EnsurepassQUESTION 111 A server was rebuilt using a full system backup but with a different disk setup. The kernel won't boot, complaining it cannot find the root filesystem. Which of the following commands will fix this error by pointing the kernel image to the new root partition?   A. mkbootdisk B. tune2fs C. rdev D. grub-install E. fdisk   Correct Answer: C     QUESTION 112 Which of the following describes the main purpose of strace?   A. Show the Read more [...]
EnsurepassQUESTION 121 The listing below is an excerpt from a Squid configuration file:   A. Users connecting from localhost will be able to access web sites through this proxy. B. It's necessary to include a http_access rule denying access to all, at the end of the rules. C. It's possible to use this proxy to access SSL enabled web sites listening on any port. D. This proxy can't be used to access FTP servers listening on the default port. E. This proxy is misconfigured and Read more [...]
EnsurepassQUESTION 131 What could be a reason for invoking vsftpd from (x) inetd?   A. It's not a good idea, because (x) inetd is not secure B. Running vsftpd in standalone mode is only possible as root, which could be a security risk C. vsftpd cannot be started in standalone mode D. (x) inetd has more access control capabilities E. (x) inetd is needed to run vsftpd in a chroot jail   Correct Answer: D     QUESTION 132 The following is an excerpt from the output Read more [...]
EnsurepassQUESTION 101 To be able to access the server with the IP address 10.12.34.56 using HTTPS, a rule for iptables has to be written. Given that the client host's IP address is 192.168.43.12, which of the following commands is correct?   A. iptables - A FORWARD -p tcp -s 0/0 -d 10.12.34.56 --dport 80 -j ACCEPT B. iptables - A FORWARD -p tcp -s 192.168.43.12 d 10.12.34.56:443 -j ACCEPT. C. iptables - A FORWARD -p tcp -s 192.168.43.12 -d 10.12.34.56 --dport 443 -j ACCEPT. D. Read more [...]
EnsurepassQUESTION 81 Performing a DNS lookup with dig results in this answer. What might be wrong in the zone definition?     A. Nothing. All seems to be good. B. There's no "." after linuserv.example.net in the PTR record in the forward lookup zone file. C. There's no "." after linuserv in the PTR record in the forward lookup zone file. D. There's no "." after linuserv.example.net in the PTR record in the reverse lookup zone file. E. The "." in the NS definition in reverse Read more [...]
EnsurepassQUESTION 91 Which of the following is NOT included in a Snort rule header?   A. protocol B. action C. source IP address D. packet byte offset E. source port   Correct Answer: D     QUESTION 92 Select the TWO correct statements about the following excerpt from httpd.conf:   <Directory /var/web/dir1> <Files private.html> Order allow, deny Deny from all </Files> </Directory>   A. The configuration will deny access Read more [...]
EnsurepassQUESTION 61 What is the command to add another IP address to an interface that already has (at least) one IP address?   A. ifconfig eth0:1 192.168.1.2 B. ifconfig eth0 192.168.1.2 C. ipconfig eth0:1 192.168.1.2 D. ipconfig eth0 192.168.1.2   Correct Answer: A     QUESTION 62 Users in the acl named 'sales_net' must only be allowed to ac cess to the Internet at times specified in the time_acl named 'sales_time'. Which is the correct http_access directive, Read more [...]
EnsurepassQUESTION 71 Messages from programs are not appearing in the user's native language. What environment variable must be set for this to happen?   A. LANG B. I18N C. MESSAGES D. MSGS E. LC_MSGS   Correct Answer: A     QUESTION 72 The innd configuration file has been changed and it should be used as soon as possible. What is the fastest way to accomplish that?   A. ctlinnd kill hup B. kill - HUP process id C. ctlinnd xexec innd D. ctlinnd Read more [...]
EnsurepassQUESTION 51 If the command arp -f is run, which file will be read by default?   A. /etc/hosts B. /etc/ethers C. /etc/arp.conf D. /etc/networks E. /var/cache/arp   Correct Answer: B     QUESTION 52 Which of the following is recommended to reduce Squid's consumption of disk resources?   A. Disable the use of access lists. B. Reduce the size of cache_dir in the configuration file. C. Rotate log files regularly. D. Disable logging of fully Read more [...]
EnsurepassQUESTION 41 The following is an excerpt from a procmail configuration file:   :0 c * ! ^To: backup ! backup   Which of the following is correct?   A. All mails will be backed up to the path defined by $MAILDIR B. All mails to the local email address backup will be stored in the directory backup. C. A copy of all mails will be stored in file backup. D. A copy of all mails will be send to the local email address backup. E. Mails not addressed to backup are Read more [...]
EnsurepassQUESTION 11 What tool scans log files for unsuccessful login attempts and blocks the offending IP addresses with firewall rules?   A. nessus B. nmap C. nc D. watchlogs E. fail2ban   Correct Answer: E     QUESTION 12 To configure an LDAP service in the company " Certkiller Ltd", which of the following entries should be added to slapd.conf, in the Database Directives section, to set the rootdn so that the common name is Manager and the company's domain Read more [...]
EnsurepassQUESTION 31 Which of the following sentences is true, when using the following /etc/pam.d/login file?   #%PAM-l.0 auth required /lib/security/pam_securetty.so auth required /lib/security/pam_nologin.so auth sufficient /lib/security/pam_unix.so shadow nullok md5 use_authtok auth required /lib/security/pam_ldap.so use_first_pass account sufficient /lib/security/pam_unix.so account required /lib/security/pam_ldap.so password required /lib/security/pam_cracklib.so password sufficient /lib/security/pam_unix.so Read more [...]