07 Flashcards

1
Q

in what file is the banner stored?

A

/etc/issue.net

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Where is the message of the day stored? (motd)

A

/etc/motd

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How do I make it so the ssh login displays a banner?

A

go too /etc/ssh/sshd_config
/ Banner
replace #Banner with /etc/issue.net

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Hpw do I access the sendmail banner? how do I edit it?

A

telnet 192.168.0.80 25

Go too the vi /etc/mail/sendmail.cif
/ Smtp
change
SmtoGreetingMessage-$j Sendmail $v$z; $b

too
SmtpGreetingMessage= Mail Server Ready

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

A ___________________________ monitors system internals for changes made to files, directories, user accounts, and other system properties.

A

Host-based intrusion detection system (HIDS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

___________________ is a HIDS technology used to scan, analyze, and report on unexpected changes to specified files

A

File integrity moniteriung FIM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the three main hashes?

_______ Secure one-way Hash used to create digital signatures

_________ A cryptographic hash function that produces hashes in different lengths, varying from from 128 to 256 bits

_______ Widely used 128-bit hash value, expressed as a 32-digit hexadecimal number commonly used to check file integrity

________ an error-detecting code that checks chunks of raw data for error and accidental changes

A

Haval

SHA

MD5

CRC-32

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

what tool do I use to verify a files hash, and how do I use it?

A

md5sum
/bin/ls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

_______ is a Linux, host-based IDS used to monitor and send alerts on identified file system changes

A

tripwire

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are the key files for tripwire?

A

/etc/tripwire (config)

/var/lib/tripwire

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the name of the encoded policy tripwire file

What is the name of the encoded configuration tripwire config file?

A

tw.pol

tw.cfg

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the policy rule format for a tripwre config?

A

object_name > property_mask

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

_________ is a user module accessed via CLI to enter firewall rules into predefined tables

A

IPtables

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

__________ is a kernel module that filters, and is considered a first match engine

A

Netfilter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the three iptables table types?

A

Filter, NAT, Mangling

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the two most common default policies in iptables?

A

ACCEPT and DROP