Configuring a TCP Wrappers default deny | LPIC-1 102-500 Exam original practice question

110.2Standard

Required allow rules are already in /etc/hosts.allow.

Deny all other clients for TCP Wrappers-aware daemons in /etc/hosts.deny.

Which line is appropriate?

Hint 1: Focus on security boundaries

Separate account protection, service availability, host access controls, and packet filtering before comparing the choices.

Hint 2: Key terms

Review the short definitions of account protection, host controls, and packet filtering.

ALL token: A TCP Wrappers wildcard that matches every daemon or client in that position.
Default deny: An access-control policy that rejects anything not explicitly permitted.
Allowlist: A list-based policy that permits named sources and excludes the rest.
hosts.deny: The rule file used when a connection was not permitted by hosts.allow.
Fallback rule: A final control applied when no more-specific rule matches.
Lockout prevention: A check that keeps administrative access from being blocked accidentally.

Detailed explanation

CorrectALL : ALL

Correct. It matches every daemon and client as the fallback deny rule.

IncorrectALLOW : ALL

Incorrect. ALLOW is not the token for all daemons.

IncorrectALL = DENY

Incorrect. It does not use daemon:client syntax.

IncorrectDENY ALL FROM ALL

Incorrect. This is not the standard hosts.deny rule format.

An example you can run in a temporary verification environment.

printf '%s
' 'ALL : ALL'

ALL : ALL

Foundation review

Check whether the command acts on the current shell, a new process, an existing process, or a file.

Use the supplied command and compare the output with the expected result.

Question IDKP-110-873

Environmenthosts_access rule構文の表示のみ

Last technical review2026-08-13

More practice in this area