Linux Final

In order to determine the IP address of the root name servers, the slave DNS server:

Given this dig command: "dig @127.0.0.1 www.happy.org", determine which of the following is required?

Root servers answer iterative & recursive queries.

Your lab partner is about to test your name server when you notice that your resolver configuration on your name server is not properly setup. Do you tell your lab partner to:

Your server is the master of two domains: happy.org & peachy.net. How many configuration/zone files have to be maintained?

Authoritative hostname resolution can be provided by:

Assume that another company (managing its own domain sunny.org), has agreed to become a DNS slave for your domain happy.lab. You edit your zone file to add:

Zone transfer timing parameters are determined by the following:

To perform reverse hostname resolution for the 172.16.30.167 you use the following dig command:

Identify the utility used to configure and display network devices.

Identify the utility used to display the ports that the services are listening on?

When encountering an error message when dealing with services you attempt the following before describing the problem to your lab partner:

In the client-server paradigm the server is listening on a port and initiating the connection to a client.

Identify the utility that can be used to test an active (listening) service that implements a text-based protocol.

In the Iptables filter table, the INPUT chain identifies all network packets that pass through the firewall system.

To view all currently established connections to your service(s) you use the following utility:

Which command(s) shows all interface configurations?

Which utility will best verify basic network connectivity?

Which command(s) show all listening TCP ports?

Based on the list of permissions below, select the correct answer in order to delete a file in a directory:

To determine the installed location of the configuration file of a newly installed package, your best option is to:

Which log file typically gives you the best overview of the state of the system?

Which command displays interface configuration for ens33?

Which file controls static hostname resolution? _____

What is the command used to prevent service "foobar" starting automatically upon system boot up?________

What is the command used to start service "foobar" upon system boot up?________

Given the only the following two rules, will an incoming connection from 172.16.31.167 be dropped, rejected or accepted? iptables –A INPUT –s 172.16.0.0/16 –j ACCEPT iptables –A INPUT –s 172.16.31.167 –p tcp –j DROP

What is the purpose of this rule? iptables –A INPUT –s 172.16.0.0/16 –p tcp –j ACCEPT

Is the default iptables policy applied before or after all other rules are evaluated.

The directive found in /etc/sysconfig/network-scripts/ifcfg-ens33 that will determine whether an interface is setup as static or dynamic is:

Which command can be used to configure and display network devices?

Record the command that lists all running services.________

Your organization maintains one DNS server for happy.org. It functions both as the authoritative name server for happy.org and as the preferred name server for its internal clients. When an internal client performs a query to its preferred name server, the name server will first:

When setting up a zone for happy.org:

You maintain a DNS server, which functions as the master for happy.org, as the slave for sunny.org, and as the preferred DNS server for all internal clients of happy.org. When an internal client performs a query for www.sunny.org, the name server will first:

You are asked to manage three virtual hosts for Apache: www.happy.lab, www.peachy.lab, www.sunny.lab. You are also asked to manage DNS for all corresponding domains. Your name server is currently setup with one forward zone file that lists all the hosts for happy.lab. How many additional forward zone files do you have to create?

When your preferred name server receives a name resolution request it will try to find the answer by checking:

DNS can work with one master and many slave servers. A master/slave scenario typically means that:

What is the corresponding PTR record for this A record: www.happy.org. A 74.168.0.2

What must be done to set up a slave zone on a slave DNS server:

An authoritative answer for "hostX" can only be received from a master DNS server of the zone to which hostX belongs as well as:

Generally, you should put an IPv4 entry and IPv6 entry for your localhost in you hosts file.

Which command displays the default route?

Which file contains your default name servers? _____

Which command displays interface configuration for all interfaces?

What is needed to perform hostname resolution using DNS?

In the client-server paradigm the server is listening on a port and initiating the connection to a client.

From a client system you are trying to connect to a remote web server but you get an error message. Which of the following will you NOT try?

To add a PTR record for the host www.happy.lab to the zone file "happy.lab" the proper syntax for is:

What is the rpm command line that lists all the files that are part of the installed package "foobar"?

Record the command used to verify that the service "foobar" is currently running.________

A delegation creates a link between two domains that are directly connected (parent-child) in the DNS tree. The delegation to the child domain is included in the parent domain.

The address record: ns1 IN A 74.168.0.2 for the domain "happy.org" can be rewritten as: ns1.happy.org IN A 74.168.0.2

The syntax for an NS record for the server ns1.happy.org is:

In the iptables filter table the OUTPUT chain identifies all network packets that are destined for the firewall system.

The three explicit security objectives of the CIA triad model are:

To exchange a shared key for symmetric encryption the following cryptographic method is typically used:

Enter the command line to look up the PTR record for "172.16.30.167" using the dig command.

Which command will check the validity of the sshd configuration file and sanity of the keys?

How many keys does asymmetric encryption use?

To provide data integrity, the best method to use is to:

Enter the command line to resolve the A record for "www.happy.org" using your default resolver configuration.

Which file must be modified on the master DNS to allow master/slave operation for the package bind?

Symmetric encryption is predominantly used to achieve confidentiality.

The default sshd_config shipped with OpenSSH is to specify options with their default values commented.

Enter the command line to resolve the A record for "www.happy.org" using your partner's DNS at 172.16.30.167 using your preferred command.

To provide data integrity the preferred cryptographic method is a:

Enter the command line to look up the PTR record for "172.16.31.167" on your master DNS (172.16.30.167) using the dig command from another Linux machine.

Which of these command line utilities can be used to perform DNS lookups?

Which sshd configuration options control the use of public key authentication?

Symmetric cryptography uses two keys, while asymmetric cryptography uses one key.

Enter the command line to look up the NS record for the domain "happy.org" using the nslookup command.

Which of these issues may cause the slave DNS not to synchronize with the master DNS?

How many keys does symmetric encryption use?

Which file contains configuration for the DNS client (resolver)?

Enter the command line to look up the NS record for the domain "happy.org" using the dig command.

Which key is used to encrypt in order to prove authenticity using public key cryptography?

Which command(s) verify bind(DNS) is listening of the configured port(s)?

Enter the command line to look up the NS record for the domain "happy.org" on the teacher's DNS (172.16.30.167) using the dig command.

Enter the command line to look up the NS record for the domain "happy.org" on the teacher's DNS (172.16.30.167) using the host command.

Enter the command line to look up the PTR record for "172.16.30.167" using the nslookup command.

Enter the command line to look up the PTR record for "172.16.31.167" on your slave DNS (172.16.31.167) using the dig command from another Linux machine.

DNS can work with one master and many slave servers. A master/slave scenario typically means that:

Enter the command line to look up the PTR record for "172.16.31.167" on the teacher's slave DNS (172.16.31.167) using the nslookup command.

Which sshd configuration options control the use of password authentication?

To provide confidentiality the following cryptographic method is used:

Enter the command line to look up the PTR record for "172.16.30.167" using the host command.

Enter the command line to look up the PTR record for "172.16.31.167" on the teacher's master DNS (172.16.30.167) using the host command.

Which file must be modified on the slave DNS to allow master/slave operation for the package bind?

To provide source integrity, asymmetric encryption is used. The private key is used to:

Which command(s) verify sshd is listening of the configured port(s)?

Enter the command line to look up the NS record for the domain "happy.org" using the host command.

Enter the command line to look up the NS record for the domain "happy.org" on the teacher's DNS (172.16.30.167) using the nslookup command.

Which apache configuration directive configures logging of all website accesses?

Which command is used to show or set your hostname?

Enter the command line to look up the NS record for the domain "happy.org" on the teacher's DNS (172.16.30.167) using the host command.

Enter the command line to look up the NS record for the domain "happy.org" on the teacher's DNS (172.16.30.167) using the dig command.

The aliasing feature is used to forward email of a local user to a different email account. The /etc/aliases file is consulted by which mail server?

Which sshd configuration options control the use of password authentication?

Which command can be used to verify the HTTPD service is listening on the correct port?

Which of these commands will let you view the mail queue?

Which command will check the validity of the sshd configuration file and sanity of the keys?

Which of these issues may cause the slave DNS not to syncronize with the master DNS?

Which of these are valid ways to send mail on the command line?

Which apache configuration option specifies the port Apache listens on?

Which apache block directive is used to configure virtual hosts?

Which of these firewalls are available on CENTOS 7?

Which file your hostname resolution order? _____

The default sshd_config shipped with OpenSSH is to specify options with their default values commented.

Which mail server is the masquerading feature setup on?

Which file contains configuration for the DNS client (resolver)?

Generally, you should put an IPv4 entry and IPv6 entry for your localhost in you hosts file.

What is the default "ServerRoot" for apache?

You use DNS or /etc/hosts to test your apache virtual hosts locally.

Symmetric cryptography uses two keys, while asymmetric cryptography uses one key.

Which file contains the main configuration file for apache?

By default, which interface(s) does postfix listen?

What is the default user used by apache while running?

You wish to configure apache to serve two "Virtual Hosts", happy.lab & grumpy.lab. What is the minimum number of zone files required in your DNS?

Which utility is used to add entries to LDAP from a properly configured LDIF file?

Assuming you do not configure the configuration file to allow other users, who is allowed to add/modify/delete entries in the LDAP database?

Which of these utility programs can add entries to an LDAP DIT?

What is DIT an abbreviation for?

Which key is used to encrypt in order to prove authenticity using public key cryptography?

Which of these utility programs can modify entries to an LDAP DIT?

You use DNS or /etc/hosts to test your apache virtual hosts remotely.

What is the default document root for apache?

What is the name of the default error log in Apache?

Which utility is used to search the LDAP DIT?

Which module must be loaded in order to use the DirectoryIndex option?

Which of these utility programs can delete entries to an LDAP DIT?

What does the error message "mail loops back to me" typically indicate is wrong in the postfix configuration file?

Which sshd configuration options control the use of public key authentication?

Which file must be modified on the master DNS to allow master/slave operation for the package bind?

Root servers answer iterative & recursive queries.

"Aliasing" is used to redirect email addressed to a generic account such as "webmaster" to a user account such as "arnold". As such the recipient address is rewritten by the receiving mail server

To provide source integrity, asymmetric encryption is used. The private key is used to:

The LDAP protocol is used to:

To setup the resolver on the client system to provide hostname resolution with LDAP in addition to static and DNS-style host name resolution, the following client configuration file has to be edited:

Assume that name-based virtual hosting is setup for the IP address 172.16.30.199 on a server with more than one interface. You want to display a web site when your web server is accessed using a different (and valid) IP address. To accomplish this you should:

Assuming you are already serving two domains, how many additional virtual hosts have to be set up in Apache to provide websites for the domains happy.org, peachy.org and sunny.org?

An "outbound" only mail server typically "hosts" email for its domain.

Practically, who should be able to look up a public DNS MX record?

Consistency of directory information across replicated LDAP servers is crucial while consistency of data stored in transactional databases is not.

HTTPS is:

The base/suffix for happy.org can be setup using the following object class:

An object is created based on one object class. The object class must be:

To locate an object in the DIT you use the _____________ of the object.

The SMTP protocol is used to:

If a directive in your Apache configuration is not recognized by Apache, the most likely reason is that the module that supports the directive is missing.

The apache server implements the following protocol:

To send mail using the form user@domain.tld, where the mail server for the domain is mx.domain.tld, the A record for mx.domain.tld in the zone file for the domain is sufficient.

When setting up name-based virtual hosts, the Apache configuration requires:

The only source for web documents that a server can map a URL to is given by the DocumentRoot directive.

Which mail servers "need" to look up a public DNS MX record?

An LDAP client, such as ldapsearch, requires at a minimum the following information to search an LDAP directory server.

The apache server implements the following protocol:

The three required components to have a functional email service are:

If object class inetOrgPerson is a subclass of object class person, the following applies:

When data is downloaded from a web server to a client browser, the type of data (text, image, audio, etc.) is determined by the:

Symmetric encryption is predominantly used to achieve confidentiality.

To provide data integrity the preferred cryptographic method is a:

When trying to add an LDAP directory entry the operation is unsuccessful. One of the possible problems could be that the corresponding schema file is not included in the LDAP server configuration.

Virtual hosts in Apache are used to:

Apache fails to start due to an unknown directive in the configuration file. One possibility could be that the corresponding module is not loaded.

Postfix is considered to be primarily a:

Based on the following list of criteria determine which ones have to be satisfied for an inbound mail server.

An attribute is defined by a set of object classes.

To verify the mail server of the domain example.lab based on the MX record the following dig command is used:

An object can be created using exactly one auxiliary class and any number, including zero, structural classes.

With "masquerading" the following addresses are typically rewritten.

To provide confidentiality the following cryptographic method is used:

A delegation creates a link between two domains that are directly connected (parent-child) in the DNS tree. The delegation to the child domain is included in the parent domain.

A delegation creates a link between two domains that are directly connected (parent-child) in the DNS tree. The delegation to the child domain is included in the parent domain.

Name-based virtual hosting is possible because:

Name-based virtual hosting is possible because: