UNIX QUESTIONS 1

Question 1

Question

When connecting to an SSH server for the first time, its fingerprint is received and stored in a file, which is located at:

Answer

~/ .ssh/fingerprints
~/ .ssh/id_dsa
~/ .ssh/known_hosts
~/ .ssh/id_dsa.pub
~/ .ssh/gpg.txt

Question 2

Question

Where is the user foo’s procmail configuration stored, if home directories are stored in /home? Please enter the complete path to the file[blank_start].[blank_end]

Answer

/home/foo/.procmailrc

Question 3

Question

Postfix daemons can be chroot’d by setting the chroot flag in [blank_start]_______[blank_end]. (Supply only the filename, without a path)

Answer

master.cf

Question 4

Question

What is the default location for sendmail configuration files? (Please provide the complete path to the directory[blank_start])[blank_end]

Answer

/etc/mail

Question 5

Question

What command is used to print NFS kernel statistics? (Provide the command with or without complete path)[blank_start]_______[blank_end]

Answer

nfsstat

Question 6

Question

What is the name of the module in Apache that provides the HTTP Basic Authentication functionality? (Please provide ONLY the module name) [blank_start]___[blank_end]

Answer

mod_auth

Question 7

Question

In which directory can all parameters available to sysctl be found? (Provide the full path)[blank_start]____[blank_end]

Answer

/proc/sys

Question 8

Question

This program has 3 operating modes: copy-in mode, copy-out mode, and copy-pass mode, and is used to copy files into or out of archives. What program is this? (Please provide the command name only, with no arguments or path.) [blank_start]___[blank_end]

Answer

cpio

Question 9

Question

The command [blank_start]___________[blank_end] -x foo will delete the user foo from the Samba database. (Specify the command only, no path information.)

Answer

smbpasswd

Question 10

Question

What postfix configuration setting defines the domains for which Postfix will deliver mail locally? (Please provide only the configuration setting name with no other information[blank_start])[blank_end]

Answer

mydomain

Question 11

Question

What is the path to the global postfix configuration file? (Please specify the complete directory path and file name[blank_start])[blank_end]

Answer

/etc/postfix/main.cf

Question 12

Question

Which Samba-related command will show all options that were not modified using smb.conf and thus are set to their default values? Please enter the command and its parameter(s):[blank_start]___[blank_end]

Answer

testparm -v

Question 13

Question

Which site-specific configuration file for the shadow login suite must be modified to log login failures? Please enter the complete path to that file._[blank_start]__[blank_end]

Answer

/etc/login.defs

Question 14

Question

You are not sure whether the kernel has detected a piece of hardware in your machine. What command, without options or parameters, should be run to present the contents of the kernel ring-buffer?[blank_start]____[blank_end]

Answer

dmesg

Question 15

Question

You have installed some new libraries, but these are not available to programs and are not listed by lconfig -p. What file should the path to the libraries be added to, before running ldconfig? [blank_start]____[blank_end]

Answer

ld.so.conf

Question 16

Question

nfsd, portmap and [blank_start]________[blank_end] daemons must be running on an NFS server.

Answer

mountd

Question 17

Question

With which parameter in the smb.conf file can a share be hidden?[blank_start]__[blank_end]

Answer

browseable=no

Question 18

Question

Please enter the complete command to create a new password file for HTTP basic authentication (/home/http/data/web _passwd) for user john. htpasswd -c /home/http/data/web_passwd john

Answer

True
False

Question 19

Question

Please enter the command used to remove Kerberos tickets from the cache below.[blank_start]__[blank_end]

Answer

kdestroy

Question 20

Question

All machines outside the network are able to send emails through the server to addresses not served by that server. If the server accepts and delivers the email, then it is a(n) [blank_start]_____________[blank_end]. Please enter the English term, without any punctuation.

Answer

open relay

Question 21

Question

Which command can be used to save the current iptables rules into a file? Please enter only the command without path or parameters.[blank_start]_[blank_end]

Answer

iptables-save

Question 22

Question

Which file on a Postfix server modifies the sender address for outgoing e-mails? Please enter only the file name without the path.[blank_start]___[blank_end]

Answer

sender_canonical

Question 23

Question

Running tcpdump -nli eth1 ‘icmp’ shows the following output: 11:56:35.599063 IP 192.168.123.5 > 194.25.2.129: icmp 64: echo request seq 1 11:56:35.670910 IP 194.25.2.129 > 192.168.123.5: icmp 64: echo reply seq 1 What command was used on the host 192.168.123.5, to generate this output?[blank_start]__[blank_end]

Answer

ping

Question 24

Question

Which command can be used to change the password for an LDAP entry?[blank_start]__[blank_end]

Answer

ldappasswd

Question 25

Question

In which directory are the PAM modules stored?[blank_start]__[blank_end]

Answer

/lib/security

Question 26

Question

What file should be edited to make the route command show human-readable names for networks? (Please enter the full path)[blank_start]___[blank_end]

Answer

/etc/networks

Question 27

Question

Which keys are stored in the authorized_keys file?

Answer

public
private

Question 28

Question

To allow X connections to be forwarded from or through an SSH server, what line must exist in the sshd configuration file? X11Forwarding yes

Answer

True
False

Question 29

Question

A malicious user has sent a 35MB video clip, as an attachment, to hundreds of Recipients. Looking in the outbound queue reveals that this is the only mail there.This mail can be removed with the command rm [blank_start]_______________[blank_end] * . Complete the path below.

Answer

/var/spool/mqueue/

Question 30

Question

Which file, in the local file-system, is presented when the client requests http://server/~joe/index.html and the following directive is present in server’s Apache configuration file? UserDir site/html Given that all users have their home directory in /home, please type in the FULL file name including the path. Answer: /home/joe/site/html/index.html

Answer

True
False

Question 31

Question

Which port must be open on a firewall, to allow a DNS server to receive queries? (Enter only the port number).

Answer

56
63
8080
53

Question 32

Question

The users of the local network complain that name resolution is not fast enough. Enter the command, without the path or any options, that shows the time taken to resolve a DNS query[blank_start].[blank_end]

Answer

Question 33

Question

37 In which configuration file can a key-file be defined to enable secure DNS zone transfers? (Please enter the file name without the path)[blank_start]__[blank_end]

Answer

named.conf

Question 34

Question

Which type of DNS record defines which server(s) email for a domain should be sent to? Answer: MX

Answer

True
False

Question 35

Question

Using only commands included with named, what is the command, with options or parameters, to make named re-read its zone files?[blank_start]_[blank_end]

Answer

rndc reload

Question 36

Question

Which daemon is required on the client if an ethernet device gets its IP address from a central server?__

Answer

dhcp
dhcpcd
bootpd
ethd
dhcpd

Question 37

Question

A network has many network printers connected and they should get their addresses using DHCP. What information from each printer is needed to always assign them the same IP address when dhcpd is used as the DHCP server?

Answer

MAC address
Host name
Serial number
Factory default IP address
Built-in network card type

Question 38

Question

Select the alternative that shows the correct way to disable a user login (except for root)

Answer

The use of the pam_nologin module along with the /etc/login configuration file
The use of the pam_deny module along with the /etc/deny configuration file
The use of the pam_pwdb module along with the /etc/pwdb.conf configuration file
The use of the pam_console module along with the /etc/security/console.perms configuration file
The use of the pam_nologin module along with the /etc/nologin configuration file

Question 39

Question

Which command would release the current IP address leased by a DHCP server?

Answer

ipconfig /release
ifconfig –release-all
dhclient -r
ifconfig –release
pump –release

Question 40

Question

Which records must be entered in a zone file in order to use "Round Robin Load Distribution" for a web server?

Answer

www.example.org. 60 IN A 192.168.1.1 www.example.org. 60 IN A 192.168.1.2 www.example.org. 60 IN A 192.168.1.3
www.example.org. 60 IN A 192.168.1.1;192.168.1.2;192.168.1.3
www.example.org. 60 IN A 192.168.1-3
www.example.org. 60 IN RR 192.168.1:3
www.example.org. 60 IN RR 192.168.1.1;192.168.1.2;192.168.1.3

Question 41

Question

Which of these tools can provide the most information about DNS queries?

Answer

dig
nslookup
host
named-checkconf
named-checkzone

Question 42

Question

Which command line create an SSH tunnel for POP and SMTP protocols?

Answer

ssh- L :110 -L :25 -1 user -N mailhost
ssh -L 25:110 -1 user -N mailhost
ssh -L mailhost:110 -L mailhost:25 -1 user -N mailhost
ssh -L mailhost:25:110 -1 user
ssh -L 110:mailhost:110 -L 25:mailhost:25 -1 user -N mailhost

Question 43

Question

An iptables firewall was configured to use the target MASQUERADE to share a dedicated wireless connection to the Internet with a few hosts on the local network. The Internet connection becomes very unstable in rainy days and users complain their connections drop when downloading e-mail or large files, while web browsing seems to be working fine. Which change to your iptables rules could alleviate the problem?

Answer

Change the target MASQUERADE to SNAT
Change the target MASQUERADE to DNAT
Change the target MASQUERADE to BALANCE and provide a backup Internet connection
Change the target MASQUERADE to REDIRECT and provide a backup Internet connection
Change the target MASQUERADE to BNAT

Question 44

Question

Connecting to a remote host on the same LAN using ssh public-key authentication works but forwarding X11 doesn’t. The remote host allows access to both services. Which of the following can be the reason for that behaviour?

Answer

The remote user’s ssh_config file disallows X11 forwarding
A different public key has to be used for X11
The remote server’s sshd_config file disallows X11 forwarding
X11 cannot be forwarded if public-key authentication was used
X11 though SSH needs a special X11 server application installed

Question 45

Question

Which THREE of the following actions should be considered when a FTP chroot jail is created?

Answer

Create /dev/ and /etc/ in the chroot enviroment
Create /etc/passwd in the chroot enviroment
Create /var/cache/ftp in the chroot enviroment
Create the user ftp in the chroot enviroment
Create /usr/sbin/ in the chroot enviroment

Question 46

Question

To be able to access the server with the IP address 10.12.34.56 using HTTPS, a rule for iptables has to be written. Given that the client host’s IP address is 192.168.43.12, which of the following commands is correct?

Answer

iptables – A FORWARD -p tcp -s 0/0 -d 10.12.34.56 –dport 80 -j ACCEPT
iptables – A FORWARD -p tcp -s 192.168.43.12 d 10.12.34.56:443 -j ACCEPT.
iptables – A FORWARD -p tcp -s 192.168.43.12 -d 10.12.34.56 –dport 443 -j ACCEPT.
iptables – A INPUT -p tcp -s 192.168.43.12 – d 10.12.34.56:80 -j ACCEPT.
iptables – A FORWARD -p tcp -s 0/0 -d 10.12.34.56 –dport 443 -j ACCEPT.

Question 47

Question

When the default policy for the iptables INPUT chain is set to DROP, why should a rule allowing traffic to localhost exist?

Answer

All traffic to localhost must always be allowed.
It doesn’t matter; iptables never affects packets addressed to localhost
Sendmail delivers emails to localhost
Some applications use the localhost interface to communicate with other applications.
syslogd receives messages on localhost

Question 48

Question

A server is being used as a smurf amplifier, whereby it is responding to ICMP Echo-Request packets sent to its broadcast address. To disable this, which command needs to be run?

Answer

ifconfig eth0 nobroadcast
echo "0" > /proc/sys/net/ipv4/icmp_echo_accept_broadcasts
iptables -A INPUT -p icmp -j REJECT
echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts
echo "1" > /proc/sys/net/ipv4/icmp_echo_nosmurf

Question 49

Question

To allow X connections to be forwarded from or through an SSH server, what configuration keyword must be set to yes in the sshd configuration file?

Answer

AllowForwarding
ForwardingAllow
XllForwardingAllow
XllForwarding

Question 50

Question

Which of the following options are valid in /etc/exports? (Choose two.)

Answer

rw
ro
rootsquash
norootsquash
uid

Question 51

Question

Which of the following nmap parameters scans a target for open TCP ports? (Choose two.)

Answer

Question 52

Question

Which of the following commands can be used to connect and interact with remote TCP network services? (Choose two.)

Answer

nettalk
nc
telnet
cat
netmap

Question 53

Question

Which BIND option should be used to limit the IP addresses from which slave name servers may connect?

Answer

allow-zone-transfer
allow-transfer
allow-secondary
allow-slaves
allow-queries

Question 54

Question

What option for BIND is required in the global options to disable recursive queries on the DNS server by default?

Answer

allow-recursive-query ( none; );
allow-recursive-query off;
recursion { disabled; };
recursion { none; };
recursion no;

Question 55

Question

Which option within a Nginx server configuration section defines the file system path from which the content of the server is retrieved?

Answer

location
htdocs
DocumentRoot
root
base_dir

Question 56

Question

What directive can be used in named.conf to restrict zone transfers to the 192.168.1.0/24 network?

Answer

allow-transfer { 192.168.1.0/24; };
allow-transfer { 192.168.1.0/24 };
allow-axfr { 192.168.1.0/24; };
allow-axfr { 192.168.1.0/24 };

Question 57

Question

To securely use dynamic DNS updates, the use of TSIG is recommended. Which TWO

Answer

TSIG is used for zone data encryption
TSIG is a signal to start a zone update
TSIG is used in zone files
TSIG is used only in server configuration
Servers using TSIG must be in sync (time zone!)

Question 58

Question

Which option is used to configure pppd to use up to two DNS server addresses provided by the remote server?

Answer

ms-dns
nameserver
usepeerdns
dns
None of the above

Question 59

Question

A DNS server has the IP address 192.168.0.1. Which TWO of the following need to be done on a client machine to use this DNS server?

Answer

Add nameserver 192.168.0.1 to /etc/resolv.conf
Run route add nameserver 192.168.0.1
Run ifconfig eth0 nameserver 192.168.0.1
Run echo “nameserver 192.168.1.1” >> /etc/resolv.conf
Run bind nameserver 192.168.1.1

Question 60

Question

There is a restricted area in an Apache site, which requires users to authenticate against the file /srv/ www/security/site-passwd. Which command is used to CHANGE the password of existing users, without losing data, when Basic authentication is being used.

Answer

htpasswd -c /srv/www/security/site passwd user
htpasswd /srv/www/security/site-passwd user
htpasswd -n /srv/www/security/site-passwd user
htpasswd -D /srv/www/security/site-passwd user
None of the above

	Created by Luiz Eduardo over 5 years ago

Next up

UNIX QUESTIONS 1

Description

Resource summary

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25

Question 26

Question 27

Question 28

Question 29

Question 30

Question 31

Question 32

Question 33

Question 34

Question 35

Question 36

Question 37

Question 38

Question 39

Question 40

Question 41

Question 42

Question 43

Question 44

Question 45

Question 46

Question 47

Question 48

Question 49

Question 50

Question 51

Question 52

Question 53

Question 54

Question 55

Question 56

Question 57

Question 58

Question 59

Question 60

Similar