3.6.2. Administrative Interfaces and Remote Access
💡 First Principle: Remote administration reduces operational cost and response time—you don't need to physically reach every server to manage it. But remote access methods vary in capability, security, and what they require the server to be doing (OS running vs. any state).
Remote Administration Methods
| Method | Protocol/Tool | Encryption | Requires OS | Use Case |
|---|---|---|---|---|
| Console | Physical/serial | N/A | No | BIOS configuration, initial setup |
| Remote Desktop (RDP) | TCP 3389 | TLS | Yes | Full GUI Windows administration |
| SSH | TCP 22 | Yes (encrypted) | Yes | Command-line Linux/Unix administration |
| Web interface | HTTPS | Yes | Yes | Application and OS-level management consoles (a BMC's web console falls under OOB below) |
| OOB (iDRAC/iLO) | Dedicated IP | Yes | No | Any state including crashed/powered off |
Data Migration and Transfer
Moving data between servers requires appropriate tools:
- Robocopy (Windows): Robust file copy with retry, multi-threading, mirror mode, and logging. Standard tool for Windows server-to-server migrations.
- SCP (Secure Copy Protocol): Encrypted file transfer over SSH. Standard for Linux-to-Linux transfers.
- rsync (Linux): Efficient differential file transfer—only copies changed blocks. Ideal for large datasets and incremental synchronization.
- File Transfer Protocol (FTP/SFTP/FTPS): Classic transfer protocols. SFTP (over SSH) and FTPS (FTP over TLS) are encrypted; plain FTP should not be used in production.
Infiltration vs. Exfiltration
- Infiltration: Data coming into the server (uploads, external data feeds)
- Exfiltration: Data leaving the server without authorisation — the word carries the sense of theft. An attacker tunnelling a database out over DNS is exfiltration; a scheduled off-site backup or a scheduled report to a partner system is authorised egress, not exfiltration
⚠️ Exam Trap: Do not let the direction alone decide the label. Both a nightly backup and a data breach send data out of the server; only the unauthorised one is exfiltration. The question you are being asked is "was this sanctioned?" — not "which way is the data going?"
Both have security implications: infiltration can introduce malicious data; exfiltration can leak sensitive data. DLP (Data Loss Prevention) systems monitor and control exfiltration. The exam may present scenarios where you must distinguish between the two.
⚠️ Exam Trap: SSH and RDP both require the OS to be running. If the OS crashes or won't boot, you cannot use SSH or RDP—you need OOB management (iDRAC/iLO) or local physical access.
Reflection Question: You need to copy 500GB of data from a Windows file server to a new Linux server with minimal downtime. Which tool is appropriate, and what feature of that tool minimizes the impact of any interruption during transfer?
