Course: CIS 208: Linux/UNIX III: Intermediate System Administration, Networking, and Security ~ For IGNITE Review

Q: how many fingers does the average person have?
- 10
- 9
- 10 1/2
- 11
A: 10

Q: Each network interface can only have one IP address.
- True
- False
A: False

Q: TCP, UDP and ICMP are part of the:
- Link layer
- Application layer
- Transport layer
- Network layer
A: Transport layer

Q: The OSI Model applies to:
- Only IPv4.
- Only IPv6.
- Both IPv4 and IPv6.
- Either IPv4 or IPv6, but not both.
A: Both IPv4 and IPv6.

Q: The OSI Model presents 7 layers for networking.
- True
- False
A: True

Q: The [x] layer uses MAC address for communication within a LAN.
A: data link / datalink

Q: The first layer is:
- The physical layer.
- The link layer.
- The transport layer.
- The application layer.
A: The physical layer.

Q: The physcial layer:
- Uses a MAC address.
- Uses an IP address.
- Can be wired or wireless.
- Requires a DNS nameserver.
A: Can be wired or wireless.

Q: There is no need to test DNS name resolution when troubleshooting network issues.
- True
- False
A: False

Q: What is minimally required to configure an IPv4 network interface:
- An IPv4 address.
- A network mask.
- An /etc/hosts file.
- A Network Time Protocol server.
A: An IPv4 address.; A network mask.

Q: Which command is used to verify the physical layer for a network device?
- ifconfig
- ethtool
- netcheck
- ifconfig -a
A: ethtool

Q: A certificate authority needs to have a certificate.
- True
- False
A: True

Q: Browsers will generate an error if:
- The hostname doesn't match the certificate's common name.
- The certificate authority is unknown.
- The certificate has expired.
- The website uses php.
A: The hostname doesn't match the certificate's common name.; The certificate authority is unknown.; The certificate has expired.

Q: Fake SSL certificates can be created for a website to impersonate another website.
- True
- False
A: True

Q: Organizations can create a custom certificate authority for development and testing purposes.
- True
- False
A: True

Q: SSL certificates only work with webservers, and not with email or ftp sites.
- True
- False
A: False

Q: The Common Name of a certificate is chosen when creating:
- The CSR.
- The CA.
- The key file.
- The certificate file.
A: The CSR.

Q: The current version of openssl:
- Is vulnerable to HeartBleed.
- Has been updated several times recently.
- Only works on webservers.
- No longer requires key files.
A: Has been updated several times recently.

Q: The files for a CA:
- Should reside on all webservers.
- Should have restricted access.
- Are typically kept in /etc/pki/tls.
- Should reside on the primary webserver only.
A: Should have restricted access.; Are typically kept in /etc/pki/tls.

Q: The key file:
- Should not be stored on a webserver.
- Needs to be readable by the httpd process.
- Needs to be sent with the CSR to the CA.
- Can safely be deleted after the certificate has arrived.
A: Needs to be readable by the httpd process.

Q: Apache can create:
- Access log files.
- Customized access log files.
- Seperate error log files.
- Seperate log files for each virtualhost.
A: Access log files.; Customized access log files.; Seperate error log files.; Seperate log files for each virtualhost.

Q: Mysql is:
- The only open source database.
- Used to run many web applications
- Supported for use by PHP.
- A spreadsheet application.
A: Used to run many web applications; Supported for use by PHP.

Q: Mysql maintains a list of users to secure access to databases.
- True
- False
A: True

Q: NameVirtualHost:
- Is an option for php.
- Is configured in /etc/my.cnf.
- Requires multiple hostnames to share the same IP address.
- Is configured in /etc/named.conf.
A: Requires multiple hostnames to share the same IP address.

Q: PHP settings can be configured in the httpd.conf file.
- True
- False
A: True

Q: PHP version 5 is fully backwards compatible with earlier versions.
- True
- False
A: False

Q: The AllowOverride None option:
- Improves performance on a webserver.
- Disables .htaccess files.
- Enables mysql connections.
- Appears in the httpd.conf file.
A: Improves performance on a webserver.; Disables .htaccess files.; Appears in the httpd.conf file.

Q: The ServerAlias directive allows multiple hostnames to share virtualhost configuration.
- True
- False
A: True

Q: What must be typed before the [Enter] key to complete a command in the mysql client?
A: ; / \g

Q: Which configurations can be set in the /etc/php.ini file?
- date.timezone
- upload_max_filesize
- DocumentRoot
- NameVirtualHost
A: date.timezone; upload_max_filesize

Q: A cd, dvd, usb device or network boot environment is required to perform a bare metal recovery.
- True
- False
A: True

Q: Bare metal recovery is used only to restore data files to a server.
- True
- False
A: False

Q: Good documentation is critical because:
- Another person may need to perform a recovery.
- It may be difficult to remember details when under pressure.
- It may be difficult to remember details when wakened at night.
- It ensures that a recovery can be performed successfully.
A: Another person may need to perform a recovery.; It may be difficult to remember details when under pressure.; It may be difficult to remember details when wakened at night.; It ensures that a recovery can be performed successfully.

Q: It is possible to perform a bare metal recovery while changing the /home partition from ext3 to ext4.
- True
- False
A: True

Q: MBR refers to:
- The Master Boot Record.
- The Magic Binary Receptacle.
- The Microsoft Binding Relator.
- The Multiple Boot Referrence.
A: The Master Boot Record.

Q: Testing a bare metal recovery:
- Should be done as soon as the program is implemented.
- Can be performed on a virtual machine.
- Can cause problems on a network.
- Is unnecessary with 64 bit systems.
A: Should be done as soon as the program is implemented.; Can be performed on a virtual machine.; Can cause problems on a network.

Q: The data for partitions on a hard drive:
- Is stored in the MBR.
- Is restored in a bare metal recovery.
- Is stored in the grub config file.
- Cannot be replicated on another hard drive.
A: Is stored in the MBR.; Is restored in a bare metal recovery.

Q: What should be verified after performing a bare metal recovery?
- System is able to boot.
- Filesystems are mounted without errors.
- Services start automatically.
- All of the other options.
A: All of the other options.

Q: An effective way to test a bare metal recovery is to:
- Restore a server to a new virtual machine.
- Check the log files from the last backup.
- Erase the hard drives in a server them perform a recovery.
- Create custom documentation based on the source documentation.
A: Restore a server to a new virtual machine.

Q: Bare metal recovery refers to restoring the operating system on a server after a hard drive failure or other catastrophe.
- True
- False
A: True

Q: Bare metal recovery software can archive to:
- Magnetic tape.
- iso image files.
- NFS shares.
- NAS devices.
A: Magnetic tape.; iso image files.; NFS shares.; NAS devices.

Q: Before backing up a server, it may be necessary to:
- Back up the MBR.
- Back up the databases.
- Reboot the server.
- Stop all web services.
A: Back up the MBR.; Back up the databases.

Q: Daily backup software:
- Cannot backup system directories.
- Cannot backup user home directories.
- Provides a bare metal recovery solution.
- Keeps multiple copies of the same set of files.
A: Keeps multiple copies of the same set of files.

Q: Documentation should be easy to understand and follow because:
- Someone else may be performing the procedures.
- It may be used at a time of high stress.
- It may be used during off hours.
- All of the other answers are right.
A: All of the other answers are right.

Q: It is always necessary to schedule down time to perform a bare metal backup.
- True
- False
A: False

Q: When performing a test bare metal recovery, it is best to:
- Disable the network connections prior to booting.
- Select a new IP address prior to booting.
- Turn off all services prior to booting.
- Turn off all services immediately after the host has booted.
A: Disable the network connections prior to booting.

Q: An incoming mail relay:
- Is typically placed in a DMZ.
- Filters unwanted email.
- Forwards email to an outbound email relay.
- Listens on TCP port 125.
A: Is typically placed in a DMZ.; Filters unwanted email.

Q: An outgoing mail relay:
- May also be called a smarthost.
- Listens on TCP port 125.
- Filters unwanted email.
- Is an MDA.
A: May also be called a smarthost.

Q: Encryption can be required for client connections to a mail server.
- True
- False
A: True

Q: Encryption can be required for inbound email connections.
- True
- False
A: True

Q: SMTP connections are made on TCP port:
- 22
- 25
- 443
- 445
A: 25

Q: What is the most commonly used open source spam filtering software?
A: spamassassin

Q: Which DNS records are used when resolving the incoming mail server for a domain?
- MX record for the domain.
- A record for the domain.
- A record for the mail server.
- PTR record for the domain.
A: MX record for the domain.; A record for the mail server.

Q: Which of the following commands shows all the current configuration for postfix?
- postfix -l
- postconf
- postfix -n
- postconf -n
A: postconf

Q: Which of these programs are open source MTAs?
- sendmail
- postfix
- exim
- mailq
A: sendmail; postfix; exim

Q: A webmail client:
- Provides access to a user's inbox.
- Provides the ability to send email.
- Requires users to configure smtp and imap settings.
- Requires only a compatible web browser.
A: Provides access to a user's inbox.; Provides the ability to send email.; Requires only a compatible web browser.

Q: Concise and clear documentation:
- Means less calls to the help desk.
- Enables users to support themselves.
- May require multiple documents for a single program.
- Includes a serial number and/or revision date.
A: Means less calls to the help desk.; Enables users to support themselves.; May require multiple documents for a single program.; Includes a serial number and/or revision date.

Q: SSL encryption cannot be used with client connections to a mail server.
- True
- False
A: False

Q: The mail program can be used to send email from within a script.
- True
- False
A: True

Q: When configuring an email client, the smtp port will always be TCP port 25.
- True
- False
A: False

Q: Which of the following refer to an email client?
- MTA
- MUA
- MDA
- MSA
A: MUA

Q: Which of these allow multiple clients to be kept in sync?
- smtp
- pop3
- imap4
- ssl
A: imap4

Q: Which program is best suited for diagnosing email delivery problems?
- nmap
- curl
- telnet
- top
A: telnet

Q: Which program is best suited for diagnosing network connections for email?
- nmap
- wget
- telnet
- top
A: nmap

Q: By default, sar data is kept for:
- One month
- One week
- Two weeks
- One year
A: One month

Q: Monitoring with sar is difficult to implement and configure.
- True
- False
A: False

Q: The logging level of an application should be set to debug:
- When investigating slow response times.
- Only temporarily, until a problem is identified.
- Only if the current logs are not sufficient.
- All the time.
A: When investigating slow response times.; Only temporarily, until a problem is identified.; Only if the current logs are not sufficient.

Q: The logrotate program will automatically rotate all new log files created by custom scripts.
- True
- False
A: False

Q: The sar command with no options:
- Shows cpu usage.
- Generates an error.
- Shows output from the previous day.
- Shows memory usage.
A: Shows cpu usage.

Q: The sar program is included in which package?
- sysstat
- sar
- monitoring-utils
- iostat
A: sysstat

Q: Which command can be used to test the time to set up a network connection?
- nmap
- time
- nmon
- sar
A: nmap

Q: Which command would retrieve a file from a webserver?
- wget
- time
- apt-get
- webget
A: wget

Q: A "false positive" is:
- A misconfigured file in /etc/nagios.
- An alert for a problem that doesn't exist.
- Also called a "true negative".
- Any alert for the ssh service.
A: An alert for a problem that doesn't exist.

Q: A template contains default settings which can be inherited by other objects.
- True
- False
A: True

Q: A user in Nagios:
- Is assigned a password.
- Requires a valid email address.
- Can login to the website.
- Must be granted privileges.
A: Is assigned a password.; Can login to the website.; Must be granted privileges.

Q: Custom commands can be written for Nagios to test non-standard services.
- True
- False
A: True

Q: Nagios can be used to monitor services and to send email or text messages when there is a problem.
- True
- False
A: True

Q: The website for a Nagios server can display on a single page:
- All hosts.
- Only hosts with problems.
- All services.
- Only services with problems.
A: All hosts.; Only hosts with problems.; All services.; Only services with problems.

Q: Which of the following are valid object types in Nagios?
- host
- service
- contact
- timeperiod
A: host; service; contact; timeperiod

Q: Which type of object would be used to identify a router?
- service
- host
- contact
- device
A: host

Q: A PXE boot menu cannot include an option to boot from the local hard drive.
- True
- False
A: False

Q: A graphical environment is required to run system-config-kickstart.
- True
- False
A: True

Q: A kickstart file can be used when installing from:
- A PXE boot menu.
- An installation DVD.
- A USB thumbdrive.
- A net install CD.
A: A PXE boot menu.; An installation DVD.; A USB thumbdrive.; A net install CD.

Q: DHCP provides:
- An IP address.
- The kernel image.
- The init ramdisk image.
- The kickstart file.
A: An IP address.

Q: It is bad to include the root account's password in a kickstart file because it is left unencrypted.
- True
- False
A: False

Q: It is possible to include help screens in a PXE boot menu.
- True
- False
A: True

Q: TFTP provides:
- An IP address.
- The kernel image.
- The init ramdisk
- The kickstart file.
A: The kernel image.; The init ramdisk

Q: Within a kickstart file, a hard drive:
- Can be partitioned and formatted.
- Must be preformatted.
- Cannot use LVM partitions.
- Cannot use pre-existing partitions.
A: Can be partitioned and formatted.

Q: A NAT network in libvirt:
- Allows the host to connect to the guest.
- Allows the guest to connect to the host.
- Has a DHCP server provided by default.
- Is the default type of network on a new installation.
A: Allows the host to connect to the guest.; Allows the guest to connect to the host.; Has a DHCP server provided by default.; Is the default type of network on a new installation.

Q: A bridged network in libvirt:
- Allows guests to connect to a physical network.
- Can work over a wifi connection.
- Is the default network type for libvirt.
- Does not support DHCP configuration.
A: Allows guests to connect to a physical network.

Q: A storage pool can be:
- An LVM volume group.
- A directory on a filesystem.
- An iscsi target.
- A network adapter.
A: An LVM volume group.; A directory on a filesystem.; An iscsi target.

Q: By default a regular user has permission to manage libvirt virtual machines.
- True
- False
A: False

Q: KVM requires a 64 bit kernel.
- True
- False
A: True

Q: VirtualBox:
- Is open source software.
- Is provided by Oracle.
- Runs on 32 or 64 bit kernels.
- Does not have a graphical interface.
A: Is open source software.; Is provided by Oracle.; Runs on 32 or 64 bit kernels.

Q: Which command is used to convert disk images from one type to another?
- qemu-img
- virsh convert
- virsh disk convert
- dd
A: qemu-img

Q: Which type of disk image file has the best performance?
- raw
- vmdk
- qcow2
- vdi
A: raw

Q: A DHCP client is required to use all settings provided by the DHCP server.
- True
- False
A: False

Q: A MAC address:
- Can be determined using arp.
- Has four octets of 16 bit numbers.
- Is part of the IP layer.
- Is assigned by a DHCP server.
A: Can be determined using arp.

Q: A single physical network can support multiple logical subnets.
- True
- False
A: True

Q: A single subnet can exist on multiple physical networks.
- True
- False
A: True

Q: DHCP can assign:
- IP addresses
- MAC addresses
- Time servers
- Name servers
A: IP addresses; Time servers; Name servers

Q: The [x] command shows the peer status of an ntp server.
A: ntpq -p / ntpq

Q: The [x] layer manages IP addresses.
A: network

Q: The application layer manages MAC addresses on a network.
- True
- False
A: False

Q: Which directive determines a time source in an ntp.conf file?
- Server
- Source
- Restrict
- Allow
A: Server

Q: Which of the following are unroutable IP addresses designed for use locally?
- 127.0.0.1
- 10.1.2.3
- 182.2.5.5
- 8.8.8.8
A: 127.0.0.1; 10.1.2.3

Q: A system running iptables can:
- Provide firewall services.
- Protect against mal-ware.
- Provide masquerading services.
- Remap inbound connections.
A: Provide firewall services.; Provide masquerading services.; Remap inbound connections.

Q: After running "ssh -fNL 80:webserver:80 jumpbox", what URL would you use to connect to the webserver?
- http://webserver
- https://webserver
- http://jumpbox/webserver
- http://localhost
A: http://localhost

Q: Network Address Translation
- Is rarely used now the IPv6 is available.
- Can provide Internet access to a subnet.
- Requires specialized routers.
- Is not supported in Linux.
A: Can provide Internet access to a subnet.

Q: OpenVPN runs as a service.
- True
- False
A: True

Q: OpenVPN:
- Provides remote accesss to a protected network.
- Provides access from a network to a remote client.
- Encrypts data over untrusted networks.
- Requires a webserver for remote access.
A: Provides remote accesss to a protected network.; Provides access from a network to a remote client.; Encrypts data over untrusted networks.

Q: The [ x ] command shows the current rules for iptables?
A: iptables -nL / iptables -Ln / iptables -L

Q: To enable encryption, OpenVPN uses:
- Private keys
- ssl certificates
- Either keys or certificates
- Neither keys nor certificates
A: Either keys or certificates

Q: When creating a reverse tunnel, the original ssh connection is created on the client.
- True
- False
A: False

Q: Which command creates a socks5 proxy?
- ssh -fND 1080 jumpbox
- ssh -fNL 1080:localhost:1080 jumpbox
- ssh -fNR 1080:localhost:1082 jumpbox
- ssh -p1080 --socks5 jumpbox
A: ssh -fND 1080 jumpbox

Q: Which command(s) can manage the firewall?
- lokkit
- system-config-firewall
- iptables
- system-config-iptables
A: lokkit; system-config-firewall; iptables

Q: A [x] record provides a hostname for an IP address.
A: PTR > / PTR>

Q: An authoritative server is:
- A master or a slave.
- A forwarder.
- A caching server.
- An outdated term.
A: A master or a slave.

Q: DNS cannot be used to resolve IP addresses to hostnames.
- True
- False
A: False

Q: The [x] command queries dns servers for resource records.
A: host / nslookup

Q: The registrar will provide IP addresses for a domain.
- True
- False
A: False

Q: What is required to register a domain?
- An account with a register.
- A fee.
- A list of nameservers.
- Contact information.
A: An account with a register.; A fee.; A list of nameservers.; Contact information.

Q: When troubleshooting DNS issues, it's best to start:
- Checking the servers.
- Checking IntoDNS.
- A client on the internal network.
- A client on the Internet.
A: Checking the servers.

Q: Which record type contains the serial number of the zone?
- A
- NS
- SOA
- PTR
A: SOA

Q: Which record type tells where to deliver email for a domain?
A: MX

Q: Which record type(s) hold IP addresses?
- A
- AAAA
- CNAME
- AA
A: A; AAAA

Q: A view:
- Configures a domain or subdomain.
- Determines what resources a client can access.
- Is required by a registrar.
- Is a security level for DNS.
A: Determines what resources a client can access.

Q: A zone:
- Configures a domain or subdomain.
- Determines what resources a client can access.
- Is required by a registrar.
- Is a security level for DNS.
A: Configures a domain or subdomain.

Q: By default named events are logged in [x] on Red Hat like systems.
A: /var/log/messages / messages

Q: Is it okay to rollback to a previous serial number when undoing a change to a zone?
- True
- False
A: False

Q: It is considered a best practice to run an internal view and an external view on the same server.
- True
- False
A: False

Q: Master servers:
- Are servers that have one or more master zones.
- Are authoritative.
- Can automatically update slave servers.
- Always allow recursive lookups.
A: Are servers that have one or more master zones.; Are authoritative.; Can automatically update slave servers.

Q: Recursion:
- Is an option for a view.
- Allows clients to preform a recursive lookup.
- Is an update to the serial number of a zone.
- Is useful on a caching server.
A: Is an option for a view.; Allows clients to preform a recursive lookup.; Is useful on a caching server.

Q: Running "rpm -qd bind" returns no results.
- True
- False
A: False

Q: What is needed to register a domain?
- At least 2 nameservers.
- Contact information.
- A fee.
- Approval by your ISP.
A: At least 2 nameservers.; Contact information.; A fee.

Q: When testing authoritative servers:
- Verify network connectivity on port 53, udp and tcp.
- Test responses using the host or nslookup commands.
- Ensure that all servers show the same serial number for a zone.
- Retrieve the SOA record.
A: Verify network connectivity on port 53, udp and tcp.; Test responses using the host or nslookup commands.; Ensure that all servers show the same serial number for a zone.; Retrieve the SOA record.

Q: FTP is short for First Terminal Program.
- True
- False
A: False

Q: FTP is:
- One of the original Internet protocols.
- Unencrypted by default.
- Rarely used on the Internet.
- Is supported by Windows and Linux.
A: One of the original Internet protocols.; Unencrypted by default.; Is supported by Windows and Linux.

Q: FTP requires an operating system user account for each available login account.
- True
- False
A: False

Q: FTPS is:
- Another name for FTP.
- Another name for ssh/scp.
- FTP over SSL.
- Unencrypted FTP.
A: FTP over SSL.

Q: NFS can be run over UDP inside a local network.
- True
- False
A: True

Q: NFS v3 has been deprecated after the release of version 4.
- True
- False
A: False

Q: NFS:
- Uses the operating system's user accounts.
- Uses the user database in /etc/nfs/nfusers.
- Uses the user database in /etc/sysconfig/nfs.
- Does not distinguish users.
A: Uses the operating system's user accounts.

Q: On an NFS server, the exported directories and defined in [x].
A: /etc/exports / exports

Q: When planning an FTP implementation, it is often useful to include shard accounts.
- True
- False
A: True

Q: Which option will ensure that any errors will be noticed immediately?
- sync
- async
- ro
- rw
A: sync

Q: By default all operating system users have accounts for use by samba.
- True
- False
A: False

Q: By default, the cups-pdf printer saves files to:
- $HOME/Desktop
- /home/desktop
- /var/spool/cups-pdf
- The user's home directory.
A: $HOME/Desktop

Q: CIFS is short for Complete Interface For Services.
- True
- False
A: False

Q: It is possible to manage cups printers from:
- A web interface.
- The command line.
- A gui management tool.
- Configuration files in /home/cups.
A: A web interface.; The command line.; A gui management tool.

Q: Samba can provide:
- File shares to Linux clients.
- File shares to Windows clients.
- Remote printing to Linux clients.
- Remote printing to Windows clients.
A: File shares to Linux clients.; File shares to Windows clients.; Remote printing to Linux clients.; Remote printing to Windows clients.

Q: The cups-pdf package is available:
- Within the default CentOS repos.
- Within the EPEL repository.
- Only on 64 bit systems.
- Only on non-Intel platforms.
A: Within the EPEL repository.

Q: The cups-pdf printer can be configured to run custom scripts automatically after a new document has been created.
- True
- False
A: True

Q: To update a user's samba password:
- smbpasswd -a user
- smbpasswd user
- passwd user
- passwd --samba user
A: smbpasswd user

Q: What command is used as a command line client for samba in Linux?
A: smbclient / smbmount

Q: A double colon in an IPv6 address is:
- Shorthand for multiple zeros.
- A typo.
- A syntax error.
- Shorthand for multiple ones.
A: Shorthand for multiple zeros.

Q: An IPv6 address which is used by a single unique device is:
- Multicast.
- Unicast.
- Anycast.
- Castless.
A: Unicast.

Q: IPv6 addresses have a network prefix similar to the network prefix of IPv4 addresses.
- True
- False
A: True

Q: IPv6:
- Replaces IPv4.
- Coexists with IPv4.
- Disables IPv4.
- Is not currently in use.
A: Coexists with IPv4.

Q: Services such as sshd and postfix:
- Do not support IPv6.
- Support either IPv4 or IPv6, but not both.
- Can be configured to use IPv6 or not.
- Require a special license to support IPv6.
A: Can be configured to use IPv6 or not.

Q: The default route is assigned to ::/0.
- True
- False
A: True

Q: The link local address:
- Is automatically assigned.
- Is an IPv6 address.
- Connects to other hosts on the same network.
- Is the localhost address.
A: Is automatically assigned.; Is an IPv6 address.; Connects to other hosts on the same network.

Q: The ping command is used to test connectivity to an IPv6 address.
- True
- False
A: False

Q: What command will return an IPv6 address if it is available?
- host -t A
- host -t AAAA
- host -t CNAME
- host6
A: host -t AAAA

Q: What is the IPv6 localhost address?
A: ::1