Match each security tool to its function.
Drag a concept onto its matching description — or click a concept then click the description.
Packet filtering firewall using netfilter
Successor to iptables with improved syntax
Mandatory access control (MAC) system
Mandatory access control using profiles
Intrusion prevention by banning IPs based on logs
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
iptables: A firewall tool used to set up, maintain, and inspect the tables of IP packet filter rules.
Correct matches: iptables is a firewall, nmap is a network scanner, tcpdump is a packet analyzer. Common confusions include misattributing file integrity checking to iptables, IP banning to nmap, and port scanning to tcpdump.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
iptables: A firewall tool used to set up, maintain, and inspect the tables of IP packet filter rules.
Why this is correct
iptables is the standard Linux firewall for packet filtering and NAT.
nmap: A network scanning tool used to discover hosts and services on a network.
Why this is correct
nmap is widely used for network discovery and security auditing.
tcpdump: A command-line packet analyzer that allows capturing and displaying network packets.
Why this is correct
tcpdump is a powerful network traffic capture tool.
iptables: A tool for monitoring file system integrity.
Why it's wrong here
Incorrect — file system integrity is typically monitored by AIDE or Tripwire.
nmap: A tool for banning IPs after failed login attempts.
Why it's wrong here
Incorrect — this describes fail2ban, which blocks IPs based on log failures.
tcpdump: A tool for scanning open ports.
Why it's wrong here
Incorrect — port scanning is a function of nmap, not tcpdump.
Go deeper
About these practice questions
One of 507 original LPIC-2 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This LPIC-2 practice question is part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the LPIC-2 exam.