Which of the following programs uses the hosts.allow file to perform its main task of checking for access control restrictions to system services?

tcpd is a program that acts as a wrapper for network services, consulting the /etc/hosts.allow and /etc/hosts.deny files to determine whether a client host is permitted to connect to a specific service. It provides host-based access control for many Internet services that are typically started by inetd or xinetd.

inetd is a super-server daemon that listens for incoming requests for various services and launches the appropriate server program, but it does not directly use hosts.allow for access control itself (it often relies on tcpd if configured).

fingerd is the daemon that provides the finger service, which displays information about system users, and does not directly use hosts.allow for access control.

mountd is the NFS mount daemon that processes mount requests from NFS clients, and it uses other mechanisms for access control, such as RPC authentication or /etc/exports.

xinetd is an extended Internet services daemon that offers more advanced features than inetd, including its own access control mechanisms, but it can still use tcpd for compatibility rather than directly parsing hosts.allow itself.