Question 1

What is the purpose of IP sets?

Accepted Answer

A)  They group together IP addresses that are assigned to the same network interfaces. 
B)  They group together IP addresses and networks that can be referenced by the network routing table. 
C)  They group together IP addresses that can be referenced by netfilter rules. 
D)  They group together IP and MAC addresses used by the neighbors on the local network. 
E)  They group together IP addresses and user names that can be referenced from /etc/hosts.allow and /etc/hosts.deny 
A)  They group together IP addresses that are assigned to the same network interfaces. 
B)  They group together IP addresses and networks that can be referenced by the network routing table. 
C)  They group together IP addresses that can be referenced by netfilter rules. 
D)  They group together IP and MAC addresses used by the neighbors on the local network. 
E)  They group together IP addresses and user names that can be referenced from /etc/hosts.allow and /etc/hosts.deny C

Question 2

Which of the following lines in an OpenSSL configuration adds an X 509v3 Subject Alternative Name extension for the host names example.org and www.example.org to a certificate?

Accepted Answer

A)  subjectAltName = DNS: www.example.org, DNS:example.org 
B)  extension= SAN: www.example.org, SAN:example.org 
C)  subjectAltName: www.example.org, subjectAltName: example.org 
D)  commonName = subjectAltName= www.example.org,     subjectAltName = example.org 
E)  subject= CN= www.example.org, CN=example.org 
A)  subjectAltName = DNS: www.example.org, DNS:example.org 
B)  extension= SAN: www.example.org, SAN:example.org 
C)  subjectAltName: www.example.org, subjectAltName: example.org 
D)  commonName = subjectAltName= www.example.org,     subjectAltName = example.org 
E)  subject= CN= www.example.org, CN=example.org A

Question 3

Which of the following authentication methods was added to NFS in version 4?

Accepted Answer

A)  Kerberos authentication 
B)  SSH hostkey authentication 
C)  Winbind authentication 
D)  SSL certificate authentication 
A)  Kerberos authentication 
B)  SSH hostkey authentication 
C)  Winbind authentication 
D)  SSL certificate authentication A

Question 4

Which of the following commands adds users using SSSD's local service?

Accepted Answer

A)  sss_adduser 
B)  sss_useradd 
C)  sss_add 
D)  sss-addlocaluser 
E)  sss_local_adduser 
A)  sss_adduser 
B)  sss_useradd 
C)  sss_add 
D)  sss-addlocaluser 
E)  sss_local_adduser

Question 5

Which of the following prefixes could be present in the output of getcifsacl?

Accepted Answer

A)  ACL 
B)  GRANT 
C)  GROUP 
D)  OWNER 
E)  SID 
A)  ACL 
B)  GRANT 
C)  GROUP 
D)  OWNER 
E)  SID

Question 6

Which of the following commands changes the source IP address to 192.0.2.11 for all IPv4 packets which go through the network interface eth0?

Accepted Answer

A)  iptables ~t nat ~A POSTROUTING ~o eth0 ~j SNAT --to~source 192.0.2.11 
B)  iptables ~t nat ~A PREROUTING ~i eth0 ~j SNAT --to~source 192.0.2.11 
C)  iptables ~t nat ~A POSTROUTING ~i eth0 ~j DNAT --to~source 192.0.2.11 
D)  iptables ~t mangle ~A POSTROUTING ~i eth0 ~j SNAT -to~source 192.0.2.11 
E)  iptables ~t mangle ~A POSTROUTING ~0 eth0 ~j SNAT -to~source 192.0.2.11 
A)  iptables ~t nat ~A POSTROUTING ~o eth0 ~j SNAT --to~source 192.0.2.11 
B)  iptables ~t nat ~A PREROUTING ~i eth0 ~j SNAT --to~source 192.0.2.11 
C)  iptables ~t nat ~A POSTROUTING ~i eth0 ~j DNAT --to~source 192.0.2.11 
D)  iptables ~t mangle ~A POSTROUTING ~i eth0 ~j SNAT -to~source 192.0.2.11 
E)  iptables ~t mangle ~A POSTROUTING ~0 eth0 ~j SNAT -to~source 192.0.2.11

Question 7

How are SELinux permissions related to standard Linux permissions?

Accepted Answer

A)  SELinux permissions override standard Linux permissions. 
B)  Standard Linux permissions override SELinux permissions. 
C)  SELinux permissions are verified before standard Linux permissions. 
D)  SELinux permissions are verified after standard Linux permissions. 
A)  SELinux permissions override standard Linux permissions. 
B)  Standard Linux permissions override SELinux permissions. 
C)  SELinux permissions are verified before standard Linux permissions. 
D)  SELinux permissions are verified after standard Linux permissions.

Question 8

Linux Extended File Attributes are organized in namespaces. Which of the following names correspond to existing attribute namespaces?

Accepted Answer

A)  default 
B)  system 
C)  owner 
D)  trusted 
E)  user 
A)  default 
B)  system 
C)  owner 
D)  trusted 
E)  user

Question 9

Which of the following DNS record types can the command dnssec-signzone add to a zone?

Accepted Answer

A)  ASIG 
B)  NSEC 
C)  NSEC3 
D)  NSSIG 
E)  RRSIG 
A)  ASIG 
B)  NSEC 
C)  NSEC3 
D)  NSSIG 
E)  RRSIG

Question 10

Which of the following statements describes the purpose of ndpmon?

Accepted Answer

A)  It monitors the network for neighbor discovery messages from new IPv6 hosts and routers. 
B)  It monitors remote hosts by periodically sending echo requests to them. 
C)  It monitors the availability of a network link by querying network interfaces. 
D)  It monitors the network for IPv4 nodes that have not yet migrated to IPv6. 
E)  It monitors log files for failed login attempts in order to block traffic from offending network nodes. 
A)  It monitors the network for neighbor discovery messages from new IPv6 hosts and routers. 
B)  It monitors remote hosts by periodically sending echo requests to them. 
C)  It monitors the availability of a network link by querying network interfaces. 
D)  It monitors the network for IPv4 nodes that have not yet migrated to IPv6. 
E)  It monitors log files for failed login attempts in order to block traffic from offending network nodes.

Question 11

Which of the following are differences between AppArmor and SELinux? .

Accepted Answer

A)  AppArmor is implemented in user space only. SELinux is a Linux Kernel Module. 
B)  AppArmor is less complex and easier to configure than SELinux. 
C)  AppArmor neither requires nor allows any specific configuration. SELinux must always be manually configured. 
D)  SELinux stores information in extended file attributes. AppArmor does not maintain file specific information and states. 
E)  The SELinux configuration is loaded at boot time and cannot be changed later on. AppArmor provides user space tools to change its behavior. 
A)  AppArmor is implemented in user space only. SELinux is a Linux Kernel Module. 
B)  AppArmor is less complex and easier to configure than SELinux. 
C)  AppArmor neither requires nor allows any specific configuration. SELinux must always be manually configured. 
D)  SELinux stores information in extended file attributes. AppArmor does not maintain file specific information and states. 
E)  The SELinux configuration is loaded at boot time and cannot be changed later on. AppArmor provides user space tools to change its behavior.

Question 12

Which of the following statements is true regarding eCryptfs?

Accepted Answer

A)  For every file in an eCryptfs directory there exists a corresponding file that contains the encrypted content. 
B)  The content of all files in an eCryptfs directory is stored in an archive file similar to a tar file with an additional index to improve performance. 
C)  After unmounting an eCryptfs directory, the directory hierarchy and the original file names are still visible, although, it is not possible to view the contents of the files. 
D)  When a user changes his login password, the contents of his eCryptfs home directory has to be re-encrypted using his new login password. 
E)  eCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux user. 
A)  For every file in an eCryptfs directory there exists a corresponding file that contains the encrypted content. 
B)  The content of all files in an eCryptfs directory is stored in an archive file similar to a tar file with an additional index to improve performance. 
C)  After unmounting an eCryptfs directory, the directory hierarchy and the original file names are still visible, although, it is not possible to view the contents of the files. 
D)  When a user changes his login password, the contents of his eCryptfs home directory has to be re-encrypted using his new login password. 
E)  eCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux user.

Question 13

A LUKS device was mapped using the command:    cryptsetup luksOpen/dev/sdal crypt-vol Given that this device has three different keys, which of the following commands deletes only the first key?

Accepted Answer

A)  cryptsetup luksDelKey /dev/sda 1 0 
B)  cryptsetup luksDelkey /dev/sda 1 1 
C)  cryptsetup luksDelKey / dev /mapper/crypt- vol 1 
D)  cryptsetup luksDelKey / dev /mapper/crypt- vol 0 
A)  cryptsetup luksDelKey /dev/sda 1 0 
B)  cryptsetup luksDelkey /dev/sda 1 1 
C)  cryptsetup luksDelKey / dev /mapper/crypt- vol 1 
D)  cryptsetup luksDelKey / dev /mapper/crypt- vol 0

Question 14

Which of the following statements are true regarding the certificate of a Root CA?

Accepted Answer

A)  It is a self-signed certificate. 
B)  It does not include the private key of the CA. 
C)  It must contain a host name as the common name. 
D)  It has an infinite lifetime and never expires. 
E)  It must contain an X509v3 Authority extension. 
A)  It is a self-signed certificate. 
B)  It does not include the private key of the CA. 
C)  It must contain a host name as the common name. 
D)  It has an infinite lifetime and never expires. 
E)  It must contain an X509v3 Authority extension.

Question 15

Which of the following access control models is established by using SELinux?

Accepted Answer

A)  Security Access Control (SA
C)  
B)  Group Access Control (GA
C)  
C)  User Access Control (UA
C)  
D)  Discretionary Access Control (DA
C)  
E)  Mandatory Access Control (MA
C)  
A)  Security Access Control (SA
C)  
B)  Group Access Control (GA
C)  
C)  User Access Control (UA
C)  
D)  Discretionary Access Control (DA
C)  
E)  Mandatory Access Control (MA
C)

Question 16

What happens when the command getfattr afile is run while the file afile has no extended attributes set?

Accepted Answer

A)  getfattr prints a warning and exits with a values of 0. 
B)  getfattr prints a warning and exits with a value of 1. 
C)  No output is produced and getfattr exits with a value of 0. 
D)  No outputs is produced and getfattr exits with a value of 1. 
A)  getfattr prints a warning and exits with a values of 0. 
B)  getfattr prints a warning and exits with a value of 1. 
C)  No output is produced and getfattr exits with a value of 0. 
D)  No outputs is produced and getfattr exits with a value of 1.

Question 17

Which of the following expressions are valid AIDE rules?

Accepted Answer

A)  !/var/run/.* 
B)  append: /var/log/* 
C)  /usr=all 
D)  #/bin/ 
E)  /etc p+i+u+g 
A)  !/var/run/.* 
B)  append: /var/log/* 
C)  /usr=all 
D)  #/bin/ 
E)  /etc p+i+u+g

Question 18

How does TSIG authenticate name servers in order to perform secured zone transfers?

Accepted Answer

A)  Both servers mutually verify their X509 certificates. 
B)  Both servers use a secret key that is shared between the servers. 
C)  Both servers verify appropriate DANE records for the labels of the NS records used to delegate the transferred zone. 
D)  Both servers use DNSSEC to mutually verify that they are authoritative for the transferred zone. 
A)  Both servers mutually verify their X509 certificates. 
B)  Both servers use a secret key that is shared between the servers. 
C)  Both servers verify appropriate DANE records for the labels of the NS records used to delegate the transferred zone. 
D)  Both servers use DNSSEC to mutually verify that they are authoritative for the transferred zone.

Question 19

Which of the following types can be specified within the Linux Audit system?

Accepted Answer

A)  Control rules 
B)  File system rules 
C)  Network connection rules 
D)  Console rules 
E)  System call rules 
A)  Control rules 
B)  File system rules 
C)  Network connection rules 
D)  Console rules 
E)  System call rules

Question 20

Which of the following statements is true about chroot environments?

Accepted Answer

A)  Symbolic links to data outside the chroot path are followed, making files and directories accessible 
B)  Hard links to files outside the chroot path are not followed, to increase security 
C)  The chroot path needs to contain all data required by the programs running in the chroot environment 
D)  Programs are not able to set a chroot path by using a function call, they have to use the command chroot 
E)  When using the command chroot, the started command is running in its own namespace and cannot communicate with other processes 
A)  Symbolic links to data outside the chroot path are followed, making files and directories accessible 
B)  Hard links to files outside the chroot path are not followed, to increase security 
C)  The chroot path needs to contain all data required by the programs running in the chroot environment 
D)  Programs are not able to set a chroot path by using a function call, they have to use the command chroot 
E)  When using the command chroot, the started command is running in its own namespace and cannot communicate with other processes

What is the purpose of IP sets?

Which of the following lines in an OpenSSL configuration adds an X 509v3 Subject Alternative Name extension for the host names example.org and www.example.org to a certificate?

Which of the following authentication methods was added to NFS in version 4?

Which of the following commands adds users using SSSD's local service?

Which of the following prefixes could be present in the output of getcifsacl?

Which of the following commands changes the source IP address to 192.0.2.11 for all IPv4 packets which go through the network interface eth0?

How are SELinux permissions related to standard Linux permissions?

Linux Extended File Attributes are organized in namespaces. Which of the following names correspond to existing attribute namespaces?

Which of the following DNS record types can the command dnssec-signzone add to a zone?

Which of the following statements describes the purpose of ndpmon?

Which of the following are differences between AppArmor and SELinux? .

Which of the following statements is true regarding eCryptfs?

A LUKS device was mapped using the command: cryptsetup luksOpen/dev/sdal crypt-vol Given that this device has three different keys, which of the following commands deletes only the first key?

Which of the following statements are true regarding the certificate of a Root CA?

Which of the following access control models is established by using SELinux?

What happens when the command getfattr afile is run while the file afile has no extended attributes set?

Which of the following expressions are valid AIDE rules?

How does TSIG authenticate name servers in order to perform secured zone transfers?

Which of the following types can be specified within the Linux Audit system?

Which of the following statements is true about chroot environments?

Entry Level Linux Essentials Certificate of Achievement

Linux Essentials Certificate Exam, version 1.6

LPI Level 1 Exam 101, Junior Level Linux Certification, Part 1 of 2

LPIC-1 Exam 101

LPI Level 1 Exam 102, Junior Level Linux Certification, Part 2 of 2

LPI Level 1

LPIC-2 Exam 201

LPIC-2 Exam 202

LPIC-3 Exam 300: Mixed Environments

LPIC-3 Virtualization & High Availability

LPIC-OT Exam 701: DevOps Tools Engineer

Filters

Exam 10: Security

What is the purpose of IP sets?

Which of the following lines in an OpenSSL configuration adds an X 509v3 Subject Alternative Name extension for the host names example.org and www.example.org to a certificate?

Which of the following authentication methods was added to NFS in version 4?

Which of the following commands adds users using SSSD's local service?

Which of the following prefixes could be present in the output of getcifsacl?

Which of the following commands changes the source IP address to 192.0.2.11 for all IPv4 packets which go through the network interface eth0?

How are SELinux permissions related to standard Linux permissions?

Linux Extended File Attributes are organized in namespaces. Which of the following names correspond to existing attribute namespaces?

Which of the following DNS record types can the command dnssec-signzone add to a zone?

Which of the following statements describes the purpose of ndpmon?

Which of the following are differences between AppArmor and SELinux? .

Which of the following statements is true regarding eCryptfs?

A LUKS device was mapped using the command: cryptsetup luksOpen/dev/sdal crypt-vol Given that this device has three different keys, which of the following commands deletes only the first key?

Which of the following statements are true regarding the certificate of a Root CA?

Which of the following access control models is established by using SELinux?

What happens when the command getfattr afile is run while the file afile has no extended attributes set?

Which of the following expressions are valid AIDE rules?

How does TSIG authenticate name servers in order to perform secured zone transfers?

Which of the following types can be specified within the Linux Audit system?

Which of the following statements is true about chroot environments?

Entry Level Linux Essentials Certificate of Achievement

Linux Essentials Certificate Exam, version 1.6

LPI Level 1 Exam 101, Junior Level Linux Certification, Part 1 of 2

LPIC-1 Exam 101

LPI Level 1 Exam 102, Junior Level Linux Certification, Part 2 of 2

LPI Level 1

LPIC-2 Exam 201

LPIC-2 Exam 202

LPIC-3 Exam 300: Mixed Environments

LPIC-3 Virtualization & High Availability

LPIC-OT Exam 701: DevOps Tools Engineer

Filters