Linux (XK0-004) Domain 3 Learn Mode

Question 1 of 19

Lisa, a Linux server administrator, is tasked with ensuring that SSH uses only specific algorithms. Which of the following files should she edit?

ssh_config
sshd_config
hosts
inittab

Question 2 of 19

You manage a server running SELinux. Apu has reported that he can’t open some files on the server. Which of the following commands can you use to list and check the security context of the files?

ls -a
ls -B
ls -Z
ls -R

Question 3 of 19

Lisa is tasked with creating a compressed archive of all the files stored in the /var/mail directory. Her system has both the tar and bzip2 packages installed. Which of the following commands should she use?

tar -cvf mailfiles.tar.bz2 /var/mail/
tar -jcvf mailfiles.tar.bz2 /var/mail/
tar -zcvf mailfiles.tar.bz2 /var/mail/
tar -xvzf mailfiles.tar.bz2 /var/mail/

Question 4 of 19

You need to securely copy all the files from a folder on production server to a similar folder on a testing server. Which of the following commands would you use?

cp
tar
mv
scp

Question 5 of 19

Seymour added a second NIC to a Linux system and configured it to act as a router within the school network. However, testing showed that IP packets are not being routed between the NICs. What should he check?

Verify the ip_forward file has the value “on”
Verify the ip_forward file has the value “1”
Verify the ip_route file has the value “on”
Verify the ip_route file has the value “1”

Question 6 of 19

You have added a second NIC to a Linux server and configured it as router. However, testing shows it is not routing packets as expected. Which of the following commands is the BEST choice to resolve this problem?

echo “1” > /etc/chkconfig -routing
echo “1” > /proc/sys/net/ipv4/enable
echo “1” > /proc/sys/net/ipv4/ip_forward
echo “1” > /proc/sys/net/ipv4/route

Question 7 of 19

You have configured a Linux server in your DMZ with a static IP address of 10.80.1.10? You created an iptables rule to always accept SSH connections from your computer. You now want to create an iptables rule to block all SSH connections from any other IP address. Users that try to connect will see an error indicating the connection was refused. Which of the following rules is the BEST choice to achieve this?

iptables -A INPUT -p TCP -d 10.80.1.10 -dport 22 -j REJECT
iptables -A INPUT -p TCP -d 10.80.1.10 -dport 22 -j DROP
iptables -A INPUT -p TCP -d 10.80.1.10 -dport 22 -j FORWARD
iptables -A INPUT -p TCP -d 10.80.1.10 -dport 22 -j DISCARD

Question 8 of 19

You have configured a Linux server in your DMZ with a static IP address of 10.80.1.10? You created an iptables rule to always accept SSH connections from your computer. You now want to create an iptables rule to block all SSH connections from any other IP address. Users that try to connect will not see an error indicating the connection was refused. Which of the following rules is the BEST choice to achieve this?

iptables -A INPUT -p TCP -d 10.80.1.10 -dport 22 -j REJECT
iptables -A INPUT -p TCP -d 10.80.1.10 -dport 22 -j DROP
iptables -A INPUT -p TCP -d 10.80.1.10 -dport 22 -j FORWARD
iptables -A INPUT -p TCP -d 10.80.1.10 -dport 22 -j DISCARD

Question 9 of 19

Lisa administers a Linux server in the DMZ. She suspects hackers have been trying a brute force attack to guess the passwords. Which of the following would be the EASIEST to use to identify all unsuccessful login attempts?

The lsof command
The chmod command
The klist command
The pam_tally2 command

Question 10 of 19

Lisa is doing some administrative work on a Linux computer and realizes she needs administrative privileges. Which of the following commands would she use to elevate her privileges?

grep
chmod
sudo
lsof

Question 11 of 19

Maggie is an administrator of a secure server and she is in the DBAdmins group. The DBAdmins group has the following permissions on a file named AppLog.
– rwx rw- r–
However, Maggie is unable to make changes to this file. Of the following, what is the MOST likely reason why Maggie cannot make changes to this file?

The secure server is using SELinux and it is set to enforcing mode.
The secure server is using SELinux and it is set to permissive mode.
The secure server is using SELinux and it has been disabled.
The user does not have adequate permissions to modify the file.
The chmod command must be used to change the permissions on the file.

Question 12 of 19

Homer is trying to connect to a remote Linux server. Unfortunately, the server is rejecting the connection. He suspects that his SSH client is not using the correct encryption algorithms. Which of the following files should he edit?

ssh_config
sshd_config
ip_forward
scp

Question 13 of 19

You are navigating through a Linux computer using the terminal. Which of the following commands will you use to display the contents of a directory?

ls
chmod
sudo
grep

Question 14 of 19

You are tasked with configuring a Linux system to display a message to all users have they log on. Which of the following is the BEST solution?

Create a PKI
Modify the MOTD file
Modify the lecture_file
Enable telnet

Question 15 of 19

A network administrator is configuring a Linux computer that will be used for network security. He plans to use it to inspect and handle network-based traffic using iptables. Which of the following network devices will server most likely mimic?

Web server
Firewall
Database server
Name server

Question 16 of 19

Lisa entered the following command at the Linux terminal:

cat /proc/meminfo

What information will this command show to her?

Disk information
RAM information
Processor information
Kernel statistics

Question 17 of 19

You have enabled FTP on a Linux server so that mobile sales personnel can periodically download files. You want to provide a layer of protection to thwart potential attacks. Which of the following would support this goal?

Modify the MOTD file
Block FTP at the firewall
Change the default ports
Enable auditd

Question 18 of 19

You need to create an archive of a Linux system disk as a backup. Which of the following will meet this goal?

gzip
xz
dd
SHA

Question 19 of 19

You want to configure a Linux server to collect log entries from other servers and network devices. What would you use to configure the rules for processing these log messages?

/etc/rsyslog.conf
systemctl
/var/log/messages
/etc/sysconfig/syslog

Pos.	Name	Entered on	Points	Result
Table is loading
No data available

GCGACert

GCGACert

Linux (XK0-004) Domain 3 Learn Mode

Linux (XK0-004) Domain 3 Learn Mode

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question

18. Question

19. Question

Average score
Your score