Courseiva
← CV0-004
Full test
hardMultiple ChoiceObjective-mapped

CV0-004 Practice Question: Refer to the exhibit

Exhibit

Refer to the exhibit.
```
$ sudo iptables -L -n -v
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:3389
```

Refer to the exhibit. A cloud administrator runs the above command on a Linux virtual machine. What is the effect of the current firewall rules?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

All incoming traffic is allowed except RDP, which is dropped.

The rules show ACCEPT for SSH (22), HTTP (80), and HTTPS (443), and DROP for RDP (3389). Since the default policy on the INPUT chain is ACCEPT, all other traffic is allowed, which is not secure. The administrator should set the default policy to DROP and only allow necessary ports.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    All outgoing traffic is controlled by these rules.

    Why it's wrong here

    These are INPUT chain rules, governing incoming traffic.

  • ✓

    All incoming traffic is allowed except RDP, which is dropped.

    Why this is correct

    The default policy is ACCEPT, so only the explicitly dropped port (3389) is blocked; all other ports are allowed.

  • ✗

    The firewall is blocking all traffic by default.

    Why it's wrong here

    The default policy is ACCEPT, meaning traffic is allowed unless a rule specifically drops it.

  • ✗

    Only SSH, HTTP, and HTTPS are allowed; all other traffic is dropped.

    Why it's wrong here

    The default policy is ACCEPT, not DROP, so other traffic is allowed despite no explicit rule.

About these practice questions

This CV0-004 question is part of Courseiva's 977-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.