MENU
When the default policy for the netfilter INPUT chain is set to DROP, why should a rule allowing traffic to localhost exist?
Suggested Answer: C
Get Premium 202-450 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
36 comments · newest first
GA
Gail
10 months ago
Some apps really do rely on localhost for communication.
RY
Ryan
10 months ago
Wait, I thought localhost was always open?
YU
Yuki
10 months ago
All traffic to localhost must always be allowed.
CH
Cherelle
11 months ago
Definitely need rules for localhost traffic!
KE
Kenia
11 months ago
I disagree, it can be managed differently.
MO
Mozell
11 months ago
I vaguely recall something about syslogd using localhost for messages, but I can't remember if that's the main reason we need to allow that traffic. Is that option D?
IN
Inocencia
11 months ago
I'm a bit confused; I thought netfilter didn't affect localhost at all, but maybe that's not correct? I should probably double-check that.
MA
Maryann
12 months ago
I feel like I saw a question similar to this in practice, and it was about how netfilter handles localhost traffic. I think it might be option C?
KA
Kaycee
12 months ago
I think I remember that localhost traffic needs to be allowed because some applications rely on it to communicate, but I'm not entirely sure which option that is.
TA
Tarra
1 year ago
The iptables command communicating with netfilterd on localhost - that's an interesting detail. I'll make sure to keep that in mind as I work through this question.
MA
Maurine
1 year ago
All traffic to localhost should always be allowed? That doesn't sound right to me. I'll need to read the question more closely and consider the other options.
AL
Alease
1 year ago
Okay, the key here is that some applications use localhost to communicate, so we need a rule to allow that traffic even with a DROP default policy. I think I've got a good strategy for this.
LA
Lasandra
1 year ago
Hmm, I'm a bit confused about the relationship between the default policy and localhost traffic. I'll need to think this through carefully.
NI
Nikita
1 year ago
This seems like a pretty straightforward question about netfilter and localhost traffic. I'm confident I can figure this out.
RO
Rosamond
1 year ago
B is just plain wrong. Of course netfilter affects localhost traffic, it's not some magical exception zone.
KR
Kristal
1 year ago
D) syslogd receives messages on localhost
FA
Fabiola
1 year ago
C) Some applications use the localhost interface to communicate with other applications
NO
Nobuko
1 year ago
A) All traffic to localhost must always be allowed
OR
Oretha
1 year ago
I think E is the funniest answer. Netfilterd is my new favorite daemon, sounds like a superhero!
RU
Rupert
1 year ago
D) syslogd receives messages on localhost
BO
Bong
1 year ago
A) All traffic to localhost must always be allowed
EL
Elena
1 year ago
C) Some applications use the localhost interface to communicate with other applications
PA
Pamella
1 year ago
D is also a valid answer. The syslog daemon needs to receive messages on localhost to log system events.
VE
Venita
1 year ago
D) syslogd receives messages on localhost
QU
Quentin
1 year ago
E) The iptables command communicates with the netfilter management daemon netfilterd on localhost to create and change packet filter rules
EL
Elouise
1 year ago
C) Some applications use the localhost interface to communicate with other applications
GR
Graciela
2 years ago
But what about option B? Doesn't netfilter never affect packets addressed to localhost anyway?
EL
Eleonore
2 years ago
I agree with Josue. It's important to allow traffic to localhost for certain applications to function properly.
JO
Josue
2 years ago
I think a rule allowing traffic to localhost should exist because some applications use the localhost interface to communicate with other applications.
CA
Carey
2 years ago
C is the correct answer. Applications like database servers often use the localhost interface for internal communication, so a rule allowing this traffic is necessary.
ER
Erick
1 year ago
D) syslogd receives messages on localhost
LU
Luke
1 year ago
A) All traffic to localhost must always be allowed
TO
Tonette
1 year ago
C) Some applications use the localhost interface to communicate with other applications
LU
Lucina
1 year ago
D) syslogd receives messages on localhost
LA
Lawrence
1 year ago
A) All traffic to localhost must always be allowed
LI
Linwood
1 year ago
C) Some applications use the localhost interface to communicate with other applications