CSCI 3602
You can use specific iptables rules to prevent denial of service (DoS) attacks.
True
Which file permission is NOT an example of discretionary access control?
Boolean
You want to set up maximum protection with TCP Wrappers. What rule do you include in the /etc/hosts.deny file to deny access to all daemons from all clients?
ALL : ALL
You want to allow members of the users group to use fdisk on the /dev/sda drive (and only that drive) and to use the yum command to update and install packages. Which command do you run?
%users ALL=/sbin /fdisk /dev/sda, /usr/bin/yum
From which of the following files does the iptables command read ports of well-known services?
/etc/services
Keeping secrets is the essence of which tenet of the C-I-A triad?
Confidentiality
Which of the following is NOT an AppArmor mode?
Confirm
In Linux, a volume is a way to segment a drive and a partition is a single entity that can be formatted with a filesystem.
False
In the filesystem hierarchy standard (FHS), the top-level root directory (indicated by the forward slash [/], is never mounted separately.
False
In the shadow password suite, the /etc/passwd file may store a hashed password for a group.
False
Pluggable authentication modules (PAM) solves administrative permission problems by providing higher-level functions without having the whole program gain administrative access.
False
The identifiers ext4, FAT32, and NTFS are types of kernels.
False
Which of the following is the development distribution for Red Hat?
Fedora
What is the best definition of a firewall?
Hardware or software capable of blocking networking communications based on established criteria, or rules.
You want to find out which ports are associated with certain TCP/IP services. Which organization specifies default port numbers and protocols for thousands of services?
Internet Assigned Numbers Authority (IANA)
Who developed and released the first Linux operating system?
Linus Torvalds
What might a large increase in the size of an authorization log file indicate?
More frequently run user-based cron jobs or a large number of external login attempts.
Which of the following is the best choice for network authentication?
Network Information Service (NIS)
Which of the following is usually about preventing a party involved in a transaction from denying that the transaction occurred?
Nonrepudiation
What is the CUPS service associated with?
Printing
What does Red Hat Enterprise Linux use to install software packages?
Red Hat Package Manager (RPM) and Yellowdog Update, Modified (yum)
Which of the following enables a Linux system to be used as a Windows domain controller to authenticate Windows users?
Samba
Cron is a service for running administrative jobs on a regular basis.
True
Debian and its derivatives use firewalld rather than iptables for firewall creation and management.
True
In Linux, three major services that network files and folders are the Network File System (NFS), Samba, and the File Transfer Protocol (FTP).
True
In the shadow password suite, the /etc/group file contains basic information for each group account.
True
The cron and at services enable you to schedule task in Linux.
True
The iptables -A Firewall -INPUT -p 50 -j ACCEPT directive accepts input from port 50.
True
A discretionary access control for a file is a control mechanism that is set by ________.
the user owner of the file.
The Linux open source license, referred to as GNU General Public License (GPL), requires which of the following?
Any software based on GPLed software retains the same rights as the original software.
A server on a demilitarized zone (DMZ) network may serve data to users on the Internet.
True
After configuring quotas on a Linux system, you can use the edquota command to edit the quota of a specific user.
True
Alternate attack vectors include connections through telephone modems and serial ports.
True
Red Hat uses the Linux unified key setup (LUKS) disk-encryption specification.
True
Which Linux filesystem format does not include any type of journaling?
ext2
You used a protocol analyzer to capture some network traffic. You want to focus on FTP traffic. Which port number do you include in the filter.
21
What is Apache?
A Web server
The following are true of system hardening EXCEPT:
A hardened system usually has more packages to update than an unhardened system.
What can a black-hat hacker use to decipher hashed passwords?
A rainbow table
What is Snort?
An Intrusion detection service
Which of the following files is Not a part of the shadow password suite?
/etc/sudoers
The GRUB configuration file is generally located in the ______ directory.
/root/
With which directory is the sticky bit most commonly associated?
/tmp
The well-known TCP/IP port numbers range from 0 to _______.
1023
Which of the following represents a type of mandatory access control?
The FTP service is allowed to interact with directories other than users' home directories.
Which of the following is associated with wireless intrusion detection system (WIDS)
Wi-Fi Protected Access (WPA)
The /usr/ directory contains programs that are generally accessible to all users. This directory can be secured by mounting it _________.
as read-only
What is the primary AppArmor configuration file?
logprof.conf
The _______________ part of the kernel contains drivers and options essential to the kernel boot process.
monolithic
Linux implements _______________ to determine how a user is to be authenticated and whether there are password policies associated with password databases.
pluggable authentication modules (PAM)
Which command starts the SELinux Troubleshooter?
sealert -b
Regarding SELinux, which of the following files includes lists of critical files and services to be watched for changes?
sestatus.conf
The iptables -j DROP and -j REJECT command options both drop packets.
True
The most common standard for file encryption on Linux is based on GNU Privacy Guard (GPG).
True
The set user ID (SUID) bit is a special permission that allows others to execute a given file with the rights of the user owner of the file.
True
When configuring obscure ports for a service, configuring different ports for clients and servers is not enough. You also need to configure an open port in the firewall.
True
Wireless encryption algorithms such as WPA and WPA2 may be cracked if they use weak pre-shared keys based on dictionary words.
True
A black-hat can use Van Eck phreaking to exploit which of the following?
Electromagnetic output from CRT and LCD monitors
A Linux distribution typically does NOT include which of the following?
Virtual platform
Apache is a popular type of _____________.
Web server package
