump host, the tester gains a foothold within the internal network. This is a standard strategy because direct access to backend servers is often blocked by firewalls, and the jump host is often the only permitted pathway for remote administration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To increase the bandwidth of the connection.
Why it's wrong here
A jump host does not increase bandwidth; in fact, it often adds latency and overhead because the traffic must be processed and forwarded by the host. The purpose is strictly related to bypassing network access control lists and firewalls, not improving the physical data transmission speed of the network.
- ✗
To hide the attacker's IP from the destination server.
Why it's wrong here
While it masks the origin, the primary purpose of a jump host is network reachability. Simply hiding an IP can be done with a standard proxy or VPN. A jump host is specific to cases where the internal target is logically separated from the attacker, requiring a specific pivot point.
- ✓
Because the target segment is firewalled from the attacker.
Why this is correct
A jump host is used when the attacker cannot directly communicate with the target network. By establishing a tunnel through the jump host, the attacker effectively extends their reach into the internal segment, circumventing the firewalls that prevent direct connections from the outside world to the target internal resources.
- ✗
To provide a GUI-based interface for database management.
Why it's wrong here
Jump hosts are typically server-based, command-line environments. They do not natively provide GUI access to databases. The tester uses the jump host to tunnel CLI traffic or proxy web traffic to reach the database, not to gain a graphical user interface experience for interacting with the internal database system.
About these practice questions
Courseiva writes every PEN-200 question from scratch — 285 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official OffSec exam blueprint
This PEN-200 practice question is part of Courseiva's free OffSec certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PEN-200 exam.