Discuss LPI 202-450 Exam Topic 5 Question 16

Using its standard configuration, how does fail2ban block offending SSH clients?

ABy rejecting connections due to its role as a proxy in front of SSHD.

BBy modifying and adjusting the SSHD configuration.

CBy creating and maintaining netfilter rules.

DBy creating null routes that drop any answer packets sent to the client.

EBy modifying and adjusting the TCP Wrapper configuration for SSHD.

Suggested Answer: B

Get Premium 202-450 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Gene 11 months ago

I always thought it was null routes. Interesting!

Gilberto 12 months ago

Nope, definitely not modifying SSHD config.

Thaddeus 12 months ago

Wait, I thought it was a proxy?

Bernardine 12 months ago

Totally agree, it's all about those iptables rules!

Hermila 1 year ago

Fail2ban blocks SSH clients by creating netfilter rules.

Leota 1 year ago

I'm leaning towards the netfilter rules option too, but I can't shake the feeling that there was something about rejecting connections as a proxy.

Isadora 1 year ago

I feel like the answer might be about netfilter rules, but I also vaguely recall something about TCP Wrapper.

Tonette 1 year ago

I remember practicing a question about fail2ban, and I think it was related to modifying SSHD configuration, but that doesn't seem right for this one.

Blondell 1 year ago

I think fail2ban blocks SSH clients by creating netfilter rules, but I'm not entirely sure if that's the only method it uses.

Lanie 1 year ago

Hmm, this is a tricky one. I'm leaning towards option C, since that sounds like a one-on-one coaching engagement, which seems like the kind of "accelerator" service they might offer. But I'm not completely confident.

Leslie 1 year ago

Ah, I see now. File storage is the way to go for organizing data in a hierarchical structure on a NAS device. I'll select that option.

Leoma 1 year ago

This is a good test of our understanding of basic insurance concepts. I'm going to carefully read through the question again, think it through step-by-step, and then select the answer I'm most confident in.

Willow 1 year ago

This looks like a straightforward question about the components of an Audit Configuration file. I think the answer is DataExtractors, since that component is responsible for taking input data and producing some kind of output.

Tomislav H 3 years ago

fail2ban doesn't change configuration, it uses iptables or some script on behalf of iptables, so C is the correct answer

LPI 202-450 Exam - Topic 5 Question 16 Discussion