Classify allowed services per network interface and distinguish current runtime rules from persistent rules.
Assume firewalld is used.
Which description is correct?
firewalld organizes rules with zones and services and separates runtime configuration from permanent configuration.
Detailed explanation
Incorrect. Password hashes belong to shadow-password management.
Incorrect. Mail alias expansion belongs to an MTA.
Correct. firewalld uses zones and services with separate runtime and permanent state.
Incorrect. Login history is unrelated to firewall management.
Try it yourself
An example you can run in a temporary verification environment.
firewall-cmd --help 2>&1 | grep -E -- 'zone|permanent|runtime' | head -n 4Expected result
zoneまたはpermanentに関するhelp行Key points
- Zones
- Services
- Runtime and permanent
Notes
- Environment: firewalld firewall-cmd help / ルール変更なし
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Protected account data
Sensitive authentication data stored separately from ordinary account records.
Service availability
Whether a service can start automatically or be activated on demand.
Packet filter
A host firewall rule set that permits or rejects network packets.