nerdexam
CompTIA

XK0-004 · Question #354

A network administrator installed a web server on a Linux host and added a firewalld command to open port 80/tcp. The web server worked without error until an updated and patched kernel was installed

The correct answer is D. Use the firewalld command to open tcp/80 both with and without the --permanent switch. In firewalld, rules can be designated as either permanent or immediate. If a rule is added or modified, by default, the behavior of the currently running firewall is modified. At the next boot, the modifications will be thrown out and the old rules will be applied.

Security

Question

A network administrator installed a web server on a Linux host and added a firewalld command to open port 80/tcp. The web server worked without error until an updated and patched kernel was installed on the system a month later. Now users are unable to access the web server even though the service is running. Which of the following would fix the issue?

Options

  • AUse the firewalld command to open the HTTP application service rather than the port
  • BChange the firewalld zone to private and open port tcp/80
  • CIssue an additional firewalld command to open up port tcp/443 as well as port tcp/80
  • DUse the firewalld command to open tcp/80 both with and without the --permanent switch

How the community answered

(57 responses)
  • A
    9% (5)
  • B
    4% (2)
  • C
    16% (9)
  • D
    72% (41)

Explanation

In firewalld, rules can be designated as either permanent or immediate. If a rule is added or modified, by default, the behavior of the currently running firewall is modified. At the next boot, the modifications will be thrown out and the old rules will be applied.

Topics

#firewalld#permanent rules#port 80#firewall persistence

Community Discussion

No community discussion yet for this question.

Full XK0-004 Practice