Question 1

Which of the following parameters to openssl s_client specifies the host name to use for TLS Server Name Indication?

Accepted Answer

A)  -tlsname 
B)  -servername 
C)  -sniname 
D)  -vhost 
E)  -host 
A)  -tlsname 
B)  -servername 
C)  -sniname 
D)  -vhost 
E)  -host

Question 2

Which DNS label points to the DANE information used to secure HTTPS connections to https://www.example.com/?

Accepted Answer

A)  example.com 
B)  dane.www.example.com 
C)  soa.example.com 
D)  www.example.com 
E)  _443_tcp.www.example.com 
A)  example.com 
B)  dane.www.example.com 
C)  soa.example.com 
D)  www.example.com 
E)  _443_tcp.www.example.com

Question 3

Which of the following sections are allowed within the Kerberos configuration file krb5.conf?

Accepted Answer

A)  [plugins] 
B)  [crypto] 
C)  [domain] 
D)  [capaths] 
E)  [realms] 
A)  [plugins] 
B)  [crypto] 
C)  [domain] 
D)  [capaths] 
E)  [realms]

Question 4

Which of the following statements is used in a parameter file for setkey in order to create a new SPD entry?

Accepted Answer

A)  spd 
B)  addspd 
C)  newspd 
D)  spdnew 
E)  spdadd 
A)  spd 
B)  addspd 
C)  newspd 
D)  spdnew 
E)  spdadd

Question 5

Which of the following commands disables the automatic password expiry for the user usera?

Accepted Answer

A)  chage --maxdays none usera 
B)  chage --maxdays 99 usera 
C)  chage --maxdays -1 usera 
D)  chage --lastday none usera 
E)  chage --lastday 0 usera 
A)  chage --maxdays none usera 
B)  chage --maxdays 99 usera 
C)  chage --maxdays -1 usera 
D)  chage --lastday none usera 
E)  chage --lastday 0 usera

Question 6

Which of the following commands defines an audit rule that monitors read and write operations to the file/ etc/firewall/rules and associates the rule with the name firewall?

Accepted Answer

A)  auditctl -N firewall -r r: /etc/firewall/rules -r w:     etc/firewall/rules 
B)  auditctl -A -f /etc/firewall/rules -o r -o w -l firewall 
C)  auditctl -w /etc/firewall/rules -p rw -k firewall 
D)  auditctl --read /etc/firewall/rules --write /etc/firewall/rules     --label firewall 
E)  echo "n: firewall  r:/etc/firewall/rules: w:/     etc/firewall/rules:" | auditctl ~ 
A)  auditctl -N firewall -r r: /etc/firewall/rules -r w:     etc/firewall/rules 
B)  auditctl -A -f /etc/firewall/rules -o r -o w -l firewall 
C)  auditctl -w /etc/firewall/rules -p rw -k firewall 
D)  auditctl --read /etc/firewall/rules --write /etc/firewall/rules     --label firewall 
E)  echo "n: firewall  r:/etc/firewall/rules: w:/     etc/firewall/rules:" | auditctl ~

Question 7

In which path is the data, which can be altered by the sysctl command, accessible?

Accepted Answer

A)  /dev/sys/ 
B)  /sys/ 
C)  /proc/sys/ 
D)  /sysctl/ 
A)  /dev/sys/ 
B)  /sys/ 
C)  /proc/sys/ 
D)  /sysctl/

Question 8

Which of the following terms refer to existing scan techniques with nmap?

Accepted Answer

A)  Xmas Scan 
B)  Zero Scan 
C)  FIN Scan 
D)  IP Scan 
E)  UDP SYN Scan 
A)  Xmas Scan 
B)  Zero Scan 
C)  FIN Scan 
D)  IP Scan 
E)  UDP SYN Scan

Question 9

Which of the following practices are important for the security of private keys?

Accepted Answer

A)  Private keys should be created on the systems where they will be used and should never leave them. 
B)  Private keys should be uploaded to public key servers. 
C)  Private keys should be included in X509 certificates. 
D)  Private keys should have a sufficient length for the algorithm used for key generation. 
E)  Private keys should always be stored as plain text files without any encryption. 
A)  Private keys should be created on the systems where they will be used and should never leave them. 
B)  Private keys should be uploaded to public key servers. 
C)  Private keys should be included in X509 certificates. 
D)  Private keys should have a sufficient length for the algorithm used for key generation. 
E)  Private keys should always be stored as plain text files without any encryption.

Question 10

When OpenVPN sends a control packet to its peer, it expects an acknowledgement in 2 seconds by default. Which of the following options changes the timeout period to 5 seconds?

Accepted Answer

A)  -- tls-timeout 5 
B)  -- tls- timeout 500 
C)  -- tls- timer 5 
D)  -- tls- timer 500 
A)  -- tls-timeout 5 
B)  -- tls- timeout 500 
C)  -- tls- timer 5 
D)  -- tls- timer 500

Question 11

Which of the following command lines sets the administrator password for ntop to testing 123?

Accepted Answer

A)  ntop --set-admin-password=testing123 
B)  ntop --set-password=testing123 
C)  ntop --reset-password=testing123 
D)  ntop --set-new-password=testing123 
A)  ntop --set-admin-password=testing123 
B)  ntop --set-password=testing123 
C)  ntop --reset-password=testing123 
D)  ntop --set-new-password=testing123

Question 12

SIMULATION Which command is used to run a new shell for a user changing the SELinux context? (Specify ONLY the command without any path or parameters.)

Accepted Answer

The answer of SIMULATION Which command is used to run...

Question 13

Which of the following resources of a shell and its child processes can be controlled by the Bash build-in command ulimit?

Accepted Answer

A)  The maximum size of written files 
B)  The maximum number of open file descriptors 
C)  The maximum number of newly created files 
D)  The maximum number of environment variables 
E)  The maximum number of user processes 
A)  The maximum size of written files 
B)  The maximum number of open file descriptors 
C)  The maximum number of newly created files 
D)  The maximum number of environment variables 
E)  The maximum number of user processes

Question 14

Which of the following commands adds a new user usera to FreeIPA?

Accepted Answer

A)  useradd usera --directory ipa --gecos "User A" 
B)  idap- useradd -H Idaps://ipa-server CN=UserA --attribs     "Firstname: User: Lastname: A" 
C)  ipa-admin create user --account usera --fname User --iname A 
D)  ipa user-add usera --first User --last A 
E)  ipa-user- add usera --name "User A" 
A)  useradd usera --directory ipa --gecos "User A" 
B)  idap- useradd -H Idaps://ipa-server CN=UserA --attribs     "Firstname: User: Lastname: A" 
C)  ipa-admin create user --account usera --fname User --iname A 
D)  ipa user-add usera --first User --last A 
E)  ipa-user- add usera --name "User A"

Question 15

Which of the following openssl commands generates a certificate signing request (CSR) using the already existing private key contained in the file private/keypair.pem?

Accepted Answer

A)  openssl req -key private/keypair.pem -out req/csr.pem 
B)  openssl req - new -key private/keypair.pem -out req/csr.pem 
C)  openssl gencsr -key private/keypair.pem -out req/csr.pem 
D)  openssl gencsr -new- key private/keypair.pem -out req/csr.pem 
A)  openssl req -key private/keypair.pem -out req/csr.pem 
B)  openssl req - new -key private/keypair.pem -out req/csr.pem 
C)  openssl gencsr -key private/keypair.pem -out req/csr.pem 
D)  openssl gencsr -new- key private/keypair.pem -out req/csr.pem

Question 16

What is the purpose of the program snort-stat?

Accepted Answer

A)  It displays statistics from the running Snort process. 
B)  It returns the status of all configured network devices. 
C)  It reports whether the Snort process is still running and processing packets. 
D)  It displays the status of all Snort processes. 
E)  It reads syslog files containing Snort information and generates port scan statistics. 
A)  It displays statistics from the running Snort process. 
B)  It returns the status of all configured network devices. 
C)  It reports whether the Snort process is still running and processing packets. 
D)  It displays the status of all Snort processes. 
E)  It reads syslog files containing Snort information and generates port scan statistics.

Question 17

Which of the following database names can be used within a Name Service Switch (NSS) configuration file? .

Accepted Answer

A)  host 
B)  shadow 
C)  service 
D)  passwd 
E)  group 
A)  host 
B)  shadow 
C)  service 
D)  passwd 
E)  group

Question 18

SIMULATION Which command installs and configures a new FreeIPA server, including all sub-components, and creates a new FreeIPA domain? (Specially ONLY the command without any path or parameters).

Accepted Answer

The answer of SIMULATION Which command installs and configures a...

Question 19

Given a proper network and name resolution setup, which of the following commands establishes a trust between a FreeIPA domain and an Active Directory domain?

Accepted Answer

A)  ipa trust-add --type ad addom --admin Administrator --password 
B)  ipa-ad -add-trust --account ADDOM\Administrator--query-password 
C)  net ad ipajoin addom -U Administrator -p 
D)  trustmanager add --domain ad: //addom --user Administrator -w 
E)  ipa ad join addom -U Administrator -w 
A)  ipa trust-add --type ad addom --admin Administrator --password 
B)  ipa-ad -add-trust --account ADDOM\Administrator--query-password 
C)  net ad ipajoin addom -U Administrator -p 
D)  trustmanager add --domain ad: //addom --user Administrator -w 
E)  ipa ad join addom -U Administrator -w

Question 20

Which of the following statements are valid wireshark capture filters?

Accepted Answer

A)  port range 10000:tcp-15000:tcp 
B)  port-range tcp 10000-15000 
C)  tcp portrange 10000-15000 
D)  portrange 10000/tcp-15000/tcp 
E)  portrange 10000-15000 and tcp 
A)  port range 10000:tcp-15000:tcp 
B)  port-range tcp 10000-15000 
C)  tcp portrange 10000-15000 
D)  portrange 10000/tcp-15000/tcp 
E)  portrange 10000-15000 and tcp

Which of the following parameters to openssl s_client specifies the host name to use for TLS Server Name Indication?

Which DNS label points to the DANE information used to secure HTTPS connections to https://www.example.com/?

Which of the following sections are allowed within the Kerberos configuration file krb5.conf?

Which of the following statements is used in a parameter file for setkey in order to create a new SPD entry?

Which of the following commands disables the automatic password expiry for the user usera?

Which of the following commands defines an audit rule that monitors read and write operations to the file/ etc/firewall/rules and associates the rule with the name firewall?

In which path is the data, which can be altered by the sysctl command, accessible?

Which of the following terms refer to existing scan techniques with nmap?

Which of the following practices are important for the security of private keys?

When OpenVPN sends a control packet to its peer, it expects an acknowledgement in 2 seconds by default. Which of the following options changes the timeout period to 5 seconds?

Which of the following command lines sets the administrator password for ntop to testing 123?

SIMULATION Which command is used to run a new shell for a user changing the SELinux context? (Specify ONLY the command without any path or parameters.)

Which of the following resources of a shell and its child processes can be controlled by the Bash build-in command ulimit?

Which of the following commands adds a new user usera to FreeIPA?

Which of the following openssl commands generates a certificate signing request (CSR) using the already existing private key contained in the file private/keypair.pem?

What is the purpose of the program snort-stat?

Which of the following database names can be used within a Name Service Switch (NSS) configuration file? .

SIMULATION Which command installs and configures a new FreeIPA server, including all sub-components, and creates a new FreeIPA domain? (Specially ONLY the command without any path or parameters).

Given a proper network and name resolution setup, which of the following commands establishes a trust between a FreeIPA domain and an Active Directory domain?

Which of the following statements are valid wireshark capture filters?

Entry Level Linux Essentials Certificate of Achievement

Linux Essentials Certificate Exam, version 1.6

LPI Level 1 Exam 101, Junior Level Linux Certification, Part 1 of 2

LPIC-1 Exam 101

LPI Level 1 Exam 102, Junior Level Linux Certification, Part 2 of 2

LPI Level 1

LPIC-2 Exam 201

LPIC-2 Exam 202

LPIC-3 Exam 300: Mixed Environments

LPIC-3 Virtualization & High Availability

LPIC-OT Exam 701: DevOps Tools Engineer

Filters

Exam 10: Security

Which of the following parameters to openssl s_client specifies the host name to use for TLS Server Name Indication?

Which DNS label points to the DANE information used to secure HTTPS connections to https://www.example.com/?

Which of the following sections are allowed within the Kerberos configuration file krb5.conf?

Which of the following statements is used in a parameter file for setkey in order to create a new SPD entry?

Which of the following commands disables the automatic password expiry for the user usera?

Which of the following commands defines an audit rule that monitors read and write operations to the file/ etc/firewall/rules and associates the rule with the name firewall?

In which path is the data, which can be altered by the sysctl command, accessible?

Which of the following terms refer to existing scan techniques with nmap?

Which of the following practices are important for the security of private keys?

When OpenVPN sends a control packet to its peer, it expects an acknowledgement in 2 seconds by default. Which of the following options changes the timeout period to 5 seconds?

Which of the following command lines sets the administrator password for ntop to testing 123?

SIMULATION Which command is used to run a new shell for a user changing the SELinux context? (Specify ONLY the command without any path or parameters.)

Which of the following resources of a shell and its child processes can be controlled by the Bash build-in command ulimit?

Which of the following commands adds a new user usera to FreeIPA?

Which of the following openssl commands generates a certificate signing request (CSR) using the already existing private key contained in the file private/keypair.pem?

What is the purpose of the program snort-stat?

Which of the following database names can be used within a Name Service Switch (NSS) configuration file? .

SIMULATION Which command installs and configures a new FreeIPA server, including all sub-components, and creates a new FreeIPA domain? (Specially ONLY the command without any path or parameters).

Given a proper network and name resolution setup, which of the following commands establishes a trust between a FreeIPA domain and an Active Directory domain?

Which of the following statements are valid wireshark capture filters?

Entry Level Linux Essentials Certificate of Achievement

Linux Essentials Certificate Exam, version 1.6

LPI Level 1 Exam 101, Junior Level Linux Certification, Part 1 of 2

LPIC-1 Exam 101

LPI Level 1 Exam 102, Junior Level Linux Certification, Part 2 of 2

LPI Level 1

LPIC-2 Exam 201

LPIC-2 Exam 202

LPIC-3 Exam 300: Mixed Environments

LPIC-3 Virtualization & High Availability

LPIC-OT Exam 701: DevOps Tools Engineer

Filters