Question 1

Which of the following resources of a shell and its child processes can be controlled by the Bash build-in command ulimit?

Accepted Answer

The `ulimit` command in Bash can control the maximum size of written files (A), the maximum number of open file descriptors (B), and the maximum number of user processes (E). It does not control the maximum number of newly created files (C) or environment variables (D).

Question 2

Which of the following commands defines an audit rule that monitors read and write operations to the file/ etc/firewall/rules and associates the rule with the name firewall?

Accepted Answer

The command `auditctl -w /etc/firewall/rules -p rw -k firewall` sets up an audit rule to watch the specified file for read and write operations and associates it with the key "firewall".

Question 3

Which of the following expressions are valid AIDE rules?

Accepted Answer

A) !/var/run/.* is a valid AIDE rule because it matches all files in /var/run/ that do not end with a period.E) /etc p+i+u+g is a valid AIDE rule because it matches all files in /etc that have permissions set for the owner, group, and other users.

Question 4

Which of the following authentication methods was added to NFS in version 4?

Accepted Answer

NFS version 4 introduced support for Kerberos authentication to provide stronger security and integrity for network file systems.

Question 5

Which of the following access control models is established by using SELinux?

Accepted Answer

SELinux (Security-Enhanced Linux) implements Mandatory Access Control (MAC), which restricts the ability of users and processes to access resources based on security policies.

Question 6

Which of the following components are part of FreeIPA?

Accepted Answer

FreeIPA includes a Kerberos KDC, a Public Key Infrastructure, and a Directory Server.

Question 7

SIMULATION Which command installs and configures a new FreeIPA server, including all sub-components, and creates a new FreeIPA domain? (Specially ONLY the command without any path or parameters).

Accepted Answer

The answer of SIMULATION Which command installs and configures a...

Question 8

Which of the following database names can be used within a Name Service Switch (NSS) configuration file? .

Accepted Answer

The answer of Which of the following database names can...

Question 9

Which of the following commands disables the automatic password expiry for the user usera?

Accepted Answer

The command `chage --maxdays -1 usera` disables the automatic password expiry for the user by setting the maximum number of days between password changes to -1, which means no expiration.

Question 10

Which of the following types can be specified within the Linux Audit system?

Accepted Answer

The answer of Which of the following types can be...

Question 11

Which command revokes ACL-based write access for groups and named users on the file afile?

Accepted Answer

The answer of Which command revokes ACL-based write access for...

Question 12

Which of the following prefixes could be present in the output of getcifsacl?

Accepted Answer

The answer of Which of the following prefixes could be...

Question 13

SIMULATION What option of mount.cifs specifies the user that appears as the local owner of the files of a mounted CIFS share when the server does not provide ownership information? (Specify ONLY the option name without any values or parameters.)

Accepted Answer

The answer of SIMULATION What option of mount.cifs specifies the...

Question 14

Which of the following are differences between AppArmor and SELinux? .

Accepted Answer

AppArmor is generally considered less complex and easier to configure than SELinux. SELinux uses extended file attributes to store security contexts, while AppArmor does not maintain file-specific information in the same way.

Question 15

Which of the following sections are allowed within the Kerberos configuration file krb5.conf?

Accepted Answer

The Kerberos configuration file krb5.conf typically includes sections like [plugins], [capaths], and [realms]. The [crypto] and [domain] sections are not standard sections in krb5.conf.

Question 16

SIMULATION Which PAM module checks new passwords against dictionary words and enforces complexity? (Specially the module name only without any path .)

Accepted Answer

The answer of SIMULATION Which PAM module checks new passwords...

Question 17

SIMULATION Which command is used to run a new shell for a user changing the SELinux context? (Specify ONLY the command without any path or parameters.)

Accepted Answer

The answer of SIMULATION Which command is used to run...

Question 18

How are SELinux permissions related to standard Linux permissions?

Accepted Answer

The answer of How are SELinux permissions related to standard...

Question 19

What happens when the command getfattr afile is run while the file afile has no extended attributes set?

Accepted Answer

getfattr exits with a value of 0 if no extended attributes are set on the file.

Question 20

Linux Extended File Attributes are organized in namespaces. Which of the following names correspond to existing attribute namespaces?

Accepted Answer

The answer of Linux Extended File Attributes are organized in...

Exam 10: Security