IS3440 CHAP 7 NETWORKS, FIREWALLS, AND MORE

Question 1

(COMMAND) ___ lists the configured profiles of various commands and services.

Answer 1

(COMMAND) apparmor_status

Question 2

(COMMAND) ___ is a service for running administrative jobs on a one-time basis; protected by the /etc/at.allow and /etc/at.deny files.

Answer 2

(COMMAND) at

Question 3

(COMMAND) ___ is a SELinux command that can be used to change the AVC contexts associated with a file.

Answer 3

(COMMAND) chcon

Question 4

(COMMAND) ___ is a service for running administrative jobs on a regular basis; protected by the /etc/cron.allow and /etc/cron.deny files.

Answer 4

(COMMAND) cron

Question 5

(COMMAND) ___ is a SELinux command that returns the context settings of a specified file or directory.

Answer 5

(COMMAND) secon

Question 6

(COMMAND) ___ Is a SELinux command that returns the overall status of SELinux on the local system.

Answer 6

(COMMAND) sestatus

Question 7

___ in security, is an access permission represented by a bitmap; commonly stored for SELinux security in an ___ ___ cache.

Answer 7

Access vector

Question 8

___ is an access permission associated with SELinux.

Answer 8

(AVC) Access vector cache

Question 9

___ is a mandatory access control system used to create security profiles for different programs. Uses Linux security modules in the kernel. Not compatible with SELinux.

Answer 9

(AppArmor) Application Armor

Question 10

___ is a protocol for validating users before allowing access, which includes a challenge to verify the identity of a user.

Answer 10

(CHAP) Challenge-Handshake Authentication Protocol

Question 11

___ Is an attack based on overloading a network service, denying access to regular users. Not all are malicious, as they can be accidental results of certain types of connection attempts. Nevertheless, they should be blocked or slowed down as if they were attacks.

Answer 11

(DoS) Denial of service attack

Question 12

___ is a professional organization; it is also the group behind standards such as 802.11 for wireless communication.

Answer 12

(IEEE) Institute of Electrical and Electronics Engineers

Question 13

___ is a group of standards for digital transmission of voice and data over the public switched telephone network.

Answer 13

(ISDN) Integrated Services digital Network

Question 14

___ is the organization responsible for domain names, IP addresses, and Transmission Control Protocol/Internet Protocol (TCP/IP) protocols on the internet.

Answer 14

(IANA) Internet Assigned Numbers Authority

Question 15

___ supports atuomated Internet Protocol (IP) addressing without a Dynamic Host Configuration Protocol (DHCP) server. Related to Microsoft’s automatic private IP addressing and Apple’s Bonjour protocols. Communicates using both TCP and UDP over port 5353.

Answer 15

(mDNS) Multicast Domain Name Service protocol

Question 16

___ is a protocol for validating users before allowing access.

Answer 16

(PAP) Password Authentication Protocol

Question 17

____ is a reference to the current digital telephone network.

Answer 17

(PSDN) Public switched data network

Question 18

___ is a reference to the regular telephone for voice communications.

Answer 18

(PSTN) Public switched telephone network

Question 19

___ is a system for remote user authentication, frequently used to authenticate connections over telephone modems.

Answer 19

(RADIUS) Remote Authentication Dial in User Service

Question 20

___ is a mandatory access control system that uses Linux security modules in the kernel. Developed by the US National Security Agency. Not compatible with AppArmor.

Answer 20

(SELinux) Security Enhanced Linux

Question 21

___ is an access control list system for services associated with the internet super servers. It also can protect services linked to the
libwrap.so.0 library.

Answer 21

TCP Wrappers

Question 22

___ is a modulator-demodulator for translating data bits into the sine waves associated with the PSTN. Cable ___ and DSL modems are not true modems, as they do not modulate or demodulate data.

Answer 22

Telephone modem

Question 23

___ is a method for interpreting the emissions from computer displays to recover the associated image.

Answer 23

Van Eck phreaking

Question 24

___ is software that can help detect unauthorized attacks on a wireless network; one example is available from the aircrack-ng package.

Answer 24

(WIDS) Wireless intrusion detection system

Question 25

1. Well known TCP/IP ports range from ___ to ___.

Answer 25

0 to 1023

Question 26

2. The (command) nmap checks for open ports on a remote system.
   TRUE OR FALSE

Answer 26

TRUE

Question 27

3. Which of the following configuration files is considered first with respect to TCP Wrapper security?
4. /etc/inetd.conf
5. /etc/xinetd.conf
6. /etc/hosts.allow
7. /etc/hosts.deny

Answer 27

/etc/hosts.allow

Question 28

4. Which of the following library files is associated with TCP Wrappers?
5. /etc/libwrap/so/0
6. /lib/libwrap.so.0
7. /usr/lib/libwrap.so/0
8. /var/lib/libwrap.so.0

Answer 28

/lib/libwrap.so.0

Question 29

5. Which of the following iptables command switches adds a rule to the middle of a chain?
6. -A
7. -I
8. -L
9. -C

Answer 29

-I

Question 30

6. Which of the following actions is NOT used with the -j switch for the iptables command?
7. DROP
8. REJECT
9. LOG
10. FORWARD

Answer 30

FORWARD

Question 31

7. The iptables command switch associated with a destination port is ___.

Answer 31

–dport

Question 32

8. The PSDN network is associated with regular telephone modems.
   TRUE OR FALSE

Answer 32

FALSE

Question 33

9. Which of these files must exist for regular users to access the a t daemon?
10. /etc/a t
11. /etc/a t.deny
12. /etc/a t.conf
13. /etc/a t.a t.deny

Answer 33

/etc/a t.deny

Question 34

10. which of the following IEEE protocols is most closely associated with wireless networking?
11. 802.3
12. 802.5
13. 802.11
14. 802.15

Answer 34

802.11

Question 35

11. Which of the following commands lists the SELinux characteristics of a file?
12. ls filename
13. ls -SE filename
14. ls -l filename
15. ls -Z filename

Answer 35

s -Z filename

Question 36

12. Which of the following commands can be used to customize the SELinux characteristics of a file?
13. fixfiles
14. chcon
15. restorecon
16. secon

Answer 36

chcon

Question 37

13. To start the SELinux Troubleshooter in a GUI, run the following command: _____.

Answer 37

sealert -b

Question 38

14. Which of the following directories include active AppArmor profiles?
15. /etc/apparmor/
16. /etc/apparmor.d/
17. /use/share/doc/apparmor-profiles/extras/
18. /usr/share/doc/apparmor-profiles/

Answer 38

/etc/apparmor.d/