exam questions

Exam SY0-601 All Questions

View all questions & answers for the SY0-601 exam

Exam SY0-601 topic 1 question 385 discussion

Actual exam question from CompTIA's SY0-601
Question #: 385
Topic #: 1
[All SY0-601 Questions]

A cybersecurity administrator is using iptables as an enterprise firewall. The administrator created some rules, but the network now seems to be unresponsive. All connections are being dropped by the firewall. Which of the following would be the BEST option to remove the rules?

  • A. # iptables -t mangle -X
  • B. # iptables -F
  • C. # iptables -Z
  • D. # iptables -P INPUT -j DROP
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
NerdAlert
Highly Voted 2 years, 3 months ago
sooo....I'm the only one who never heard of iptables?
upvoted 79 times
Teacher2Cyber
1 year, 6 months ago
I haven’t either!
upvoted 7 times
...
...
Ahmed_aldouky
Highly Voted 2 years, 3 months ago
Selected Answer: B
The BEST option to remove the rules in this scenario would be option B, which is to use the command "iptables -F" to flush all the rules in the firewall. Option A ("iptables -t mangle -X") would only remove the mangle table rules, which may not be the only rules causing the issue. Option C ("iptables -Z") would zero the counters for all rules, but would not remove the rules themselves. Option D ("iptables -P INPUT -j DROP") would set the default policy of the INPUT chain to DROP, which would still cause all connections to be dropped by the firewall. Therefore, option B is the most appropriate command to remove all rules from the firewall and restore network connectivity.
upvoted 23 times
...
AbdullahMohammad251
Most Recent 1 year, 1 month ago
Selected Answer: B
Option A: deletes all user-defined chains in the mangle table, but default chains in the filter table will not be affected. Option B: This will delete all chains in all tables. Option C: this will reset the packet and byte counters Option D: Drops all incoming packets to the local host if none of the preceding firewall rules was matched, outgoing packets are not affected. None of the firewall rules are dropped either.
upvoted 1 times
...
memodrums
1 year, 4 months ago
Selected Answer: B
Where is this on the exam objectives?
upvoted 4 times
...
Pisces225
1 year, 4 months ago
These questions are all absolute garbage. iptables is mentioned in the official Sec+ material, but the -F switch is NOT covered. That they are going to ask questions about material they did NOT present to you is absurd.
upvoted 5 times
...
LinkinPark4evr
1 year, 9 months ago
Selected Answer: B
The rules the person created are likely what is causing the issue. -F will flush them.
upvoted 2 times
...
rline63
1 year, 9 months ago
Yay, absolute lucky guess FTW
upvoted 4 times
...
LeonardSnart
2 years ago
Selected Answer: B
Again, I dont think this question will count on the exam if you see it as it seems to be taken from Linux+ but anyway.. "The tool you use to view and alter the chains and filters in the iptables service is the iptables command. Table 18.2 shows the commonly used iptables command-line options.... ...-F [ chain ] Removes (flush) all rules from this chain. If chain is not specified, remove all rules from all chains." -Comptia Linux+ Study Guide XK0-005 by Richard Blum & Christine Bresnahan
upvoted 4 times
...
Selected Answer: B
The command "iptables -F" flushes all the rules in the filter table, which is the default table used by iptables. This will remove all the rules and allow all traffic to pass through the firewall without any filtering or blocking. By using this command, you can effectively clear the existing rules and restore connectivity to the network.
upvoted 9 times
...
jb844
2 years ago
Selected Answer: B
iptables -F flushes the rules of a chain. http://explainshell.com/explain? cmd=iptables+-F. -F, --flush [chain] Flush the selected chain (all the chains in the table if none is given). This is equivalent to deleting all the rules one by one.
upvoted 1 times
...
Dutch012
2 years, 2 months ago
Is this a type of food or something?
upvoted 4 times
...
examrobo
2 years, 2 months ago
i have never seen iptables
upvoted 4 times
...
SophyQueenCR82
2 years, 3 months ago
The BEST option to remove the rules in this scenario would be option B: # iptables -F. This command would flush all of the rules that have been created and restore the default policies. This would allow all traffic to flow through the firewall, effectively disabling it. Option A: # iptables -t mangle -X would delete all of the user-defined chains in the mangle table, which may not be necessary for removing the rules that caused the network to become unresponsive. Option C: # iptables -Z would reset the packet and byte counters for all of the chains, but would not remove any rules. Option D: # iptables -P INPUT -j DROP would set the default policy for the INPUT chain to DROP, which would drop all incoming traffic. This would not remove any rules, and would not be the best option to restore network connectivity.
upvoted 3 times
...
cyberboot
2 years, 3 months ago
Selected Answer: B
B. is the correct answer. https://phoenixnap.com/kb/iptables-delete-rule
upvoted 4 times
...
ramesh2022
2 years, 3 months ago
Selected Answer: B
The best option to remove the rules is B. # iptables -F. The "-F" flag will flush all the existing iptable rules, allowing for a fresh start. This should help get the network back online and allow the administrator to start creating new rules that will not cause any network disruption.
upvoted 2 times
...
ganymede
2 years, 4 months ago
Selected Answer: C
C. It's not zero day. It's extremely unlikely that a vulnerability scanner would find a zero day vulnerability, bcs nobody knows it exists.
upvoted 1 times
ganymede
2 years, 4 months ago
Disregard this. It was meant for a different question.
upvoted 1 times
...
...
ganymede
2 years, 4 months ago
Selected Answer: B
B. # iptables -F https://www.cyberciti.biz/tips/linux-iptables-how-to-flush-all-rules.html Procedure to flush and delete ALL iptables firewall rules To flush the selected chain (or all the chains in the table if none is given) pass the --flush or -F option. This is equivalent to deleting all the iptables rules one by one on Linux
upvoted 2 times
ganymede
2 years, 4 months ago
Chatgpt agrees: The BEST option to remove the rules and restore the network connectivity would be to use the command "# iptables -F". The "-F" option flushes (i.e., removes) all of the firewall rules, effectively resetting the iptables configuration to its default settings. This will remove all of the rules created by the administrator and allow traffic to pass through the firewall normally.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...