NEW
Font size
WorksheetsLinux - Unit 8 Review
Total questions: 72
Worksheet time: 36mins
What is the primary purpose of a public key in PKI?
Decrypting data
Creating digital signatures
Encrypting data
Randomizing wildcards
Which component of a cryptographic key pair is used for decrypting data?
Public key
Private key
Self-signed certificate
Digital signature
What is a self-signed certificate?
A certificate signed by a Certificate Authority (CA).
A certificate used for encryption purposes only
A certificate signed by the entity that creates it
A certificate suitable for public-facing websites
What cryptographic technique is used to verify the authenticity and integrity of digital messages or documents?
Encryption
Hashing
Decryption
Digital signature
What is the purpose of a wildcard certificate in SSL/TLS?
Encrypting data at rest
Securing a domain and its subdomains with a single certificate
Creating digital signatures
Verifying the identity of certificate requesters
What is hashing in the context of PKI?
A two-way process to convert data into a fixed-size string
A process of encrypting data with a private key
A one-way process to convert data into a fixed-size string
A process of decrypting data with a public key
What do Certificate Authorities (CAs) verify in the PKI ecosystem?
Authenticity of digital messages
Integrity of digital documents
Identity of certificate requesters
Encryption of data at rest
In the PKI system, what role do public and private keys play?
Establishing secure communications
Issuing digital certificates
Verifying digital signatures
Authenticating users in VPNs
What do SSL/TLS certificates primarily secure in data transmission over networks?
Authenticity of digital messages
Integrity of digital documents
Confidentiality, integrity, and authenticity of data
Encryption of data at rest
What is the purpose of certificate-based authentication in secure connections like SSH, VPNs, and web services?
Encrypting data at rest
Creating digital signatures
Verifying the identity of users, devices, or services
Hashing data for integrity
What is the primary purpose of tokens in authentication?
Managing directory information
Providing centralized authentication
Adding an additional layer of security by requiring something the user possesses
Customizing authentication processes
How does multi-factor authentication (MFA) enhance security?
By requiring only a password
By requiring users to provide multiple forms of identification
By using smart cards for authentication
By centralizing user authentication
Which authentication method is commonly used for two-factor authentication (2FA) or multi-factor authentication (MFA)?
Pluggable Authentication Modules (PAM)
Tokens
System Security Services Daemon (SSSD)
Lightweight Directory Access Protocol (LDAP)
What is the primary purpose of pluggable authentication modules (PAM)?
Managing directory information
Providing centralized authentication
Configuring authentication policies and customizing the authentication process
Streamlining user access to multiple applications
What does the System Security Services Daemon (SSSD) provide for Linux and Unix-like systems?
Centralized authentication, identity, and access management services
Lightweight Directory Access Protocol (LDAP) services
Single sign-on (SSO) authentication
Multifactor authentication (MFA)
In Unix-like operating systems, what is the primary purpose of the System Security Services Daemon (SSSD)?
Providing centralized authentication
Managing directory information
Configuring authentication policies
Enhancing security and making it easier to integrate with enterprise authentication systems
What is LDAP commonly used for in organizations?
Managing directory information
Providing centralized authentication
Adding an additional layer of security with tokens
Configuring authentication policies
What role does LDAP not play in authentication?
Centralizing user authentication
Storing user account information
Reading your email
Providing directory services
What is the primary purpose of Single Sign-On (SSO) authentication?
Requiring users to provide multiple forms of identification
Centralizing user authentication
Customizing authentication processes
Streamlining user access to multiple applications without re-entering credentials
What is the primary benefit of Single Sign-On (SSO) in user authentication?
Adding an additional layer of security with tokens
Centralizing user authentication
Streamlining user access to multiple applications without re-entering credentials
Providing multifactor authentication (MFA)
Which open-source tool can expose vulnerabilities and suggest corrective actions without the need for additional installations?
firewalld
Lynis
UEFI
PAM
What is the primary purpose of Secure Boot in UEFI firmware?
Improving boot times
Preventing unauthorized access attempts
Loading only immutable and signed software
Enforcing password strength
What type of firmware interface is used in modern computers to replace the traditional BIOS?
firewalld
UEFI
PAM
Lynis
What is the primary purpose of system logs in Linux?
Enforcing password strength
Performing basic checks
Monitoring and detecting security issues
Setting default umask
Which command is used to change the default file permission of newly created files?
systemctl
umask
sudo
firewalld
What characteristic can make services insecure?
Running as root
Providing encryption
Strong authentication
Use of secure protocols
How can password policy be enforced on most Linux systems?
Using UEFI
Editing system logs
Configuring host firewall
Utilizing PAM
Which command identifies and removes unused dependencies in Debian-based Linux distributions?
sudo apt-get clean
sudo apt-get update
sudo apt-get autoremove
sudo apt-get install
How can unnecessary root access be restricted in Linux systems?
Configuring host firewall
Setting default umask
Removing unused packages
Securing service accounts
What prevents unauthorized access to a single computer system by restricting access to and from services, ports, and networks?
Enabling a host firewall
Running security scanning
Tuning kernel parameters
Conducting a secure boot
In Linux access control, what is the purpose of the "Other" category?
It refers to the system administrator
It contains permissions for any user that is not the owner or in the assigned user group
It defines access for the root user
It represents a special category for system processes
What command is used to view the assigned rights of files and directories in Linux?
showpermissions
accesscontrol
ls -l
chmod
What does the Set User ID (SUID) permission in Linux allow?
The file or program to be run with the file’s group permissions
The prevention of file or directory deletion by anyone except the owner
The file to be run as if the owner is running it, regardless of the logged-in user
Enabling precise access control policies for system administrators
How is the Set Group ID (SGID or GUID) permission represented in octal mode?
g
s
g+s
g+s'
What does the sticky bit in Linux permissions prevent?
Reading and writing privileges for other users
Execution of the file or program
File or directory deletion by anyone except the owner
Viewing permissions using ls command
Which type of access control is enforced by SELinux?
Discretionary Access Control
Mandatory Access Control
Role-Based Access Control
Attribute-Based Access Control
What does SELinux state "Permissive" mean?
SELinux is disabled
SELinux allows actions but monitors and logs violations
SELinux enables policy rules and blocks unauthorized actions
SELinux operates with minimum security
In AppArmor, what does a profile define?
Access to files and network ports for the entire system
Access control for system processes
Access to files and network ports for a specific application
Policies for SELinux
What is the correct order of the permissions triplet in the octal format for a file in Linux?
Group, Owner, Other
Other, Group, Owner
Owner, Group, Other
Other, Owner, Group
Which command is used to change the owner of a file in Linux?
chgrp
chmod
chown
chuser
How is the value "4" represented in the octal permissions triplet?
rw-
r--
r-x
-w-
What does the command chmod 744 example.txt do?
Gives execute permission to the owner, read and write to the group, and read-only to others
Gives all permissions to the owner, read-only to the group and others
Gives read, write, and execute permissions to the owner, read-only to the group and others
Gives read and write permissions to the owner, read-only to the group and others
Which command is used to change the default permissions of a file or directory when they are initially created in Linux?
chperm
umask
setperm
defaultperm
What does the command getfacl do in Linux?
Gets the attributes of a file
Gets the access control list of a file or directory
Gets the default permissions of a file or directory
Gets the context of a file in SELinux
Which attribute in Linux prevents any modifications to the file, including renaming, altering, or deleting it?
Read-only
Immutable
No dump
Append-only
What is the purpose of the getsebool command in SELinux?
Gets the SELinux status
Gets the context of a file
Gets the access control list of a file
Gets the current setting of a SELinux policy boolean
What is the primary goal of a firewall in a computer network?
Speeding up internet connections
Filtering and controlling network traffic based on security rules
Enhancing computer performance
Expanding the size of the local network
How do firewalls categorize different parts of a network for security purposes?
By the operating system used
By assigning different IP addresses
By organizing into security zones
By monitoring internet speed
What does stateful inspection mean in the context of firewalls?
Filtering packets based solely on static criteria
Keeping track of the state of active connections
Blocking specific applications or protocols
Categorizing rules based on services
When running a web server, which port is commonly open to allow web traffic?
Port 21
Port 25
Port 80
Port 110
Which firewall technology allows for on-the-fly adjustments to settings without restarting the firewall?
iptables
nftables
firewalld
UFW
What is the successor to iptables, aiming to enhance performance and provide a more consistent syntax?
nftables
firewalld
UFW
iptables2
Which tool offers a user-friendly interface for iptables, reducing the learning curve for firewall management?
nftables
UFW (Uncomplicated Firewall)
iptables
firewalld
What type of firewall filters packets solely on static criteria without tracking connections?
Host firewall
Stateful firewall
Dynamic firewall
Stateless firewall
Where are systemd unit files typically stored?
/usr/local/systemd/
/etc/systemd/system/
/var/lib/systemd/
/opt/systemd/
What is the purpose of a *.service unit file in systemd?
Define network settings
Configure timers
Manage services
Mount filesystems
Which directive is used to specify commands to start and stop a service in a *.service unit file?
OnCalendar
ExecStart/ExecStop
Type
Where
Why are "before" and "after" directives important in systemd unit files?
They define mount points.
They specify network interfaces.
They configure timers.
They coordinate the startup sequence of services.
What does the "Type" parameter specify in a *.service unit file?
Network type
Process startup type
Filesystem type
Timer type
What does the "OnCalendar" directive in a *.timer unit file define?
Network settings
Filesystem mount points
Timer activation schedule
System boot delay
Which unit type is associated with configuring timers in systemd?
*.timer
*.mount
*.service
*.target
What does the "What" directive in a *.mount unit file specify?
Mount point
Filesystem type
Source of the mount
Mount options
Which systemd unit file type is associated with specific system states or goals?
What is the purpose of the "network-online.target" in systemd?
To ensure that the network is fully up and running before starting dependent services.
What is a common cause of name resolution failures on Linux systems?
What can lead to an application crash on a Linux system?
Cleared log files
Resource exhaustion
How can time-zone misconfigurations impact a Linux system?
What is a possible solution for resolving name resolution failures related to DNS on Linux?
Clear log files
Verify network connectivity
Change the hostname of the machine
Check disk spave
Which command can be used to set the correct time and time zone on a Linux system?
What is a common cause of journal issues on Linux systems?
Insufficient disk space
How can you address services not starting on time in Linux due to unmet dependencies?
Adjust startup priorities
What is the recommended approach for troubleshooting delayed service startups on Linux?
Analyze dependencies, and review system resource usage.
