CIS 172 (LINUX II) Final Exam

Which of the following options for the gpg command will specify the key that should be retrieved?

--recv-keys

Which of the following options can be used with the usermod command to change the description of the user account that is stored in the GECOS field?

-c

Which of the following file extensions are used by the Debian Package Manager?

.deb

Which of the following is not a valid compression file extension for the Linux operating system?

.vz

Upon running the ifconfig command, the IP address is listed along with the subnet mask in dotted decimal notation listed as 255.255.255.224. You have installed a remote access software that has an address field that requires the address to be configured in CIDR notation. Which of the following is the equivalent CIDR notation for the subnet mask listed?

/27

The System Log Daemon, rsyslogd, creates a socket for other system processes to write to. What is the path to this socket?

/dev/log

Which of the following files does the hostnamectl command modify to set the hostname on a machine?

/etc/hostname

Which of the following files does a TCP wrapper check before starting a network daemon?

/etc/hosts.allow and /etc/hosts.deny

On a system running SysV init, which of the following files can you edit to disable the ability to reboot by using the Ctrl+Alt+Delete key combination?

/etc/inittab

Which of the following files contains the list of shared libraries?

/etc/ld.so.cache

If someone tries to log into a system using a daemon account, but the daemon account does not have a valid shell assigned to it, they would normally see a standard warning. If you want to customize the error, which of the following files can you put a message in that will display upon an attempted login?

/etc/nologin.txt

Which of the following files contain the path and filename where DNS servers should be configured?

/etc/reslov.conf

In which file can you configure rules for logging on a Linux system?

/etc/rsyslog.conf

What is the complete path and filename of the file where ports and their associated protocols are defined? ___________

/etc/services

In which of the following directories can you place files that will be copied to new user directories when new users are created?

/etc/skel

Where does the sudo command check to determine a user's privileges when they attempt to run the sudo command?

/etc/sudoers

What is the path to where the journald.conf file is located?

/etc/systemd/journald.conf

Which of the following files stores information about failed logins on a Linux system?

/var/log/btmp

What zone configuration file contains a PTR record used to identify the loopback adapter?

/var/named/named.local

Where is the default document root directory for the Apache Web server?

/var/www/html

Which of the following is a valid APIPA address?

169.254.38.101

Which of the following ports should you disable so that they no longer respond to network requests on a Linux system due to a lack of encryption? (Choose all that apply.)

23 21

Which of the following results from the nmap command would let an administrator know that they have an insecure service running on a Linux server?

23/tcp open telnet

Which of the following ports would be used to resolve a domain name to an IP address?

53

If no level of compression is specified, the gzip command assumes what compression level?

6

In which of the following zones might a system administrator put the web server hosting the company's publicly accessible website?

DMZ

Which of the following SQL statements can be used to delete a table from a database?

DROP TABLE table_name;

Which of the following does the -r option for the gpg command specify?

Encrypt for the user id given.

When working with Sendmail, what command can be used to test SMTP support?

HELO

Which of the following types of joins will return a record from two intersecting tables only if there is a match on the joining field from both tables?

INNER JOIN

Which of the following is a valid SQL statement for adding a new row of data to a SQL database table?

INSERT INTO users (firstname, lastname) values ('George', 'Washington');

Which of the following packages should be installed in order to integrate certain authentication functions with Microsoft's Active Directory?

Kerberos

What DNS resource record type is used to provide the IP address for the e-mail server for a zone?

MX

Which of the following types of DNS records need to be configured to facilitate email delivery?

MX

When logging into a system, you are prompted to type in a code from a small token that you carry around with you. The code on this token constantly changes. What type of technology has been implemented?

OTP

Which of the following environment variables can you change the value of to set the default printer on a Linux system? (Choose two.)

PRINTER LPDEST

Which of the following is the default option for the kind of keys to be generated when using the gpg --gen-key command?

RSA and RSA

Which of the following can you use to start network daemons in order to limit which computers are allowed to connect to the network service?

TCP Wrapper

What is the most commonly used LAN protocol?

TCP/IP

You have set up a TFTP server to support PXE booting of several workstations. Which of the following protocols would this setup make use of?

UDP

Which of the following can be used to graphically remotely administer a Linux machine?

VNC

Which of the following types of technologies will create a tunneled encrypted connection from a remote location into a corporate network to be able to access resources as if the user was physically connected to the LAN?

VPN

Which of the following is a tool that can be used to search Internet software repositories for RPM packages that map to your system's architecture, and automatically install or upgrade those packages on your system?

YUM

Which of the following package managers are used to install RPM packages on the SUSE or openSUSE distributions by default?

Zypper

Which of the following is not a valid Apparmor command?

aa-trust

Which type of CM software can connect to inventory members via SSH to perform configuration management activities?

agentless

Which of the following commands can be used to install the latest versions of all packages currently installed on the system from the sources configured in sources.list?

apt upgrade

Which of the following Debian Package Management commands will install the newest versions of all packages that are currently installed on a system?

apt-get upgrade

If a Linux system is running as a virtual machine, it may be using a bridge for the virtual network adapter within the virtual machine to the physical network adapter. Which of the following commands can be used to view or modify the bridge configuration used by the Linux kernel for your network adapter?

brctl

Which of the following will show account aging information for a user such as the date of the last password change, when the password expires, and the number of days of warning before the password expires?

chage -l jsmith

Which of the following commands will change the SELinux security context of a file?

chcon

Which of the following is used on modern Linux distributions that reads YAML configuration files to add apps, modify existing configuration settings, or perform administrative tasks at boot time?

cloud-init

Which of the following commands can be used to back up files in case of system failure, supports long filenames, and can also back up device files?

cpio

Which of the following commands can be used to pause a printer named Printer1?

cupsdisable Printer1

Which command can be used at a BASH command prompt to obtain a Web page?

curl

Which of the following types of CM software only requires that you specify the attributes that the inventory members must have within a configuration file, not the individual procedures that must be executed on them?

declarative configuration

Which of the following commands will list the BIOS information about a device when it cannot otherwise be detected by a Linux system?

dmidecode

Which of the following commands can be used to modify configuration options for DPM packages after they have been installed?

dpkg-reconfigure

Which of the following is the log file where the Debian Package Manager writes entries for actions taken and packages installed?

dpkg.log

Which of the following commands can be used to view the quota for a user?

edquota -u jsmith

Which of the following commands will display detailed information for network hardware?

ethtool

Which of the following is the keyword that should be listed after the hosts statement in the /etc/nsswitch.conf file so that the system will consult the /etc/hosts file to resolve a name to an IP address?

files

If you suspect that you have bad blocks on a filesystem, which of the following commands can be used to try and repair the filesystem?

fsck

Which of the following commands will generate a GPG public/private key pair?

gpg --gen-key

Which of the following commands can be used to remove a group from a Linux system? (Choose all that apply.)

groupdel delgroup

Which of the following commands can a user run to display the groups that they are a member of?

groups

You run the command hostname server1 and issue the reboot command. You notice that the host name has reverted back to what it was before the reboot. Which of the following commands should you have used to change the host name instead?

hostnamectl set-hostname server1

What command can be used to view and modify the date and time within the BIOS?

hwclock

You want to determine whether your Linux workstation was able to get assigned an IP address from the DHCP server once you connected it to the network. Which of the following legacy commands might help you determine this?

ifconfig eth0

Which of the following can you use to configure firewall rules for IPv6 on a Linux system?

ip6tables

Which of the following commands can you use to view events within the journald database?

journalctl

When connecting to a host via SSH for the first time, the user is prompted to accept the encryption fingerprint for the target computer which is stored in ___________ in the ~/.ssh/ directory.

known_hosts

Which of the following commands can you use to send a print job to printer1? (Choose all that apply.)

lp -d printer1 mydocument.txt lpr -P printer1 mydocument.txt

Which of the following commands will display the print jobs in the print queue for printer1 only?

lpstat -o printer1

What ftp command uploads the filename from the current directory on the local computer to the current directory on the remote computer and allows the use of wildcard metacharacters to specify the filename?

mput filename

When experiencing a network issue, you want to determine where the source of the problem is. Which of the three following commands can be used to determine whether there is an issue with a router in the normal route that the packets are attempting to take?

mtr traceroute tracepath

Which of the following are valid statements in the /etc/resolv.conf file? (Choose two.)

nameserver 10.1.1.4 domain comptia.org

Which of the following commands will show active UDP connections on a Linux system? (Choose all that apply.)

netstat -u

After modifying the /etc/aliases file, what command must be run in order to rebuild the aliases database?

newaliases

On a system running NetworkManager, which of the following commands can be used to view or modify connection information?

nmcli

What PostgreSQL command-line utility backs up PostgreSQL database settings?

pg_dump

Which of the following commands can be used to determine the round trip time that a packet takes to traverse a network connection?

ping

Which of the following commands will send 4 ICMP echo requests to a remote host named server1 to determine the round trip time it takes a packet to travel?

ping -c 4 server1

Which of the following commands will install an RPM package while ignoring any other packages that it may be dependent upon for proper operation?

rpm -ivh --nodeps package.rpm

Which of the following commands will install a package using the Red Hat Package Manager, showing all information, while printing pound signs to show the progress of installation?

rpm -ivh packagename.rpm

Which of the following hashing algorithm commands reduces the chances of collisions due to the bit length of the message digest?

sha356sum

Which of the following commands will allow the root user to switch to another user account without having to enter that user account's password?

su

Which of the following commands allows a standard user to execute a single command as root without actually switching to the root account?

sudo

Which of the following two commands can be used to add custom log file entries to the journald database? (Choose two.)

systemd-cat logger

Which of the following options for the tar command will create an archive that is also gzipped while displaying all of the work in progress to the terminal screen?

tar -czvf

Which of the following commands can be used to trace an IPv6 route? (Choose two.)

tracepath6 traceroute6

Which of the following commands can be used for the command line version of a popular GUI-based program that is used to examine network traffic passing to and from a network interface?

tshark

Which of the following commands can be used to set the number of days until user account jsmith with an expired password is disabled?

usermod -f 15 jsmith

Which of the following commands will allow an administrator to edit the list of permissions assigned to a user wanting to run the sudo command?

visudo

Which of the following utilities will allow you to view information about virtual memory usage on a Linux system?

vmstat

Which of the following is a special group that provides its members with the ability to run the su and sudo commands?

wheel

What command can be used to display the contents of a file that was compressed with the compress utility?

zcat

What FTP command runs a shell on the local computer?

!

Which of the following entries could be added to the rsyslog.conf configuration file to have all syslog messages displayed to console 10?

*.* /dev/tty10

Which of the following options for the gpg command will attempt to use the gpg agent and if it cannot will ask for a passphrase?

--use-agent

What option can be added to the dpkg command to remove a specified package from the system, including any configuration files used by the package?

-P

Which of the following is the full path and file name where the Debian Package Manager repositories can be configured?

/etc/apt/sources.list

Which of the following files contains the encrypted passwords for users on a modern Linux system by default?

/etc/shadow

Which of the following commands will list missing libraries as not found if a necessary library is not installed?

ldd

Which of the following commands can be used to set the default printer for all users on a Linux system where printer1 is the name of the printer?

lpoptions -d printer

Which of the following commands can be used to display any email messages awaiting delivery alongside the reason that they were not delivered?

mailq

After compiling source code, which command still needs to be run in order to copy the newly compiled binaries into a directory listed in the PATH variable as well as copy supporting files (such as man pages) to the correct location on the filesystem?

make install

Which of the following utilities can be used by a system administrator to determine which services are responding to network requests?

nmap

The SUSE and openSUSE Linux distributions use an alternative to yum but that provides the same functionality. What is the name of the command they use?

zypper