A company requires that all Linux endpoints enforce a strong password policy: minimum length of 12 characters, complexity with at least one uppercase letter, one lowercase letter, one digit, and one special character, and account lockout after five failed attempts. Which configuration should the administrator implement?

Set the password policy in /etc/login.defs and enable SELinux enforcing mode.

Install and configure fail2ban to lock accounts after failed attempts and set password length in /etc/pam.d/common-auth.

Use chage to set password expiration and modify /etc/shadow to enforce complexity.

Configure PAM modules pam_pwquality.so for password strength and pam_faillock.so for lockout in the appropriate PAM configuration files.

A Linux server runs a legacy application that requires a specific kernel module and listens on a non-standard port. The server is also used for file sharing via Samba. The administrator wants to harden the server without breaking the legacy application. Which approach should be taken?

Enable SELinux in enforcing mode and create custom policies to allow the legacy application's required operations.

Disable SELinux and rely on iptables to restrict access to the legacy application's port.

Set SELinux to permissive mode and use audit2allow to generate policies based on the application's behavior.

Use AppArmor instead of SELinux and set the legacy application to complain mode.

A security administrator needs to monitor for unauthorized file access on a Linux server. The administrator wants to be alerted when any user attempts to read a specific confidential file. Which tool should be used?

Set up a cron job to run 'ls -l' on the file every minute.

Enable SELinux to log all file access attempts.

Use the 'stat' command periodically to check file access times.

Configure auditd with a watch rule on the file to log all read accesses.

EC-CouncilCertified Network Defender

Domain 2Objective 3

Endpoint Security Linux Systems CND Practice Questions (Page 2)

Part of the Perimeter and Endpoint Security domain, which makes up ~24% of our current practice bank.

47questions here

10free pages

9concepts

Questions 6–10

6application · medium
A company requires that all Linux endpoints enforce a strong password policy: minimum length of 12 characters, complexity with at least one uppercase letter, one lowercase letter, one digit, and one special character, and account lockout after five failed attempts. Which configuration should the administrator implement?
Select an answer first
7expert · hard
A Linux server runs a legacy application that requires a specific kernel module and listens on a non-standard port. The server is also used for file sharing via Samba. The administrator wants to harden the server without breaking the legacy application. Which approach should be taken?
Select an answer first
8application · medium
A security administrator needs to monitor for unauthorized file access on a Linux server. The administrator wants to be alerted when any user attempts to read a specific confidential file. Which tool should be used?
Select an answer first
9foundation · easy
Which of the following is a common open-source antivirus solution for Linux?
Select an answer first
10foundation · easy
Which tool is used to capture and analyze network traffic on a Linux endpoint?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.

Endpoint Security Linux Systems CND Practice Questions (Page 2)

Questions 6–10

A Linux server runs a legacy application that requires a specific kernel module and listens on a non-standard port. The server is also used for file sharing via Samba. The administrator wants to harden the server without breaking the legacy application. Which approach should be taken?

A security administrator needs to monitor for unauthorized file access on a Linux server. The administrator wants to be alerted when any user attempts to read a specific confidential file. Which tool should be used?

Which of the following is a common open-source antivirus solution for Linux?

Which tool is used to capture and analyze network traffic on a Linux endpoint?

Keep studying — Perimeter and Endpoint Security