A company is migrating from iptables to nftables. They have a complex rule set with multiple tables and chains. During the migration, they need to ensure that both iptables and nftables can coexist temporarily without conflicts. What should they do?

Run iptables and nftables simultaneously without any special configuration.

Disable nftables entirely and continue using iptables until the migration is complete.

Use the iptables-nft compatibility layer, which translates iptables rules to nftables while keeping the iptables interface.

Manually convert all iptables rules to nftables in one step and remove iptables.

What is the role of iptables in the netfilter framework?

It is the kernel-level packet filtering engine

It is a userspace tool to configure netfilter rules

It is a network protocol for filtering IPv6 packets

It is a daemon that logs all firewall events

LPIC-3 Security

Domain 4Objective 3

328.3 Packet Filtering (weight: 5) LPIC-3-SECURITY Practice Questions (Page 1)

Part of the Topic 328: Network Security domain, which makes up ~27% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

11concepts

Questions 1–5

1foundation · easy
Which command is used to add a rule to an nftables chain?
Select an answer first
2expert · medium
A company is migrating from iptables to nftables. They have a complex rule set with multiple tables and chains. During the migration, they need to ensure that both iptables and nftables can coexist temporarily without conflicts. What should they do?
Select an answer first
3foundation · easy
What is the role of iptables in the netfilter framework?
Select an answer first
4foundation · easy
Which iptables match extension is used to filter packets based on connection tracking states like ESTABLISHED and RELATED?
Select an answer first
5foundation · easy
Which iptables target sends an ICMP error message back to the sender and drops the packet?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.

328.3 Packet Filtering (weight: 5) LPIC-3-SECURITY Practice Questions (Page 1)

Questions 1–5

Which command is used to add a rule to an nftables chain?

A company is migrating from iptables to nftables. They have a complex rule set with multiple tables and chains. During the migration, they need to ensure that both iptables and nftables can coexist temporarily without conflicts. What should they do?

What is the role of iptables in the netfilter framework?

Which iptables match extension is used to filter packets based on connection tracking states like ESTABLISHED and RELATED?

Which iptables target sends an ICMP error message back to the sender and drops the packet?

Keep studying — Topic 328: Network Security