A Linux administrator is implementing a stateful firewall on the Linux server. Which of the following iptables options will be required to build the stateful rules? (Choose two.)

The correct answer is B. -m recent C. -m conntrack. Building stateful iptables rules requires connection-tracking modules. '-m conntrack' is the modern connection tracking extension that enables stateful inspection - it allows rules based on connection states like ESTABLISHED, NEW, and RELATED using '--ctstate'. '-m recent'…

Security

Question

A Linux administrator is implementing a stateful firewall on the Linux server. Which of the following iptables options will be required to build the stateful rules? (Choose two.)

Options

A--name established
B-m recent
C-m conntrack
D--state
E--remove
F-j DROP

How the community answered

(48 responses)

A
2% (1)
B
90% (43)
E
6% (3)
F
2% (1)

Explanation

Building stateful iptables rules requires connection-tracking modules. '-m conntrack' is the modern connection tracking extension that enables stateful inspection - it allows rules based on connection states like ESTABLISHED, NEW, and RELATED using '--ctstate'. '-m recent' tracks recently seen IP addresses or connections, enabling rules that consider whether a host has recently communicated, which is another form of stateful awareness. '--state' (choice D) is an older alias and works with '-m state', not independently. '--name established' and '--remove' are parameters to '-m recent', not standalone options. '-j DROP' is an action/target, not a matching option for building stateful rules.

Topics

#iptables#firewall#stateful firewall#network security

Community Discussion

No community discussion yet for this question.

Full XK0-005 Practice