Linux+.3

What has come into existence with security becoming a part of the development, integration, and maintenance lifecycle?

• DevSecOps
• OpsSecDev
• SecDevOps
• DevOps

Answer explanation

DevSecOps refers to Development and Security Operations, which integrates security within the development, integration, and maintenance lifecycle.

An implementation engineer is looking to understand how to configure security in SELinux. What are the three different modes that define how SELinux applies in a system?

• Enforcing, Permissive, Disabled
• User, Role, Type
• Confidential, Secret, Top Secret
• Identity, Authentication, Management

Answer explanation

Enforcing, Permissive, and Disabled are the three modes that SELinux uses. In enforcing mode, SELinux is enabled and policies are enforced. In Permissive mode, SELinux is enabled, but policies are not enforced. In Disabled mode, SELinux is turned off system-wide.

Users report that a recently published application installer is blocked by their operating system. What can the developer add to the installation package to ensure it installs correctly?

• Digital signature
• Keys
• Certificate
• Decryption

Answer explanation

A digital signature is a unique hash used to determine if a downloaded file is the same as the developer intended.

What entity is responsible for issuing valid certificates?

• Certificate authority
• Registrar
• Web host
• Government

Answer explanation

A certificate authority oversees issuing of certificates. They are vested with the responsibility of issuing certificates in an ethical manner.

A company recently switched from SELinux to AppArmor. What command would allow the company to place a profile in a mode that requires its enablement?

• aa-enforce
• apparmor_status
• aa-disable
• aa-unconfined

Answer explanation

AppArmor has multiple commands. Each executable can have an associated AppArmor profile. The command aa-enforce is used in AppArmor to place a profile in enforce mode. The basic syntax is aa-enforce {path to profile}.

A security-focused web application company implemented and enforced the use of a secondary, one-time token in addition to a username and password to access their website. What security concept does this refer to?

• Multifactor authentication
• Single sign-on
• Password sharing
• Single factor authentication

Answer explanation

Multifactor authentication is a second form of password separate from a user's main username and password. It typically is a rotating six-digit password that refreshes every 30-seconds.

Which context-based permissions scheme was developed by the National Security Agency?

• SELinux
• RSA
• AppArmor
• RHEL

Answer explanation

The U.S. National Security Agency (NSA) developed security-Enhanced Linux (SELinux), the default context-based permissions scheme provided with CentOS and Red Hat Enterprise Linux, and is available on other distributions.

A systems administrator is trying to explain to the development manager why security is important. One concept mentioned was the CIA Triad. What makes up the CIA Triad?

• Confidentiality, Integrity, Availability
• Central Intelligence Agency
• Compartmentalization, Integrity, Access
• Confidentiality, Integrity, Access

Answer explanation

The definition of the CIA Triad is Confidentiality, Integrity, and Availability. It is an important concept to understand.

A developer wants to ensure users are installing the correct program. What could the developer place on their website for users to cross-reference to ensure users are installing the correct application?

• Digital signature
• Government entities
• Certificate authority
• Registrar

Answer explanation

A digital signature is a unique hash used to determine if a downloaded file is the same as the developer intended.

A small company is looking to get in compliance to obtain insurance. The insurance company recommended that the company implement a centralized access system. What system would help centralize usernames and passwords?

• LDAP
• SSO
• CIA
• MFA

Answer explanation

Lightweight Directory Access Protocol (LDAP) is a directory service protocol that runs over Transmission Control Protocol/Internet Protocol (TCP/IP) networks.