What does 'stateful inspection' in a firewall refer to?

Encrypting packets based on their destination

Scanning packets for malware signatures

Blocking all traffic from unknown IP addresses

Tracking the state of active connections to make filtering decisions

A web developer needs to update a website hosted on a remote server. They want to ensure that the login credentials and the content they upload are protected from interception. Which protocol should they use?

HTTP (Hypertext Transfer Protocol)

A system administrator needs to securely copy a configuration file from a local machine to a remote server over the internet. The administrator is concerned about the file being intercepted in transit. Which command should they use?

scp file.txt user@remote:/path/

ftp file.txt user@remote:/path/

A security analyst is reviewing network logs and notices a series of events: (1) a large number of TCP SYN packets sent to a single server, (2) the server's response is slow, and (3) the source IP addresses are spoofed. Which two actions should the analyst take to confirm and mitigate a potential DDoS attack? (Select all that apply.)

Disable the server's network interface to stop the attack

Enable rate limiting on the firewall to limit the number of SYN packets per second

Analyze traffic patterns to identify the actual source of the attack

Block all traffic from the spoofed source IP addresses

Increase the server's logging level to capture more details

Which system is designed to actively block malicious traffic in real time?

Intrusion prevention system (IPS)

Intrusion detection system (IDS)

LPI Security Essentials

Domain 4Objective 2

024.2 Network and Internet Security (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 3)

Part of the 024 Network and Service Security domain, which makes up ~19% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~5–8 in this domain), expect 2–3 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

Questions 11–15

11foundation · easy
What does 'stateful inspection' in a firewall refer to?
Select an answer first
12application · medium
A web developer needs to update a website hosted on a remote server. They want to ensure that the login credentials and the content they upload are protected from interception. Which protocol should they use?
Select an answer first
13application · medium
A system administrator needs to securely copy a configuration file from a local machine to a remote server over the internet. The administrator is concerned about the file being intercepted in transit. Which command should they use?
Select an answer first
14expert · medium · select all that apply
A security analyst is reviewing network logs and notices a series of events: (1) a large number of TCP SYN packets sent to a single server, (2) the server's response is slow, and (3) the source IP addresses are spoofed. Which two actions should the analyst take to confirm and mitigate a potential DDoS attack? (Select all that apply.)
Select an answer first
15foundation · easy
Which system is designed to actively block malicious traffic in real time?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.