An administrator wants to create a compressed backup of the /etc directory and save it to /backup/etc-backup.tar.gz, while excluding any files with the .log extension. Which command accomplishes this?

tar -czf /backup/etc-backup.tar.gz --exclude='*.log' /etc

zip -r /backup/etc-backup.tar.gz /etc -x '*.log'

cp -r /etc /backup/etc-backup.tar.gz

tar -xzf /backup/etc-backup.tar.gz /etc

A security audit on a systemd-based Linux server found that the 'telnet.socket' unit is active and listening. The service is not required for business operations. Which command sequence disables and stops the socket so it does not start on boot?

systemctl kill telnet.socket && systemctl disable telnet.socket

systemctl daemon-reload && systemctl stop telnet.socket

systemctl disable --now telnet.socket

systemctl stop telnet.socket && systemctl mask telnet.socket

A system administrator needs to troubleshoot why a service named 'webapp' is not starting after a reboot. The service is enabled, but it fails during startup. Which command will show the most detailed error information from the service's startup?

journalctl -u webapp.service -b

systemctl status webapp.service

systemctl restart webapp.service

GIAC Security Essentials

Domain 4Objective 3

Linux Fundamentals GSEC Practice Questions (Page 4)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

10concepts

Questions 16–20

16expert · hard
A security scan on a RHEL 9 server identifies that the 'httpd' package has a known vulnerability. The server is subscribed to the Red Hat Enterprise Linux repository. The administrator needs to update only the httpd package and its dependencies, without updating other packages. Which command accomplishes this?
Select an answer first
17expert · medium
A shared directory /data is used by a team. The administrator needs to ensure that all new files created in this directory are automatically owned by the 'team' group, regardless of the creating user's primary group. Which command should be used?
Select an answer first
18application · medium
An administrator wants to create a compressed backup of the /etc directory and save it to /backup/etc-backup.tar.gz, while excluding any files with the .log extension. Which command accomplishes this?
Select an answer first
19application · medium
A security audit on a systemd-based Linux server found that the 'telnet.socket' unit is active and listening. The service is not required for business operations. Which command sequence disables and stops the socket so it does not start on boot?
Select an answer first
20expert · medium
A system administrator needs to troubleshoot why a service named 'webapp' is not starting after a reboot. The service is enabled, but it fails during startup. Which command will show the most detailed error information from the service's startup?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Linux Fundamentals GSEC Practice Questions (Page 4)

Questions 16–20

A shared directory /data is used by a team. The administrator needs to ensure that all new files created in this directory are automatically owned by the 'team' group, regardless of the creating user's primary group. Which command should be used?

An administrator wants to create a compressed backup of the /etc directory and save it to /backup/etc-backup.tar.gz, while excluding any files with the .log extension. Which command accomplishes this?

A security audit on a systemd-based Linux server found that the 'telnet.socket' unit is active and listening. The service is not required for business operations. Which command sequence disables and stops the socket so it does not start on boot?

A system administrator needs to troubleshoot why a service named 'webapp' is not starting after a reboot. The service is enabled, but it fails during startup. Which command will show the most detailed error information from the service's startup?

Keep studying — Endpoint and Platform Security