What is the primary purpose of deploying antivirus software on a Linux endpoint?

To replace the need for regular system updates

To detect and remove malware that may target Linux or be stored on the system

To monitor network traffic for intrusions

A Linux server is behind a NAT and has a public IP address. The administrator wants to allow inbound SSH from the internet but only from a specific set of IP addresses that change periodically. Which approach should be used to maintain security while accommodating the changing IPs?

Use iptables with a recent match to limit the rate of SSH connections and allow all IPs.

Use a firewall management tool like firewalld with a rich rule that allows SSH from a specific IP set, and update the rule when the IPs change.

Use a dynamic DNS service and configure iptables to allow the resolved IP address.

Use a fail2ban configuration to block IPs after repeated failed attempts, and allow all IPs initially.

A Linux endpoint is suspected of being compromised. The incident responder needs to capture a snapshot of running processes, network connections, and logged-in users to preserve evidence. Which command sequence should be used?

Run 'ps aux', 'ss -tunap', and 'who' and save the output to a file.

Run 'history' and 'last' to see command history and logins.

Run 'top' and 'netstat -r' and take a screenshot.

Run 'shutdown -h now' to halt the system and then boot from a forensic image.

Which of the following is a common threat specifically targeting Linux endpoints?

Macro viruses embedded in Office documents

Phishing emails that trick users into revealing passwords

Ransomware that encrypts files and demands payment

Rootkits that hide malicious activity from the operating system

EC-CouncilCertified Network Defender

Domain 2Objective 3

Endpoint Security Linux Systems CND Practice Questions (Page 3)

Part of the Perimeter and Endpoint Security domain, which makes up ~24% of our current practice bank.

47questions here

10free pages

9concepts

Questions 11–15

11foundation · easy
What is the primary purpose of deploying antivirus software on a Linux endpoint?
Select an answer first
12expert · hard
A Linux server is behind a NAT and has a public IP address. The administrator wants to allow inbound SSH from the internet but only from a specific set of IP addresses that change periodically. Which approach should be used to maintain security while accommodating the changing IPs?
Select an answer first
13application · medium
A Linux endpoint is suspected of being compromised. The incident responder needs to capture a snapshot of running processes, network connections, and logged-in users to preserve evidence. Which command sequence should be used?
Select an answer first
14foundation · easy
Which of the following is a common threat specifically targeting Linux endpoints?
Select an answer first
15foundation · easy
To enforce least privilege, which permission should be assigned to a user who only needs to read a file?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.