CompTIA Linux+ XK0-006 (V8) Practice Question

The task calls for a permanent rich rule scoped to the 'public' zone that combines four elements:

1. priority=10 to set a specific evaluation order (lower numbers have higher precedence).
2. family="ipv4" plus source address="192.0.2.0/24" to match only the specified network.
3. service name="httpss" to match TCP port 443.
4. log prefix="https_in" level="info" followed by accept to allow and log the traffic.

Only the first command includes every element in the right context and syntax inside a single rich-rule string and uses the --permanent switch so the rule survives a reload.

The second command places accept before log; this violates the rich-rule grammar, as the action must be the final element, and will be rejected by firewalld.

The third command omits both --permanent and priority=10, so the rule is not persistent and is not prioritized as requested.

The fourth command uses separate options like --add-service and --source, which cannot be combined with custom logging prefixes, levels, or priority settings in a single command, so it cannot satisfy all requirements.