A new packet filtering framework that replaces iptables, ip6tables, arptables, and ebtables

A userspace daemon for logging firewall events

A graphical interface for managing iptables rules

A network monitoring tool for analyzing traffic

An administrator needs to block traffic from a list of 500 IP addresses that changes daily. They want to update the list without reloading the iptables rules. Which approach is most efficient?

Generate a new iptables script with 500 rules each time the list changes and reload it.

Use a single iptables rule with a hash:ip set defined inline.

Use the 'recent' module to track and block IPs dynamically.

Create an ipset named 'blocklist' and add/remove addresses with ipset commands; reference it in a single iptables rule.

LPIC-3 Security

Domain 4Objective 3

328.3 Packet Filtering (weight: 5) LPIC-3-SECURITY Practice Questions (Page 2)

Part of the Topic 328: Network Security domain, which makes up ~27% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

11concepts

Questions 6–10

6foundation · easy
Which firewall architecture places a firewall between the internet and a DMZ, and a second firewall between the DMZ and the internal network?
Select an answer first
7foundation · easy
What is nftables?
Select an answer first
8foundation · easy
In which iptables table and chain would you typically place a DNAT rule to forward incoming traffic to an internal server?
Select an answer first
9foundation · easy
In iptables, which table is used for packet filtering decisions such as ACCEPT or DROP?
Select an answer first
10application · medium
An administrator needs to block traffic from a list of 500 IP addresses that changes daily. They want to update the list without reloading the iptables rules. Which approach is most efficient?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.

328.3 Packet Filtering (weight: 5) LPIC-3-SECURITY Practice Questions (Page 2)

Questions 6–10

Which firewall architecture places a firewall between the internet and a DMZ, and a second firewall between the DMZ and the internal network?

What is nftables?

In which iptables table and chain would you typically place a DNAT rule to forward incoming traffic to an internal server?

In iptables, which table is used for packet filtering decisions such as ACCEPT or DROP?

An administrator needs to block traffic from a list of 500 IP addresses that changes daily. They want to update the list without reloading the iptables rules. Which approach is most efficient?

Keep studying — Topic 328: Network Security