CompTIA XK0-005 Exam - Topic 2 Question 61 Discussion

Actual exam question for CompTIA's XK0-005 exam

Question #: 61
Topic #: 2

A systems administrator is working on an SFTP server configuration. Which of the following commands will best enable the connectivity to that service from the 10.10.0.0/24 network?

Asudo ufw allow from 10.10.0.0/24 to any port 22

Bsudo ufw allow in on eth0 to any port 22

Csudo ufw allow from 10.10.0.0/24

Dsudo ufw allow 0:22/tcp from 10.10.0.0

Show Suggested Answer

Suggested Answer: A

To allow SFTP (which uses port 22, same as SSH) from a specific subnet using UFW, the most specific and correct syntax is:

bash

sudo ufw allow from 10.10.0.0/24 to any port 22

This allows traffic from a specific subnet to port 22, which is what's required.

Option B allows traffic on an interface but is not limited to the subnet.

Option C is incomplete --- it allows all ports from the subnet.

Option D is malformed syntax --- 0:22/tcp is not a valid port range or UFW format.

''UFW rules can be configured to restrict access by IP range and port. For SFTP, allow port 22 specifically from the required subnet.''

by Shannon at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium XK0-005 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Darrel

3 days ago

D looks good too, but A is definitely the way to go. I wonder if the admin has their coffee ready for this configuration session.

upvoted 0 times

...

Shawnda

8 days ago

I agree, A is the way to go. Gotta love those SFTP servers, they're like the secret agents of the networking world.

upvoted 0 times

...

Ben

13 days ago

A is the correct answer. Allowing access to port 22 from the 10.10.0.0/24 network is the way to enable SFTP connectivity.

upvoted 0 times

...

Billye

19 days ago

I’m leaning towards option A as well, but I wonder if there’s a better way to specify the protocol in the command.

upvoted 0 times

...

Henriette

24 days ago

I feel like option B could work, but it doesn't limit the access to just the 10.10.0.0/24 network, which seems less secure.

upvoted 0 times

...

Arlie

29 days ago

I remember practicing a similar question where we had to allow specific IP ranges, and I think option C might be too broad since it doesn't specify the port.

upvoted 0 times

...

Malcolm

1 month ago

I think option A sounds right since it specifies the source network and the port for SFTP, but I'm not entirely sure if the syntax is correct.

upvoted 0 times

...

Terrilyn

1 month ago

Ah, I've got it! The answer is option D - it allows TCP traffic on port 22 from the 10.10.0.0/24 network. That's the best way to enable SFTP connectivity.

upvoted 0 times

...

Mindy

1 month ago

I'm a bit confused on this one. I know it's about the firewall, but I'm not sure which command would be the most appropriate. I'll have to think it through carefully.

upvoted 0 times

...