Title: Exam 1
Course: CIS 208: Linux/UNIX III: Intermediate System Administration, Networking, and Security ~ For IGNITE Review

Q: Which of the following are unroutable IP addresses designed for use locally?
- 10.3.2.1
- 127.0.0.1
- 152.7.1.15
- 8.8.8.8
A: 10.3.2.1; 127.0.0.1

Q: The application layer manages MAC addresses on a network.
- True
- False
A: False

Q: DHCP can assign:
- IP addresses
- time servers
- MAC addresses
- nameservers
A: IP addresses; time servers; nameservers

Q: A single subnet can exist on multiple physical networks, but a single physical network cannot support multiple logical subnets.
- True
- False
A: False

Q: What command, including the options, shows the current rules for iptables?
A: iptables -nL / iptables -Ln / iptables -L

Q: Network Address Translation
- is rarely used now the IPv6 is available.
- can provide Internet access to a subnet.
- requires specialized routers.
- is not supported in Linux.
A: can provide Internet access to a subnet.

Q: Which command creates a socks5 proxy?
- ssh -fND 1080 jumpbox
- ssh -fNL 1080:localhost:1080 jumpbox
- ssh -fNR 1080:localhost:1082 jumpbox
- ssh -p1080 --socks5 jumpbox
A: ssh -fND 1080 jumpbox

Q: OpenVPN runs as a service.
- True
- False
A: True

Q: Which command does not manage the firewall on a Linux system?
- lokkit
- system-config-firewall
- iptables
- system-config-iptables
A: system-config-iptables

Q: After running "ssh -fNL 80:webserver:80 jumpbox", what URL would you use to connect to the webserver?
- http://webserver
- https://webserver
- http://jumpbox/webserver
- http://localhost
A: http://localhost

Q: Which record type(s) hold IP addresses?
- A
- AAAA
- CNAME
- AA
A: A; AAAA

Q: Which record type contains the serial number of the zone?
- A
- NS
- SOA
- PTR
A: SOA

Q: What is required to register a domain?
- an account with a registrar.
- a fee.
- a list of nameservers.
- contact information.
A: an account with a registrar.; a fee.; a list of nameservers.; contact information.

Q: The registrar will provide IP addresses for a domain.
- True
- False
A: False

Q: An authoritative server is:
- a master or a slave.
- a forwarder.
- a caching server.
- an outdated term.
A: a master or a slave.

Q: Running "rpm -qd bind" returns no results.
- True
- False
A: False

Q: A view:
- configures a domain or subdomain.
- determines what resources a client can access.
- is required by a registrar.
- is a security level for DNS.
A: determines what resources a client can access.

Q: A zone:
- configures a domain or subdomain.
- determines what resources a client can access.
- is required by a registrar.
- is a security level for DNS.
A: configures a domain or subdomain.

Q: It is considered a best practice to not run an internal view and an external view on the same server.
- True
- False
A: True

Q: It is okay to rollback to a previous serial number when undoing a change to a zone.
- True
- False
A: False

Q: When testing authoritative servers:
- verify network connectivity on port 53, udp and tcp.
- test responses using the host or nslookup commands.
- ensure that all servers show the same serial number for a zone.
- retrieve the SOA record.
A: verify network connectivity on port 53, udp and tcp.; test responses using the host or nslookup commands.; ensure that all servers show the same serial number for a zone.; retrieve the SOA record.

Q: NFS:
- uses the operating system's user accounts.
- uses the user database in /etc/nfs/nfsusers.
- uses the user database in /etc/sysconfig/nfs.
- does not distinguish users.
A: uses the operating system's user accounts.

Q: NFS v3 has been deprecated after the release of version 4.
- True
- False
A: False

Q: Which option wil ensure that any errors will be noticed immediately?
- sync
- async
- ro
- rw
A: sync

Q: FTPS is:
- another name for FTP.
- another name for ssh/scp.
- FTP over SSL
- unencrypted FTP.
A: FTP over SSL

Q: When planning an FTP implementation, it is not possible to include shared accounts.
- True
- False
A: False

Q: CIFS is short for Commumity Interactive File System.
- True
- False
A: False

Q: Which of these commands will alter a samba password for an existing user?
- smbpasswd -a user
- smbpasswd user
- passwd user
- passwd --samba user
A: smbpasswd user

Q: What command is used as a command line client for samba in Linux?
A: smbclient

Q: By default all operating system users have accounts for use by samba.
- True
- False
A: False

Q: By default, the cups-pdf printer saves files to:
- $HOME/Desktop
- /home/desktop
- /var/spool/cups-pdf
- the user's home directory.
A: $HOME/Desktop

Q: IPv6:
- replaces IPv4.
- coexists with IPv4.
- disables IPv4.
- is not currently in use.
A: coexists with IPv4.

Q: What is the IPv6 localhost address?
A: ::1 / ::1/128

Q: The link local address:
- is automatically assigned.
- is an IPv6 address.
- connects to other hosts on the same network.
- is the localhost address.
A: is automatically assigned.; is an IPv6 address.; connects to other hosts on the same network.

Q: An IPv6 address which is used by a single unique device is:
- multicast.
- unicast.
- anycast.
- castless.
A: unicast.

Q: The default route is assigned to ::/0.
- True
- False
A: True

Q: Services such as sshd and postfix:
- do not support IPv6.
- support either IPv4 or IPv6, but not both.
- can be configured to use IPv6 or not.
- require a special license to support IPv6
A: can be configured to use IPv6 or not.

Q: The first OSI layer is:
- the physical layer.
- the link layer.
- the transport layer
- the application layer.
A: the physical layer.

Q: The physical layer:
- uses a MAC address.
- uses an IP address.
- can be wired or wireless.
- requires a DNS nameserver.
A: can be wired or wireless.

Q: TCP, UDP and ICMP are part of the:
- link layer.
- application layer
- transport layer
- network layer
A: transport layer

Q: There is no need to test DNS name resolution when troubleshooting network issues.
- True
- False
A: False

Q: Each network interface can only have one IP address.
- True
- False
A: False

Q: The OSI Model applies to:
- only IPv4.
- only IPv6.
- both IPv4 and IPv6.
- either IPv4 or IPv6, but not both.
A: both IPv4 and IPv6.