CompTIA Server+ SK0-005 Practice Question

The correct command is firewall-cmd --permanent --zone=public --add-service=http. This command permanently adds the 'http' service to the 'public' zone, which is the zone handling traffic from the internet in this scenario. The --permanent flag ensures the rule persists after a reboot. Since the service is a standard web application, using the predefined http service is the correct approach. Simply stopping the firewall (systemctl stop firewalld) would resolve the connectivity issue but would be a major security vulnerability. Changing the default zone to trusted would allow all connections and violate the principle of least privilege. Using --panic-on would block all traffic, which is the opposite of the desired outcome.