106. Question: To temporarily save iptables rules, the command used is iptables-save > ____.
Option 1: rules.txt
Option 2: config.rules
Option 3: iptables.conf
Option 4: saved-rules
Correct Answer: 1
Explanation: To temporarily save iptables rules, the command iptables-save > rules.txt is used. This command saves the current firewall rules to a file named “rules.txt” for later use or backup.
107. Question: For the SSH server, the main configuration file is located at /etc/ssh/____.
Option 1: sshd_config
Option 2: server.conf
Option 3: ssh_config
Option 4: main.conf
Correct Answer: 1
Explanation: For the SSH server, the main configuration file is located at /etc/ssh/sshd_config. This file contains various settings for the SSH server, including authentication methods, allowed users, etc.
108. Question: The iptables command to allow traffic from a specific IP address (e.g., 10.0.0.1) to a specific port (e.g., 22) uses the ____ option.
Option 1: -s
Option 2: -p
Option 3: -dport
Option 4: -A
Correct Answer: 1
Explanation: The iptables command to allow traffic from a specific IP address to a specific port uses the -s (source) option. This option specifies the source IP address for allowed traffic.
109. Question: When setting up SSH for the first time, the encryption keys on the server side are stored in the /etc/ssh/____ directory.
Option 1: ssh_keys
Option 2: certs
Option 3: ssh_host_keys
Option 4: crypto
Correct Answer: 3
Explanation: When setting up SSH for the first time, the encryption keys on the server side are stored in the /etc/ssh/ssh_host_keys directory. These keys are crucial for secure SSH communication.
110. Question: To default deny all inbound traffic and only allow specific traffic through iptables, the default policy for the INPUT chain should be set to ____.
Option 1: ACCEPT
Option 2: REJECT
Option 3: DROP
Option 4: ALLOW
Correct Answer: 3
Explanation: To default deny all inbound traffic and only allow specific traffic through iptables, the default policy for the INPUT chain should be set to DROP. This means that any inbound traffic that does not match explicit rules will be dropped by default.