nerdexam
GIAC

GCFA · Question #30

A firewall is a combination of hardware and software, used to provide security to a network. It is used to protect an internal network or intranet against unauthorized access from the Internet or othe

The correct answer is B. IPTables. IPTables is the packet-filtering firewall framework introduced with the Linux 2.4 kernel, replacing the older IPChains tool from kernel 2.2.

Advanced Mac & Linux Forensics

Question

A firewall is a combination of hardware and software, used to provide security to a network. It is used to protect an internal network or intranet against unauthorized access from the Internet or other outside networks. It restricts inbound and outbound access and can analyze all traffic between an internal network and the Internet. Users can configure a firewall to pass or block packets from specific IP addresses and ports. Which of the following tools works as a firewall for the Linux 2.4 kernel?

Options

  • AOpenSSH
  • BIPTables
  • CIPChains
  • DStunnel

How the community answered

(36 responses)
  • A
    14% (5)
  • B
    75% (27)
  • C
    3% (1)
  • D
    8% (3)

Why each option

IPTables is the packet-filtering firewall framework introduced with the Linux 2.4 kernel, replacing the older IPChains tool from kernel 2.2.

AOpenSSH

OpenSSH is a secure remote shell and tunneling tool used for encrypted administrative access, not a packet-filtering firewall.

BIPTablesCorrect

IPTables was integrated into the Linux 2.4 kernel as part of the Netfilter project and provides stateful packet inspection, NAT, and packet filtering capabilities that define it as the standard firewall mechanism for that kernel series. It uses tables (filter, nat, mangle) and chains (INPUT, OUTPUT, FORWARD) to control traffic flow. IPChains, its predecessor, was deprecated specifically when the 2.4 kernel shipped with IPTables.

CIPChains

IPChains was the firewall tool for the Linux 2.2 kernel and was explicitly replaced by IPTables when the 2.4 kernel was released.

DStunnel

Stunnel is an SSL/TLS tunneling proxy that wraps plaintext connections in encryption, and is not a firewall or packet-filtering tool.

Concept tested: Linux kernel 2.4 firewall tool identification

Source: https://linux.die.net/man/8/iptables

Topics

#IPTables#Linux firewall#kernel 2.4#network security

Community Discussion

No community discussion yet for this question.

Full GCFA Practice