SCP Exam SC0-451 Topic 3 Question 102 Discussion

Actual exam question for SCP's SC0-451 exam

Question #: 102
Topic #: 3

You have recently taken over the security of a mid-sized network. You are reviewing the current configuration of the IPTables firewall, and notice the following rule: ipchains -A input -p TCP -s 0.0.0.0/0 -d 10.0.10.0/24 5000:10000 -j DENY What is the function of this rule?

AThis rule for the output chain states that any TCP traffic from any IP address destined for the 10.0.10.0 network on ports 5000 to 10000 is to be denied.

BThis rule for the input chain states that any TCP traffic from any IP address destined for the 10.0.10.0 network on ports 5000 to 10000 is to be denied.

CThis rule for the output chain states that any traffic from the TCP port to the 10.0.10.0 network on ports 5000 and 10000 is to be denied.

DThis rule for the input chain states that any traffic from the TCP port to the 10.0.10.0 network on ports 5000 and 10000 is to be denied.

EThis rule for the input chain states that any traffic from the 10.0.10.0 network to ports 5000 and 10000 is to be denied.

Show Suggested Answer

Suggested Answer: B

by Dwight at Oct 20, 2024, 11:04 AM

Limited Time Offer

25%

Off

Get Premium SC0-451 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jina

6 months ago

I agree with Nobuko. It seems like option A is the correct answer because it specifies the input chain and the correct IP address range and port range.

upvoted 0 times

...

Nobuko

6 months ago

I think the function of this rule is to deny any TCP traffic from any IP address to the 10.0.10.0 network on ports 5000 to 10000.

upvoted 0 times

...

6 months ago

This rule is definitely denying any TCP traffic from any IP address to the 10.0.10.0 network on ports 5000 to 10000. It's a clear-cut case of input chain filtering.

upvoted 0 times

Sanjuana

5 months ago

A) This rule is definitely denying any TCP traffic from any IP address to the 10.0.10.0 network on ports 5000 to 10000. It's a clear-cut case of input chain filtering.

upvoted 0 times

...

Dong

5 months ago

B) This rule for the input chain states that any TCP traffic from any IP address destined for the 10.0.10.0 network on ports 5000 to 10000 is to be denied.

upvoted 0 times

...

Belen

6 months ago

A) This rule for the output chain states that any TCP traffic from any IP address destined for the 10.0.10.0 network on ports 5000 to 10000 is to be denied.

upvoted 0 times

...