A city security lead asks how adding layer-3 routes on a compromised foothold differs from using application-layer tunnels for reachability. What conceptual contrast should the tester emphasize?
Select an answer to reveal the explanation.
Short Explanation
Think of host routes like adding a new road on the foothold's map, and app-layer tunnels like shipping boxes through a mail slot that is already allowed. Same goal — get somewhere — different plumbing. One leans on routing; the other rides an application path.
Full Explanation
Layer-3 pivoting typically depends on adjusting how the foothold forwards or routes IP traffic toward internal networks. Application-layer tunnels instead encapsulate sessions through protocols or services that are already permitted, which can bypass some network segmentation without the same reliance on host routing table changes. Understanding the class of technique helps plan detections, notes, and RoE-safe next steps. Vendor- or OS-only myths and claims that both rewrite all firewall ACLs are inaccurate.