A Linux administrator is setting up a shared project directory for a development team. The team has three members who need read/write access, and a manager who needs read-only access. The directory must be accessible only to the team and the manager, not to other users on the system. Which approach enforces least privilege while meeting these requirements?

Set the directory permissions to 777 and rely on the umask of each user to restrict access.

Create a group for the team and manager, set the directory's group to that group, assign 770 permissions, and add the manager to a separate read-only group with an ACL granting read access.

Create one group for all four users, set the directory group to that group, and assign 775 permissions so the manager can write as well.

Set the directory owner to the manager, group to the team, and permissions to 750, then add the manager to the team group.

A Linux administrator is setting up audit logging to detect unauthorized file access. The requirement is to log all read attempts to a sensitive file, but not to log successful reads by a specific privileged user. Which audit rule should be configured?

auditctl -w /etc/shadow -p r -k shadow_read, and set the privileged user's audit log to 'none'.

auditctl -w /etc/shadow -p w -k shadow_write

auditctl -a always,exit -F path=/etc/shadow -F perm=r -F auid!=1000 -k shadow_read

auditctl -w /etc/shadow -p r -k shadow_read, and add an exclude rule for the privileged user's UID.

A company runs a mixed environment with Windows and Linux servers. The security team wants to deploy antivirus protection on Linux endpoints to detect malware that could be transferred from Windows systems. Which approach is most effective?

Install an open-source antivirus like ClamAV on each Linux server and schedule regular scans.

Rely on SELinux to prevent malware execution.

Disable all file sharing services to prevent malware transfer.

Use file integrity monitoring tools like Tripwire to detect malware.

A Linux server is being hardened for production use. The administrator needs to ensure that only the root user can execute certain system administration commands. Which configuration is most appropriate?

Use sudo to grant specific users limited administrative privileges, and keep root access restricted.

Set the setuid bit on all system administration binaries.

Disable the root account and make all users members of the 'wheel' group.

Give all administrators the root password and allow them to log in as root directly.

EC-CouncilCertified Network Defender

Domain 2Objective 3

Endpoint Security Linux Systems CND Practice Questions (Page 1)

Part of the Perimeter and Endpoint Security domain, which makes up ~24% of our current practice bank.

47questions here

10free pages

9concepts

Questions 1–5

1application · medium
A Linux administrator is setting up a shared project directory for a development team. The team has three members who need read/write access, and a manager who needs read-only access. The directory must be accessible only to the team and the manager, not to other users on the system. Which approach enforces least privilege while meeting these requirements?
Select an answer first
2expert · hard
A Linux administrator is setting up audit logging to detect unauthorized file access. The requirement is to log all read attempts to a sensitive file, but not to log successful reads by a specific privileged user. Which audit rule should be configured?
Select an answer first
3application · medium
A company runs a mixed environment with Windows and Linux servers. The security team wants to deploy antivirus protection on Linux endpoints to detect malware that could be transferred from Windows systems. Which approach is most effective?
Select an answer first
4application · medium
A Linux server is being hardened for production use. The administrator needs to ensure that only the root user can execute certain system administration commands. Which configuration is most appropriate?
Select an answer first
5foundation · easy
Which command is used to create a new user account on a Linux system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.

Endpoint Security Linux Systems CND Practice Questions (Page 1)

Questions 1–5

A Linux administrator is setting up audit logging to detect unauthorized file access. The requirement is to log all read attempts to a sensitive file, but not to log successful reads by a specific privileged user. Which audit rule should be configured?

A company runs a mixed environment with Windows and Linux servers. The security team wants to deploy antivirus protection on Linux endpoints to detect malware that could be transferred from Windows systems. Which approach is most effective?

A Linux server is being hardened for production use. The administrator needs to ensure that only the root user can execute certain system administration commands. Which configuration is most appropriate?

Which command is used to create a new user account on a Linux system?

Keep studying — Perimeter and Endpoint Security