A Linux server hosts a web application on port 443 and an SSH service on port 22. The administrator wants to restrict incoming traffic to only these services and allow outgoing traffic for updates and DNS. Which nftables configuration achieves this?

Set input chain policy ACCEPT and add rules to drop ports 443 and 22.

Use iptables to set the default policy to ACCEPT and add rules to allow ports 443 and 22.

Create an nftables table with input chain policy DROP, allowing established/related connections, port 443, and port 22; output chain policy ACCEPT.

Configure the firewall to allow all traffic from the internal network and block all traffic from the internet.

What is the purpose of Access Control Lists (ACLs) on Linux file systems?

To compress files to save disk space

To provide more granular permissions beyond the traditional owner/group/others model

A network defender notices unusual outbound traffic from a Linux endpoint to an unknown IP address on port 4444. The defender suspects a reverse shell. Which immediate action should be taken to confirm and mitigate the threat?

Disable the network interface to stop all traffic.

Use netstat or ss to identify the process associated with the connection, then kill the process and block the IP with the firewall.

Reboot the system to clear the connection.

Change the system's DNS settings to redirect the unknown IP.

EC-CouncilCertified Network Defender

Domain 2Objective 3

Endpoint Security Linux Systems CND Practice Questions (Page 9)

Part of the Perimeter and Endpoint Security domain, which makes up ~24% of our current practice bank.

47questions here

10free pages

9concepts

Questions 41–45

41foundation · easy
Which command is used to view the last few lines of a log file and follow new entries as they are added?
Select an answer first
42foundation · easy
Which of the following is a Linux security module that provides mandatory access control (MAC)?
Select an answer first
43application · medium
A Linux server hosts a web application on port 443 and an SSH service on port 22. The administrator wants to restrict incoming traffic to only these services and allow outgoing traffic for updates and DNS. Which nftables configuration achieves this?
Select an answer first
44foundation · easy
What is the purpose of Access Control Lists (ACLs) on Linux file systems?
Select an answer first
45application · medium
A network defender notices unusual outbound traffic from a Linux endpoint to an unknown IP address on port 4444. The defender suspects a reverse shell. Which immediate action should be taken to confirm and mitigate the threat?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.

Endpoint Security Linux Systems CND Practice Questions (Page 9)

Questions 41–45

Which command is used to view the last few lines of a log file and follow new entries as they are added?

Which of the following is a Linux security module that provides mandatory access control (MAC)?

A Linux server hosts a web application on port 443 and an SSH service on port 22. The administrator wants to restrict incoming traffic to only these services and allow outgoing traffic for updates and DNS. Which nftables configuration achieves this?

What is the purpose of Access Control Lists (ACLs) on Linux file systems?

A network defender notices unusual outbound traffic from a Linux endpoint to an unknown IP address on port 4444. The defender suspects a reverse shell. Which immediate action should be taken to confirm and mitigate the threat?

Keep studying — Perimeter and Endpoint Security