Exam Code : 3X0-104
Exam Name : Linux Security, Privacy and Ethics (Level 1)
Vendor Name :
"Sair"
3X0-104 Dumps
3X0-104 Braindumps 3X0-104 Real Questions 3X0-104 Practice Test
3X0-104 Actual Questions
killexams.com
Linux Security, Privacy and Ethics (Level 1)
https://killexams.com/pass4sure/exam-detail/3X0-104
Mary, a senior system administrator, is reviewing the work of a junior system administrator assigned to setup an anonymous FTP Server. Mary notices the line below in the /etc/passwd file. Which of the following represents the security risk imposed by this line?
ftp:*:700:700:Anonymous FTP:/home/ftp:/bin/bash
The anonymous FTP user is not presented with a password prompt.
The FTP Server is now vulnerable to a buffer overflow attack.
The space in the fifth field will cause an error and drop the user to a root shell.
An anonymous FTP user is given a shell from which he can execute uploaded programs.
Which of the following is a characteristic of an effective security policy?
It states who is responsible for creating/updating new policy guidelines.
It states exactly what is being protected and why.
It states that the items at risk must be insured.
It states those behaviors that are seen as appropriate by the company.
The system administrator has discovered that his Server has been compromised. At a minimum, the intruder has obtained a username, password, and the root password. Which of the following will guarantee that the intruder has been removed from the system?
Reformat all partitions and reinstall the system.
Kill all existing processes and reboot.
Change the root password and place a lock on the account to which the intruder has obtained access.
Force all users to change their passwords.
A large server has many services running, including FTP, NFS, and NIS. It is hard for the administrator to find security holes in the services' configuration files, and this leads to possible security risks. Which of the following tools could the administrator use to check these services for security holes?
NTOP
LogCheck
SAINT
Tripwire
Tom is a system administrator for Linux ServerA. Tom is running a Perl script that will initiate a connection request from ServerA to ServerB without completing the network connection. This is done multiple times until ServerB can no longer communicate on the network. What kind of attack has Tom initiated?
Spam blast
TCP bomb
Denial of Service
Internet Worm
Katheryn wants to maximize security on her system by replacing ftpd with a program that logs requests, denies unauthorized users, and runs the original ftpd daemon. What should Kathryn use?
TCP wrappers
A VPN
Tripwire
Packet filters
An administrator finds a program on a network server that modifies several system service records when a certain user logs in and out. The program masks the intruder's actions. This is most likely an example of what type of a
.
Trojan horse
Worm
Back door
Logic bomb
Before Linuxsite sets up its Network, it develops its Network Policy. Which of the following is NOT a reason why Linuxsite should have a Network Policy set up?
It will inform the users of the appropriate use of the system.
It will provideLinuxsite with liability protection if illegal activities are performed on their site without their knowledge.
It will block unauthorized users from accessing the network.
It will provideLinuxsite with a standard way to deal with problems concerning the Network.
An administrator would like to make the Sysmon statusfile available on the Web so she can check Sysmon's status from anywhere. Which of the following Sysmon configuration file entries will put the statusfile in HTML form?
config statusfile html
config html /home/httpd/html/sysmon.html
config statusfile sysmon.html
config statusfile html /home/httpd/html/sysmon.html
Patrick, the system administrator, is concerned about the security of Sendmail and decides to install smap. Which of the following best describes smap?
The Sendmail daemon passes the request to smap, which parses the data against a table of malicious programs and IP addresses known for originating such programs.
smap changes the permissions on all incoming data, which ensures that no attached program has root privileges.
smap does not run as root or have access to anything outside the mail queue, so an attacker will not be able to gain access outside the mail queue.
smap encrypts the data passing between machines by using a specified encryption algorithm and passing public and private encryption keys to verify the host.