GSEC · Question #292
Based on the iptables output below, which type of endpoint security protection has host 192.168.1.17 implemented for incoming traffic on TCP port 22 (SSH) and TCP port 23 (telnet)?
The correct answer is A. Operating System Control Firewall. iptables is built into the Linux kernel via the netfilter framework, classifying it as an operating system-level host firewall controlling inbound and outbound traffic.
Question
Based on the iptables output below, which type of endpoint security protection has host 192.168.1.17 implemented for incoming traffic on TCP port 22 (SSH) and TCP port 23 (telnet)?
Options
- AOperating System Control Firewall
- BApplication Control Firewall
- CExclusive Logging Analysis
- DPacket Filtering Firewall
- EApplication Execution Control
How the community answered
(63 responses)- A84% (53)
- B8% (5)
- C2% (1)
- D2% (1)
- E5% (3)
Why each option
iptables is built into the Linux kernel via the netfilter framework, classifying it as an operating system-level host firewall controlling inbound and outbound traffic.
iptables enforces firewall rules through the Linux kernel's netfilter subsystem, meaning traffic control is performed by the operating system itself before packets reach user-space processes. Because the firewall is integrated into and managed by the OS rather than a standalone network appliance, it is classified as an Operating System Control Firewall providing host-based endpoint protection.
Application Control Firewalls identify and filter traffic based on application signatures or behavior regardless of port, which is not what iptables does - iptables matches on IP addresses, ports, and protocols.
Exclusive Logging Analysis is not a recognized endpoint security protection type; iptables actively enforces ACCEPT and DROP decisions rather than only logging traffic.
While packet filtering describes iptables' underlying mechanism, the correct endpoint security classification is an OS-integrated host firewall - 'Packet Filtering Firewall' in this context refers to a dedicated network-layer device rather than a host OS control.
Application Execution Control prevents unauthorized programs from running on a host and is unrelated to network-level rules governing inbound TCP connections on specific ports.
Concept tested: iptables as OS-integrated host-based firewall on Linux
Source: https://netfilter.org/documentation/
Topics
Community Discussion
No community discussion yet for this question.