Font size
Worksheets4) 208.1 Basic Apache Configuration
Total questions: 61
Worksheet time: 41mins
"The behavior of the Apache web-service (httpd/apache2) is setting by using various options called _______"
modules
directives
flags
sessions
VirtualHosts
Which two configuration files are used to set de Apache directives?
/etc/httpd/conf/httpd.conf
/etc/httpd.conf
/etc/apache2.conf
/etc/apache2/apache2.conf
/etc/apache2/httpd.conf
Which two statements on the configuration file reference to other small configuration file?
Include
IncludeFile
IncludeOptional
ConfigInclude
IncludeConfig
"It's a piece of software to add additional functionalities to the Apache service. Eg: mod_rewrite module to allow Apache to rewrite URLs"
modules
directives
flags
sessions
VirtualHosts
"This means that you can custom the Apache service with the modules you want"
What's the name of the feature being referred to before?
(a)
What does DSO stand for?
(a)
"It's a type of module that is compiled as shared libraries that can be loaded to the server in runtime, allowing Apache to add or remove modules without having to restart the entire service":
Dynamic Shared Object (DSO)
Dynamic Shared Modules (DSM)
Shared-modules
Dynamic Shared Libraries
Which are two ways to achieve the run-time loading of modules (DSO)?
Automatically by the system program ld.so
Automatically by any system shared library
Automatically with the systems calls dlopen() and dlsym()
Manually with the systems calls dlopen() and dlsym()
Manually by the system program ld.so
Which command installs the Apache HTTP Server development headers and libraries necessary for building modules with SSL/TLS support on Debian?
(a)
Which command installs the Apache HTTP Server development headers and libraries necessary for building modules with SSL/TLS support on Red Hat-based systems?
(a)
Type the full command to load the apache_ssl_module from the "libssl.so" library located in the modules/ directory of the Apache installation.
(a)
In which directory inside of apache2/httpd are the Apache modules installed?
modules_enabled
modules_installed
modules_available
modules_apache
loadable_modules
Type the command to list the compiled modules in Red Hat:
(a)
Type the command to list the compiled modules in Debian:
(a)
"It's a tool that simplifies the building and installation of Apache modules as DSO":
APache Mod-bulding (APMB)
APache eXtension Support Tool (APXS)
APache Module-Tool (APMT)
APache eXtension-Tool (APXT)
"This tool can be used to generate a large number of requests to a web server at regular intervals in order to measure its response time.
It has a web-based grapher that will generate charts to display the data in several formats".
APXS
DSO
Cricket
Grafana
Apache grapher tool
Which directives can you use in the Apache configuration file to limit the number of workers processes the Apache server will spawn to handle incoming requests? (Choose two correct answers)
Min*
Boundries
Max*
Limit
Size
Type the full path of the file that contains a generic overview of page requests for your Apache web server in Debian based-systems
(a)
Type the full path of the file that will store diagnostic information and records any errors for the Apache service in Debian-based systems?
(a)
Type the name of the directive that sets the error_log file in the Apache configuration file:
(a)
Which are the two methods used by Apache to control access to objects?
DAC
ACL
MAC
Blacklists
CAD
Analyze the attached image.
According to the image, what's being shown?
A typical config for the access log file.
A normal output of the access log file
A format that always must be used for access log file
A known error with access log file displayed by the Apache service
What do DAC and MAC stand for in Apache?
DAC (Dynamic Access Control)
MAC (Masked Access Control)
DAC (Discretionary Access Control)
MAC (Mandatory Access Control)
MAC (Media Access Control)
"It's a security mechanism that allows the resource owner or administrator to control the access rights of users or processes"
Direct Access Control (DAC)
Mandatory Access Control (MAC)
Discretionary Access Control (DAC)
Module Access Control (MAC)
Media Access Control (MAC)
"It's a security mechanism that ensure that all resources are accessed according to a set of predefined rules and policies"
Direct Access Control (DAC)
Mandatory Access Control (MAC)
Discretionary Access Control (DAC)
Module Access Control (MAC)
Media Access Control (MAC)
"It's the process in which a user should validate their identity".
Autorization
Authentication
Identification
Login
"It's the process of deciding who is allowed to do what".
Authorization
Authentication
Permissions
Login
Policies
Which naming convention do the Apache modules that serve the purpose of authentication follow?
mod_auth_authz*
mod_auth_*
mod_authn_*
mod_authn*
Which naming convention do the Apache modules that serve the purpose of authorization follow?
mod_auth_authz*
mod_authz_*
mod_authzn_*
mod_authz*
Choose all the modules that are included as part of the standard Apache distribution:
mod_auth_file
mod_log
mod_access
mod_login
mod_error
Choose all the modules that are included as part of the standard Apache distribution:
mod_auth_anon
mod_log
mod_auth_digest
mod_login
mod_error
"It uses ordinary text files for the authentication database. It's maintained by the htpasswd command".
Which module is included as part of the Apache distribution refer to the above statement.
mod_auth_file
mod_log
mod_access
mod_login
mod_error
"It applies what Apache defines as mandatory".
Which module is included as part of the Apache distribution refer to the above statement.
mod_auth_file
mod_log
mod_access
mod_login
mod_error
"This module mimics the behavior of anonymous FTP".
Which module is included as part of the Apache distribution refer to the above statement.
mod_auth_anon
mod_log
mod_digest
mod_login
mod_error
"This module provides user authentication using a challenge/response mechanism based on the MD5 cipher method".
Which module is included as part of the Apache distribution refer to the above statement.
mod_auth_anon
mod_log
mod_auth_digest
mod_login
mod_error
"It's a command line utility for creating and managing authentication files for web servers".
APXS
apache2ctl
DAC
htpasswd
apache-passwd
Which algorithm method does htpasswd use?
AES
DES
CRYPT
3DES
RSA
Type the full command to create a password for the user bob in the path /home/bob/
The password file should be called "passwdfile". Use htpasswd and the bcrypt algorithm method.
(a)
Let's suppose you've previously created password file named "passwdfile" on the path /home/bob/ for Bob user.
Now, you want to add an extra password to that same file but for the user alice.
How can you update this file with the password for alice? (Remember to use bcrypt algorithm)
(a)
Where is recommended to place the htpasswd file?
Outside the document root (/var/www/)
Inside the document root (/var/www/html/)
Outside the document root (/var/www/html/)
Inside the config file (/etc/apache2/)
"To use the generated password file, Apache has to be aware of the password file on the Apache configuration file."
Which directives you should add to the Apache configuration file to achieve this goal?
AuthType_Basic
Require valid-user
Auth_method_Basic
AuthUserFile /path/to/file
htpasswd /path/to/file
"Apache security modules are configured by configuring directives."
From where are these directives read? (Choose two correct answers).
From centralized files (under /etc/)
From decentralized .htaccess files
From /etc/apache2/ only
From decentralized .htpasswd files
From decentralized .htaccess and .htpasswd files
On the Apache configuration file, which two directives are read by htaccess to know the location of their databases?
AuthUser
AuthzUser
AuthUserFile
AuthDBMGroupFile
AuthDBFile
When using centralized configuration files to configure Apache modules, which two directives are placed on the Apache configuration file?
AuthType
AuthzUserFile
Require valid-user
AuthDBMGroupFIle
Apache can use group files to authorize access to a group of users. They are called _________
Apache group files
AuthGroupFile
.htgroup
.htgroupaccess
UserGroup
To allow the use of group files you should include some directives in the Apache config file. Choose three directives you could use:
AuthUserFile
AuthDBMGroupFile
AuthDBMGroup
AuthGroupFile
Require Group
This is an Apache directive used for group files that specifies the location of the file containing usernames and encrypted passwords.
AuthUserFile
AuthDBMGroupFile
AuthDBMGroup
AuthGroupFile
Require Group Management
This is an Apache directive used for group files that specifies the location group file that contains groups and their respective users.
AuthUserFile
AuthDBMGroupFile
AuthDBMGroup
AuthGroupFile
Require Group Management
This is an Apache directive used for group files that specifies the groups that are required to access the protected directory.
AuthUserFile
AuthDBMGroupFile
AuthDBMGroup
AuthGroupFile
Require Group
"It's another module for Apache that boots the performance and scalability of Perl-based applications by reducing spawning of child process and hence memory footprint".
perl_mod
apache_perl
mod_perl
perl_apache
This is an Apache server option that indicates the maximum number of requests to allow in a persistent connection. 0 is used for unlimited amount.
MaxKeepAliveRequests
StartServers
MaxSpareServers
MaxClients
This is an Apache server option that indicates the number of child server processes to start initially.
MaxKeepAliveRequests
StartServers
MaxSpareServers
MaxClients
These are Apache server options that adjust the number of processes based on demand. If the number of servers fall below the minimum, a new server is created, but if it exceeds the maximum, extra servers are terminated.
MaxKeepAliveRequests
StartServers
MaxSpareServers
MaxClients
MinSpareServers
This is an Apache server option that limits the number of clients that can simultaneously connect. Additional connection will be queued.
MaxKeepAliveRequests
StartServers
MaxSpareServers
MaxClients
"It's a capability to host more than one domain on one physical host":
Multi-domain
Apache Multi-domain
Apache2
Virtual Hosting
Apache Multi-host
Which are the two ways to implement Apache Virtual Hosting?
Name-based virtual hosting
Multi-domain virtual hosting
Multi-host virtual hosting
IP-based virtual hosting
IP-based multi-hosting
It's when for example you have a web server with the IP address and you want to host two websites (example.org and example.com). If you want to use the same IP address for several domains, which Apache Virtual Hosting should you use?
Name-based virtual hosting
Multi-domain virtual hosting
Multi-host virtual hosting
IP-based virtual hosting
IP-based multi-hosting
"The server must have a different IP address to each Virtual Host. It is, each domain is running under different IP addresses".
Which Apache Virtual Hosting method the above statement refer to?
Name-based virtual hosting
Multi-domain virtual hosting
Multi-host virtual hosting
IP-based virtual hosting
IP-based multi-hosting
Which are the two ways of running the Apache HTTP server to support multiple hosts?
Use Named-based virtual hosting
Use separate daemon for each hostname
Use IP-based Virtual Hosting
Use a single daemon that supports all the Virtual Hosts
Choose two scenarios where is required to use multiple daemons when running Apache HTTP server with multiple hosts:
When there are security issues and want to separate the web-pages
When sharing the Apache config between Virtual Hosts is acceptable
When the server serves a large number of requests, and performance loss in separate daemon.
You can afford the memory and file descriptor requirements of listening every IP on the machine.
Choose two scenarios where is required to use a single daemon when running Apache HTTP server with multiple hosts:
When there are security issues and want to separate the web-pages
When sharing the Apache config between Virtual Hosts is acceptable
When the server serves a large number of requests, and performance loss in separate daemon.
You can afford the memory and file descriptor requirements of listening every IP on the machine.
