Endpoint Security Linux Systems CND Practice Questions (Page 10)

Questions 46–47

1. 46expert · hard

   A Linux server is running a web server that needs to bind to port 80. The administrator wants to harden the server by running the web server as a non-root user. Which configuration is required to allow binding to port 80 without root privileges?

   • ARun the web server as root and use a capability to drop privileges after binding.
   • BUse SELinux to allow the non-root user to bind to port 80.
   • CSet the web server binary to have the setuid bit and run it as a non-root user.
   • DUse iptables to redirect traffic from port 80 to a high port that the non-root user can bind to.
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   An organization wants to implement two-factor authentication (2FA) for SSH logins on all Linux servers. The current environment uses password authentication. Which PAM-based approach should be used?

   • AConfigure PAM to use pam_google_authenticator.so for SSH logins, requiring a one-time password in addition to the regular password.
   • BDisable password authentication and use only SSH keys.
   • CSet the SSH configuration to require both a password and a passphrase for the same account.
   • DChange the SSH port to a non-standard port to add security.
   Reveal Solution Discussion Select an answer first