Linux Foundation LFCA Exam - Topic 2 Question 33 Discussion

Actual exam question for Linux Foundation's LFCA exam

Question #: 33
Topic #: 2

[All LFCA Questions]

When working on a Linux system with firewalld enabled, how can other systems be allowed to access the HTTPS port on the system in the default firewall zone so that the access is granted immediately and persists across reboots?

Afirewallctl --add-port=https --reload

Biptables --add-service=https --permanent

Cfirewalld --add-service=https

Dfirewall-cmd --add-service=https --permanent --reload

Show Suggested Answer

Suggested Answer: D

by Wilford at Oct 21, 2024, 04:20 PM

Limited Time Offer

25%

Off

Get Premium LFCA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Corazon

4 months ago

B is outdated, stick with D for firewalld!

upvoted 0 times

...

Patria

4 months ago

Wait, is D really the right one? Seems too easy!

upvoted 0 times

...

Daron

4 months ago

I thought it was A at first, but D makes more sense.

upvoted 0 times

...

Tashia

4 months ago

Totally agree, D is the way to go!

upvoted 0 times

...

Kati

5 months ago

D is the correct command for firewalld.

upvoted 0 times

...

Ellsworth

5 months ago

I think the correct command is `firewall-cmd --add-service=https --permanent --reload`, but I’m not 100% certain about the options.

upvoted 0 times

...

Susy

5 months ago

I’m a bit confused between `firewallctl` and `firewall-cmd`. I feel like I’ve seen both in practice questions.

upvoted 0 times

...

Alyce

5 months ago

I practiced a similar question, and I believe the `--permanent` flag is important for making changes persist across reboots.

upvoted 0 times

...

Ben

5 months ago

I think I remember something about using `firewall-cmd` for managing firewalld, but I'm not sure if the syntax is right.

upvoted 0 times

...

Shayne

5 months ago

No problem, I got this. The firewalld service is the default firewall on modern Linux systems, so the answer has to be C or D. I'll go with D since it mentions making the change permanent.

upvoted 0 times

...

Estrella

5 months ago

I'm a bit confused by all the different firewall tools. iptables, firewalld, firewall-cmd... which one am I supposed to use here? I'll have to review my notes to make sure I get this right.

upvoted 0 times

...

Janna

5 months ago

Ah, I've done this before! The answer is definitely D. firewall-cmd is the way to go, and the --permanent option ensures the rule sticks around.

upvoted 0 times

...

Pearly

5 months ago

Okay, let me see... I think the key is using the firewall-cmd tool and the --permanent option to make the change persist across reboots. But I'm not sure about the exact syntax.

upvoted 0 times

...

Valene

6 months ago

Hmm, this looks like a firewall configuration question. I'll need to think carefully about the different firewall commands and how they interact with the default zone and persistence.

upvoted 0 times

...

Renea

1 year ago

I'm going with option D. It's the most straightforward and comprehensive solution to the problem.

upvoted 0 times

...

Paulina

1 year ago

Haha, option B with iptables? That's like using a sledgehammer to crack a nut. Firewalld is the modern way to manage firewalls on Linux.

upvoted 0 times

Dwight

1 year ago

D) firewall-cmd --add-service=https --permanent --reload

upvoted 0 times

...

Renea

1 year ago

C) firewalld --add-service=https

upvoted 0 times

...

Merri

1 year ago

A) firewallctl --add-port=https --reload

upvoted 0 times

...

Anika

1 year ago

Option D is definitely the way to go. Reloading the firewall after adding the service is crucial to make the changes effective immediately.

upvoted 0 times

Soledad

1 year ago

Thanks for the reminder, I'll make sure to use firewall-cmd --add-service=https --permanent --reload next time.

upvoted 0 times

...

Carlota

1 year ago

Don't forget to include the --permanent flag to ensure the rule persists across reboots.

upvoted 0 times

...

Eleonore

1 year ago

I agree, using firewall-cmd with the --add-service option is the correct way to allow access to the HTTPS port.

upvoted 0 times

...

Paola

1 year ago

Option D is definitely the way to go. Reloading the firewall after adding the service is crucial to make the changes effective immediately.

upvoted 0 times

...

Genevive

1 year ago

I agree with Angella, D seems like the correct option for allowing access to the HTTPS port on a Linux system with firewalld enabled.

upvoted 0 times

...

Lauran

1 year ago

Hmm, option D looks like the correct answer to me. The firewall-cmd command allows you to add the HTTPS service permanently and reload the firewall configuration.

upvoted 0 times