Linux-v6-Dom2-Practice

Which of the following protocols ensures that messages being transmitted on the internet are private and tamper-proof, uses TCP, and allows for quick auto-configuration of hosts that are attempting to connect?

• DTLS

• SSL

• TLS

• IPsec

Which of the following impacts all the files in a folder?

• File permissions

• All folder permissions

• Default ACLs

• Folder group permissions

Which of the following utilities would you typically use to lock a user account?

• passwd

• gpasswd

• useradd

• userdel

• usermod

As an IT administrator, which of the following are the MOST likely reasons you would want to prevent users from logging in to a Linux system?

• While reading log files

• While running a Bash script

• While responding to a security event

• While updating kernel software

• While troubleshooting problems

What is the full path to the directory that contains log files, including secure, messages, [application], and kern.log?

• /var/log

• /usr/bin

• /etc/logs

• /home/logs

You would like to use SSH port tunneling to work on a remote system. You also need to ensure that all data that you send to the remote system is encrypted. Which SSH configuration option, in the /etc/ssh/sshd_config file, needs to be set to yes?

• AllowSSHTunneling

• AllowTCPTunneling

• AllowSSHForwarding

• AllowTCPForwarding

You are managing a Linux server with a console (without a GUI installed). Which of the following key combinations would you press to switch to the fourth shell session?

• Ctrl+F4

• Ctrl+4

• Ctrl+Alt+F4

• Ctrl+Shift+4

You have just installed a new program that all users will use on the computer. After installation, you log in as a regular user and try to run the program. The program stops and displays the following error:

Error: not running as root.

What should you do so that all users can run this program?

• Make all users members of the root group.

• Set the SUID on the program.

• Add users to the sudoers file. Tell them to run the program using the sudo command.

• Have users run the program using the su -c command.

If an attacker boots into single-user mode, they will be logged in automatically as the root user without being required to enter the root password. Which of the following is the BEST measure you should take to prevent this event from happening?

• Change the file and directory permission of /boot to only allow root access.

• Encrypt the root user's password with md5crypt.

• Set a bootloader password.

• Encrypt the /boot partition.

For Linux systems where physical access could be compromised, which of the following best practices should be implemented to prevent a user from booting into single-user mode with root access?

• Disable Ctrl+Alt+Delete.

• Separate sensitive data from the operating system.

• Set a UEFI/BIOS password.

• Set a bootloader password.