GAQM CPEH-001 Exam - Topic 2 Question 48 Discussion

Actual exam question for GAQM's CPEH-001 exam

Question #: 48
Topic #: 2

Jim's organization has just completed a major Linux roll out and now all of the organization's systems are running the Linux 2.5 kernel. The roll out expenses has posed constraints on purchasing other essential security equipment and software. The organization requires an option to control network traffic and also perform stateful inspection of traffic going into and out of the DMZ. Which built-in functionality of Linux can achieve this?

AIP Tables

BIP Chains

CIP Sniffer

DIP ICMP

Show Suggested Answer

Suggested Answer: A

iptables is a user space application program that allows a system administrator to configure the netfilter tables, chains, and rules (described above). Because iptables requires elevated privileges to operate, it must be executed by user root, otherwise it fails to function. On most Linux systems, iptables is installed as /sbin/iptables. IP Tables performs stateful inspection while the older IP Chains only performs stateless inspection.

by Arminda at May 09, 2022, 03:21 PM

Limited Time Offer

25%

Off

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lonna

10 months ago

Wait, can Linux really handle all that traffic efficiently?

upvoted 0 times

...

Lanie

10 months ago

Yeah, IP Tables is the way to go!

upvoted 0 times

...

Ines

10 months ago

IP Sniffer is cool, but not for this purpose.

upvoted 0 times

...

Fatima

11 months ago

I thought IP Chains was still a thing?

upvoted 0 times

...

Joseph

11 months ago

Definitely IP Tables for stateful inspection!

upvoted 0 times

...

Erick

11 months ago

IP ICMP sounds familiar, but I think that’s more related to error messages and diagnostics, not traffic control.

upvoted 0 times

...

Kaycee

11 months ago

I feel like IP Sniffer is more about monitoring traffic rather than controlling it. So, it probably isn’t the answer we need here.

upvoted 0 times

...

Josphine

11 months ago

I’m not entirely sure, but I think IP Chains was used in older kernels. Isn’t it deprecated now?

upvoted 0 times

...

Louann

11 months ago

I remember studying about IP Tables and how it can manage network traffic effectively. I think it’s the right choice for stateful inspection.

upvoted 0 times

...

Lennie

11 months ago

Hmm, this seems like a tricky one. I'll need to think carefully about the implications of a TLS certificate expiry and how that could impact users.

upvoted 0 times

...

Cherri

11 months ago

Ah, this is a tricky one. The settings could be in any of these locations, so I'll need to really understand the technical requirements to determine the right place to configure them.

upvoted 0 times

...

Ocie

11 months ago

This seems like a pretty straightforward question about the contents of a patch file for the MA5600T access network. I'll need to carefully review the options and think about what types of patches or software packages might be included.

upvoted 0 times

...

Noble

11 months ago

I keep wondering if all these options could be interconnected. Maybe D and E are also worth considering, but I'm hesitant about A.

upvoted 0 times

...

Tracie

11 months ago

Gearing sounds familiar, but I can't recall if it really helps with exchange rate risk. It seems more about capital structure.

upvoted 0 times

...

Cathrine

11 months ago

I'm a little confused by all the information in the scenario. There are a lot of details about the company's privacy issues and Roberta's recommendations. I'm not sure which principle in the Bill of Rights is the best match. I'll need to re-read the question and options carefully to make sure I understand what they're asking for.

upvoted 0 times

...