mediumMultiple ChoiceObjective-mapped
XK0-006 Practice Question: A user on a workstation with IP 192.168.1.100…
Network Topology
A user on a workstation with IP 192.168.1.100 reports being unable to SSH to the server with IP 10.0.0.5. Based on the exhibit, what is the most likely cause?
⚠ Common exam trap
Many exam-takers assume any rule with 'ACCEPT' for SSH is sufficient, overlooking the source address restriction, and they may also mistakenly think a LOG rule blocks subsequent rules, when in fact LOG is non-terminating.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The SSH rule only accepts connections from the 10.0.0.0/8 subnet.
The exhibit shows an iptables ruleset where the SSH rule (port 22) explicitly matches the source address 10.0.0.0/8. The workstation has IP 192.168.1.100, which does not fall within the 10.0.0.0/8 range, so the SSH rule will not match. Since no other rule allows SSH, the packet will be evaluated against the default INPUT policy, which is ACCEPT (not shown as DROP), but the SSH rule itself restricts the source, making it unreachable for this client.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The default INPUT policy is DROP and there is no SSH rule.
Why it's wrong here
There is an SSH rule, but it is source-restricted.
- ✗
The SSH rule appears after a LOG rule, causing it to be unreachable.
Why it's wrong here
Rules are processed in order; the LOG rule does not affect acceptance of SSH because the LOG rule logs then continues to DROP, but the SSH rule is before the LOG and DROP rules.
- ✓
The SSH rule only accepts connections from the 10.0.0.0/8 subnet.
Why this is correct
The fifth line shows SSH accepted only from source 10.0.0.0/8; the user's IP is not in that range.
- ✗
The SSH port is not allowed in any rule.
Why it's wrong here
There is a rule accepting SSH on port 22, but only from 10.0.0.0/8.
Go deeper
Related to this question
Learn chapter
User and Group Administration
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
About these practice questions
One of 979 original XK0-006 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.