Which of the following is a recommended SSH hardening measure?

Set the SSH port to 22 to avoid detection.

Allow password authentication for all users to simplify access.

Disable root login over SSH by setting PermitRootLogin no in sshd_config.

Use SSH protocol version 1 for compatibility.

A Linux administrator is responsible for a server that runs a critical application. The application vendor has provided a patch in the form of a .deb package, but the administrator is concerned about the integrity of the package. The vendor has also provided a SHA256 checksum and a GPG signature. Which steps should the administrator take to verify the package before installation?

Verify the SHA256 checksum, then install with dpkg -i, and skip GPG signature verification.

Verify the GPG signature of the package, then verify the SHA256 checksum, then install with dpkg -i.

Install the package with dpkg -i, then verify the checksum and GPG signature.

Only verify the GPG signature and install with dpkg -i, skipping the checksum.

Which of the following is a common attack surface on a Linux system that should be minimized to improve security?

The existence of a firewall configuration

Unnecessary network services listening on open ports

The presence of a graphical desktop environment

The use of strong passwords for user accounts

GIAC Security Essentials

Domain 4Objective 4

Linux Security and Hardening GSEC Practice Questions (Page 5)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

10concepts

Questions 21–25

21foundation · easy
Which of the following is a recommended SSH hardening measure?
Select an answer first
22application · medium
A Linux server is running a web application that occasionally needs to handle a burst of traffic. The administrator wants to limit the number of file descriptors and processes that the web server user can use, to prevent a compromised process from exhausting system resources. Which configuration file should be used to set these limits?
Select an answer first
23expert · medium
A Linux administrator is responsible for a server that runs a critical application. The application vendor has provided a patch in the form of a .deb package, but the administrator is concerned about the integrity of the package. The vendor has also provided a SHA256 checksum and a GPG signature. Which steps should the administrator take to verify the package before installation?
Select an answer first
24foundation · easy
Which tool is specifically designed to detect rootkits on Linux systems by comparing system binaries and configuration files against known-good values?
Select an answer first
25foundation · easy
Which of the following is a common attack surface on a Linux system that should be minimized to improve security?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Linux Security and Hardening GSEC Practice Questions (Page 5)

Questions 21–25

Which of the following is a recommended SSH hardening measure?

Which tool is specifically designed to detect rootkits on Linux systems by comparing system binaries and configuration files against known-good values?

Which of the following is a common attack surface on a Linux system that should be minimized to improve security?

Keep studying — Endpoint and Platform Security