OS Hardening XK0-006 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary purpose of a firewall on a Linux system?

   • ATo monitor system logs for security incidents
   • BTo encrypt all network traffic
   • CTo prevent users from accessing the system
   • DTo control network traffic by filtering packets based on rules
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which command is used to view the Access Control List (ACL) entries on a file or directory?

   • Achacl
   • Bgetfacl
   • Csetfacl
   • Dlsacl
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which SSH hardening directive should be set to 'no' to prevent the root user from logging in directly via SSH?

   • AMaxSessions 2
   • BPermitRootLogin no
   • CAllowUsers alice
   • DPasswordAuthentication no
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of the sudo command?

   • ATo edit the sudoers file
   • BTo change the ownership of a file
   • CTo switch to the root user's login shell
   • DTo execute a command with the security privileges of another user, typically root
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A junior admin needs to grant a developer named 'alex' read-only access to the /var/log/nginx/ directory so they can troubleshoot web application errors. The developer should not be able to modify or delete any log files. The directory is currently owned by root:root with permissions 755. Which command sequence should the senior admin use?

   • Ausermod -aG adm alex && chmod 640 /var/log/nginx/access.log
   • Bchmod 755 /var/log/nginx/ && chmod 644 /var/log/nginx/*.log
   • Cchown alex:alex /var/log/nginx/ && chmod 750 /var/log/nginx/
   • Dsetfacl -m u:alex:r-x /var/log/nginx/ && setfacl -m u:alex:r-- /var/log/nginx/*.log
   Reveal Solution Discussion Select an answer first