Courseiva
Advanced Networking ConfigurationmediumMultiple ChoiceObjective-mapped

LPIC-2 Advanced Networking Configuration Practice Question

Network Topology
0 0 ACCEPT alllo * 0.0.0.0/0100 5000 ACCEPT tcp50 3000 DROP tcpRefer to the exhibit.# iptables -L -n -v

Refer to the exhibit. If a user on the local machine tries to SSH to a remote host on eth1, what will happen?

⚠ Common exam trap

The trap here is that candidates mistakenly focus on the INPUT chain's DROP policy and assume it blocks outgoing SSH, or they think a specific rule for SSH is required in the OUTPUT chain, overlooking the default ACCEPT policy.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The connection will succeed because the OUTPUT chain accepts all.

The OUTPUT chain has a default policy of ACCEPT, meaning all outgoing packets, including SSH traffic (TCP port 22), are allowed by default. Since the user is initiating an SSH connection from the local machine, the packet traverses the OUTPUT chain, and with no explicit DROP or REJECT rule, it is permitted. The INPUT chain's default DROP policy only affects incoming packets, not outgoing connections.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The connection will succeed only if the remote host is on eth0.

    Why it's wrong here

    The interface does not matter for outgoing connections; OUTPUT chain doesn't filter by interface.

  • The connection will succeed because the OUTPUT chain accepts all.

    Why this is correct

    Outgoing SSH is allowed by OUTPUT policy.

  • The connection will fail because there is no rule accepting outgoing SSH.

    Why it's wrong here

    Default policy ACCEPT allows all outgoing.

  • The connection will fail because the INPUT chain drops all.

    Why it's wrong here

    INPUT chain applies to incoming packets; outgoing connections are not affected.

Visual reference

Client Server SYN (seq=100) SYN-ACK (seq=200, ack=101) ACK (ack=201) Connection established — data transfer begins

About these practice questions

This LPIC-2 question is part of Courseiva's 507-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This LPIC-2 practice question is part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the LPIC-2 exam.