Port 22 is commonly used for which protocol, and why is it important in pentests?

• A. It is commonly used for credential guessing and misconfigurations
• B. It is always correctly configured by default
• C. It never uses password authentication
• D. It is rarely exposed to the internet

Answer: (A)

Port 22 is the standard port for SSH, the protocol used for secure remote login to systems. In a pentest, SSH is a prime target because it’s often exposed to the internet and frequently misconfigured. Attackers commonly perform credential guessing against SSH since a successful login grants remote access to the machine. Misconfigurations are also common, such as allowing password-based authentication when key-based login should be used, permitting root logins, weak or outdated cipher suites, or running an older OpenSSH version with known flaws. These realities make port 22 a key focus for assessing potential entry points, hence its significance in pentests. Other statements don’t fit because SSH isn’t always correctly configured by default, password authentication is still used on many systems, and port 22 is often accessible from the internet rather than rarely exposed.