Courseiva
server-administrationmediumMultiple ChoiceObjective-mapped

SK0-005 server-administration Practice Question

Network Topology
DROP tcp0.0.0.0/0 0.0.0.0/0 tcp dpt:22ACCEPT tcpACCEPT all0.0.0.0/0 0.0.0.0/0 state RELATEDDROP all0.0.0.0/0Chain INPUT (policy ACCEPT)target prot opt source destination

Refer to the exhibit. A server administrator configured iptables rules on a Linux server. Immediately afterward, they are unable to connect to the server via SSH. The output of 'iptables -L INPUT -n' is shown. What is the most likely cause of the connectivity issue?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The DROP rule for port 22 appears before the ACCEPT rule, causing all SSH packets to be dropped.

iptables processes rules in order. The DROP rule for destination port 22 appears before the ACCEPT rule, so all incoming SSH packets are dropped before the ACCEPT rule can permit new connections.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The last DROP rule blocks all traffic, including established SSH sessions.

    Why it's wrong here

    The last DROP rule blocks traffic, but the earlier ACCEPT for RELATED,ESTABLISHED allows return packets of existing connections, so this does not explain new SSH failure.

  • The DROP rule for port 22 appears before the ACCEPT rule, causing all SSH packets to be dropped.

    Why this is correct

    Correct. With the DROP preceding the ACCEPT, every SSH packet matches the DROP target first.

  • The default INPUT policy is set to ACCEPT, allowing all traffic.

    Why it's wrong here

    A default ACCEPT policy does not override an earlier DROP rule; the DROP for SSH still takes effect.

  • The ACCEPT rule for port 22 is missing the ESTABLISHED state, preventing return traffic.

    Why it's wrong here

    The ACCEPT rule uses state NEW, which is fine; the RELATED,ESTABLISHED rule permits return traffic. The problem is the order.

About these practice questions

One of 185 original SK0-005 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed July 2026 · checked against the official CompTIA exam blueprint

This SK0-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SK0-005 exam.