35. Automation and Scripting in Security

What is the primary purpose of automation in security?

• To increase the complexity of security systems

• To replace all manual tasks with robots

• To automate repetitive and manual security tasks

• To eliminate the need for human intervention in security

What is the function of IP tables in Linux?

• To encrypt data

• To block or allow network traffic

• To manage user accounts

• To monitor system performance

Which command is used to manually block an IP address using IP tables?

• iptables -A INPUT -s [IP] -j DROP

• iptables -A OUTPUT -s [IP] -j ACCEPT

• iptables -A FORWARD -s [IP] -j REJECT

• iptables -A INPUT -s [IP] -j ACCEPT

What does the command 'chmod +x' do to a script?

• Copies the script

• Renames the script

• Makes the script executable

• Deletes the script

How can you schedule a script to run daily at 1:00 a.m. using Cron jobs?

• By adding the script to the startup folder

• By using the 'at' command

• By adding an entry to the crontab file

• By running the script manually every day

What issue must be addressed when automatically adding IP block rules from a threat feed?

• Duplicate rules

• Outdated firewall software

• Incorrect IP addresses

• Insufficient memory

What is the purpose of the 'remove_malware.sh' script?

• To remove files with malicious hashes

• To backup important files

• To update the system

• To install new software

Which command is used to view the contents of a script without displaying everything on the screen?

• cat

• less

• more

• grep

What does the 'sha256sum' command do in the context of the malware removal script?

• Encrypts files

• Generates a hash to validate file integrity

• Deletes files

• Compresses files

Why is it important to specify a directory like 'user/share' in the malware removal script?

• To speed up the scanning process

• To scan the entire system

• To avoid scanning any files

• To create new directories