36.
When the firewalld service is used for managing the firewall, a couple of
services should never be running on your server. What services should not
be running when you are using firewalld?
- A.iptables
- B.ebtables
- C.ip6tables
- D.network
- Answer & Explanation
- Report
Answer : [D]
Explanation :
Explanation :
| The iptables, ebtables, and ip6tables services should be disabled when running firewalld. For firewalld compatibility, there is no reason to disable the network service as well. |
37.
Which of the following cannot be configured using firewalld rich rules?
- A.Logging
- B.Filtering based on one specific IP address instead of all IP addresses assigned to a zone
- C.Custom port allocations
- D.Rate limiting
- Answer & Explanation
- Report
Answer : [C]
Explanation :
Explanation :
| Custom port allocations can be created by modifying service files; all other features listed can be configured only by using rich rules. |
38.
In a firewalld configuration, you can use different building blocks. These
building blocks are processed in a specific order, and are shown in the following
list. Which answer lists their correct order?
1. Deny rules
2. Logging rules
3. Direct rules
4. Allow rules
5. Port forwarding and masquerading rules
1. Deny rules
2. Logging rules
3. Direct rules
4. Allow rules
5. Port forwarding and masquerading rules
- A.3, 5, 2, 4, 1
- B.5, 3, 2, 4, 1
- C.3, 5, 4, 1, 2
- D.2, 1, 5, 3, 4
- Answer & Explanation
- Report
Answer : [A]
Explanation :
Explanation :
| Direct rules go before anything else, and then port forwarding/ masquerading, logging, allow, and deny rules are processed. |
39.
Which man page has examples about the syntax of firewalld rich rules?
- A.(1) firewall-cmd
- B.(5) firewalld.conf
- C.(5) firewalld.richlanguage
- D.(5) firwalld.zones
- Answer & Explanation
- Report
Answer : [C]
Explanation :
Explanation :
| Examples of firewalld rich rules are in man 5 firewalld. richlanguage. |
40.
Which of the following shows the correct syntax for adding a rich rule that
blocks access for one specific IP address?
- A.firewall-cmd --zone=dmz --add-rich-rule=’rule family=ipv4 source address=10.0.0.100/32 reject’
- B.firewall-cmd --zone=dmz --add-rich-rule=’rule family=ip4 source address=10.0.0.100/32 reject’
- C.firewall-cmd --zone=dmz --add-rich-rule=’family=ipv4 source address=10.0.0.100/32 reject’
- D.firewall-cmd --zone=dmz --add-rich-rule=’rule family=ipv4 source=10.0.0.100/32 reject’
- Answer & Explanation
- Report
Answer : [A]
Explanation :
Explanation :
| Answer A shows correct syntax. To create a rich rule, always use ipv4 and not ip4 , always use rule family , and do not forget address= if you want to refer to an address. |
|
|
||||||||||||||||||||||||||||
