Ch17 Host Security Exam

Ch17 Host Security Exam

1. Which super server has replaced inetd?

   • ninetd 
   • xinetd
   • inet
   • inetdver2

2. What is the main feature of a super server?

   • Run as a foreground process and initiate TCP connections to other hosts 
   • Run as a background process and initiate TCP connections to other hosts 
   • Run as a master process and listen for incoming TCP connections and then start the required process 
   • Run as a master process and service incoming TCP connections

3. For configuring xinetd, the files _____ are used

   • /etc/xinetd.conf or separate files for each service in the /etc/xinetd.d directory 
   • /etc/xinet.conf or separate files for each service in the /etc/xinetd.d directory
   • /etc/xinet.conf or separate files for each service in the /etc/xinetd.d directory 
   • /etc/xinetd.conf or separate files for each service in the/etc/net/xinetd.d directory

4. Which file is used to verify the services specified in the xinetd configuration?

   • /etc/xinet.d/services 
   • /etc/services 
   • /etc/xinetd/services 
   • /etc/net/services

5. The xinetd daemon will automatically reload the configuration file if it is modified.

   True or False?

   • True 
   • False

6. Which of the following is not a criteria for defining access control using xinetd?

   • System Utilization 
   • Time of Day 
   • Network Traffic 
   • Host Addresses

7. What does the following snippet in the xinetdconfiguration file indicate?

   ​ service telnet
   {
      disable = yes...

   • The telnet service will be enabled when xinetd starts 
   • The telnet service is enabled 
   • The telnet service is disabled and will be enabled when xinetd restarts 
   • The telnet service is disabled

8. The inetd and xinetd daemons can run simultaneously on a system.
   True or False? 

   • True 
   • False

9. What method is used to apply TCP Wrappers to a network service?

   • Add the /usr/lib/libwrap.a library to the /etc/xinet.d directory 
   • Add entries of the service to the /etc/tcpwrap.conf file 
   • Compile using the /usr/lib/libwrap.a library 
   • Add the /usr/lib/libwrap.a file to the service’s directory

10. The two files used by TCP Wrappers to control access are _____:

    • /etc/hosts.allow and /etc/hosts.deny 
    • /etc/hosts_tcp.allow and /etc/hosts_tcp.deny 
    • /xinet.d/hosts.allow and /xinet.d/hosts.deny 
    • /etc/xinet.d/hosts.allow and /etc/xinet.d/hosts.deny

11. What does,sshd: ALL, specified in the hosts.deny file indicate?

    • Prevent all connections other than SSH 
    • Allow SSH connection from all hosts 
    • Prevent SSH connection from all hosts 
    • Prevent SSH connections from all hosts on this subnetQuestion ID 3327

12. Which of the following is not a keyword used to specify the host in the hosts.allow and hosts.deny files?

    • KNOWN 
    • UNKNOWN 
    • PARANOID
    •  EXTERN

13. What happens to the service request received by TCP Wrappers if the hosts.allow and hosts.deny files do not permit connection?

    • Drop the packet and log a message 
    • Ignore the packet and continue with the next request 
    • Recheck the files for connection 2 more times 
    • Forward the request to the requested service and log a warning 

14. A host does not have an entry in either hosts.allow or hosts.deny. How does TCP Wrappers handle a request originating from this host?

    • Request forwarded to the service 
    • Request turned down and error logged 
    • Request dropped and service intimated 
    • Request dropped

15. It is possible to specify the address of a subnet in the hosts.allow and hosts.deny files.

    True or False?

    • True 
    • False

16. You are using a server with two NICs, eth0 and eth1. You want to configure TCP Wrappers for using the telnet service on eth1 only in the hosts.allow file, this can be done by specifying ________

    • [email protected]: 192.168.0.0/24
    • telnetd[192.168.0.254]: 192.168.0.0/24
    • telnetd(192.168.0.254): 192.168.0.0/24
    • telnetd:192.168.0.254: 192.168.0.0/24

17. Which command is used to verify if a program is compiled with TCP Wrappers?

    • ldd 
    • gcc 
    • make 
    • nm

18. You had initially added some hosts in the hosts.deny file to prevent access to FTP. You remove those hosts now because you need to grant them FTP access. How do you restart TCP Wrappers?

    • tcp_wrappers restart
    • ftpd restart 
    • Restart of any service is not required 
    • /etc/networking restart

19. The /etc/nologin file is used to prevent all users from logging on to the system.

    True or False?

    • True 
    • False

20. Which of the following scenarios do not require the use of the /etc/nologin file? 

    • Installing an Oracle Patch 
    • Adding a new disk 
    • Monitoring the system’s disk usage 
    • Installing a Linux patch

21. Which file is referred to by the login command when any user tries to login to the system?

    • /etc/message 
    • /etc/nologin 
    • /etc/banner 
    • /etc/login

22. What is the PID of the init process?

    • 111 
    • 1 
    • 0 
    • 11

23. Which file specifies the processes to be started during boot time?

    • /etc/initproc 
    • /etc/inittab 
    • /etc/proc/inittab 
    • /etc/init.d/inittab

24. You are currently running the server at run level 3, you need to allow users access to X server applications for several days. Which run level should you switch to?

    • Run level 1 
    • Run level 4 
    • Run level 6 
    • Run level 5

25. What is the result of running the init 6 command?

    • Restart the system in single user mode 
    • Shutdown the system 
    • Restart the system 
    • Open the /etc/inittab file for editing

26. How is the default run level defined in the /etc/inittab file?

    • id:3: defaultinit:
    • initdefault:3
    • runlevel:3:initdefault:
    • id:3:initdefault:

27. What does the /etc/init.d directory contain?

    • Scripts for network services
    • Scripts for initialization
    • Scripts for the different run levels
    • Scripts for the default run level

28. Which of the following is not a valid option for the scripts in the /etc/init.d directory?

    • query 
    • start 
    • stop 
    • restart

29. All systemd services require a systemd.socket.

    True or False?

    • True 
    • False

30. Which of the following commands will display systemd.socket unit configuration files? 

    • systemctl list-unit-files | type=socket 
    • systemctl list-unit-files --type=socket 
    • systemctl list-unit-files = >socket list 
    • systemctl list-sockets --all