Using its standard configuration, how does fail2ban block offending SSH clients?

A. By rejecting connections due to its role as a proxy in front of SSH

B. By modifying and adjusting the SSHD configuration.

C. By creating and maintaining net filter rules.

D. By creating null routes that drop any answer packets sent to the client.

E. By modifying and adjusting the TCP Wrapper configuration for SSH

F. eference: https://www.digitalocean.com/community/tutorials/how-to-protect-ssh-with-fail2ban-on-centos-7 Community vote distribution
Reference: https://www.digitalocean.com/community/tutorials/how-to-protect-ssh-with-fail2ban-on-centos-7 Community vote distribution

How is the LDAP administrator account configured when the rootdn and rootpw directives are not present in the slapd.conf file?

A. The default account admin with the password admin are used

B. The account is defined by an ACL in slapd.conf

C. The default account admin is used without a password

D. The account is defined in the file /etc/ldap.secret

E. The account is defined in the file /etc/ldap.root.conf

Which of the following commands can be used to connect and interact with remote TCP network services? (Choose two.)

A. nettalk

B. nc

C. telnet

D. cat

E. netmap

FILL BLANK -
What command creates a SSH key pair? (Specify ONLY the command without any path or parameters)

Which of the following statements are true regarding Server Name Indication (SNI)? (Choose two.)

A. It supports transparent failover of TLS sessions from one web server to another.

B. It allows multiple SSL/TLS secured virtual HTTP hosts to coexist on the same IP address.

C. It enables HTTP servers to update the DNS of their virtual hosts’ names using the X 509 certificates of the virtual hosts.

D. It provides a list of available virtual hosts to the client during the TLS handshake.

E. It submits the host name of the requested URL during the TLS handshake.

Which of the following Samba services handles the membership of a file server in an Active Directory domain?

A. winbindd

B. nmbd

C. msadd

D. admemb

E. samba

Which of the following statements is true regarding the NFSv4 pseudo file system on the NFS server?

A. It must be called /exports

B. It usually contains bind mounts of the directory trees to be exported

C. It must be a dedicated partition on the server

D. It is defined in the option Nfsv4-Root in /etc/pathmapd.conf

E. It usually contains symlinks to the directory trees to be exported

Given the following Squid configuration excerpt:
cache_dir ufs /var/spool/squid3/ 1024 16 256
Which of the following directories will exist directly within the directory:
/var/spool/squid3/? (Choose two.)

A. 0F

B. A0

C. 0b

D. FF

E. 00

FILL BLANK -
What configuration directive of the Apache HTTPD server defines where log files are stored? (Specify ONE of the directives without any other options.)

Which of the following PAM modules sets and unsets environment variables?

A. pam_set

B. pam_shell

C. pam-vars

D. pam-env

E. pam_export
eference: https://www.linux.org/docs/man5/pam_env.html
Reference: https://www.linux.org/docs/man5/pam_env.html

The following Apache HTTPD configuration has been set up to create a virtual host available at www.example.com and www2.example.com:

Even though Apache HTTPD correctly processed the configuration file, requests to both names are not handled correctly. What should be changed in order to ensure correct operations?

A. The configuration must be split into two VirtualHost sections since each virtual host may only have one name.

B. The port mentioned in opening VirtualHost tag has to be appended to the ServerName declaration’s values.

C. Both virtual host names have to be placed as comma separated values in one ServerName declaration.

D. Both virtual host names have to be mentioned in the opening VirtualHost tag.

E. Only one Server name declaration may exist, but additional names can be declared in ServerAlias options.

Which option in named.conf speci es which host are permitted to ask for domain name information from the server?

A. allowed-hosts

B. accept-query

C. permit-query

D. allow-query

E. query-group

A BIND server should be upgraded to use TSI

A. Which configuration parameters should be added if the server should use the algorithm hmac-md5 and the key skrKc4DoTzi/takIlPi7JZA==?

B. IMAGE”202-450 Exam ITE-37_33.jpg” width=”700″ height=”125″>

C. IMAGE”202-450 Exam ITE-37_34.jpg” width=”700″ height=”125″>

D. IMAGE”202-450 Exam ITE-37_35.jpg” width=”700″ height=”125″>

E. IMAGE”202-450 Exam ITE-37_36.jpg” width=”700″ height=”125″>

F. IMAGE”202-450 Exam ITE-37_37.jpg” width=”700″ height=”93″>

For what purpose is TCP/IP stack ngerprinting used by nmap?

A. It is used to determine the remote operating system.

B. It is used to filter out responses from specific servers.

C. It is used to identify duplicate responses from the same remote server.

D. It is used to masquerade the responses of remote servers.

E. It is used to uniquely identify servers on the network for forensics.
eference: https://nmap.org/nmap- ngerprinting-old.html
Reference: https://nmap.org/nmap- ngerprinting-old.html

FILL BLANK -
In order to specify alterations to an LDAP entry, what keyword is missing from the following LDIF file excerpt?

Specify the keyword only and no other information.

What is the purpose of DANE?

A. Verify the integrity of name information retrieved via DNS.

B. Allow secure dynamic DNS updates.

C. Invalidate name information stored on caching name servers to speed up DNS updates.

D. Discover which servers within a DNS domain offer a specific service.

E. Provide a way to verify the association of X 509 certificates to DNS host names.
eference: https://wiki.archlinux.org/index.php/DANE
Reference: https://wiki.archlinux.org/index.php/DANE

To allow X connections to be forwarded from or through an SSH server, what configuration keyword must be set to yes in the sshd configuration file?

A. AllowForwarding

B. ForwardingAllow

C. XllForwardingAllow

D. XllForwarding
eference: https://help.ubuntu.com/community/SSH/OpenSSH/configuring
Reference: https://help.ubuntu.com/community/SSH/OpenSSH/configuring

A user requests a "hidden" Samba share, named con dential, similar to the Windows Administration Share. How can this be configured?

A. IMAGE”202-450 Exam ITE-8_5.jpg” width=”262″ height=”206″>

B. IMAGE”202-450 Exam ITE-8_6.jpg” width=”253″ height=”197″>

C. IMAGE”202-450 Exam ITE-8_7.jpg” width=”268″ height=”200″>

D. IMAGE”202-450 Exam ITE-8_8.jpg” width=”257″ height=”204″>

E. IMAGE”202-450 Exam ITE-8_9.jpg” width=”252″ height=”201″>

Which of the following are logging directives in Apache HTTPD? (Choose two.)

A. TransferLog

B. CustomLog

C. ErrorLog

D. ServerLog

E. VHostLog
eference: http://httpd.apache.org/docs/current/mod/mod_log_config.html
Reference: http://httpd.apache.org/docs/current/mod/mod_log_config.html

Which global option in squid.conf sets the port number or numbers that Squid will use to listen for client requests?

A. port

B. client_port

C. http_port

D. server_port

E. squid_port

Which of the following DNS record types is used for reverse DNS queries?

A. CNAME

B. IN

C. PTR

D. REV

E. RIN

FILL BLANK -
Which doveadm sub-command displays a list of connections of Dovecot in the following format? (Specify ONLY the command without any parameters.)

FILL BLANK -
What option in the sshd configuration file instructs sshd to permit only specific user names to log in to a system? (Specify ONLY the option name without any values.)
sshd_config

In a PAM configuration file, which of the following is true about the required control flag?

A. If the module returns success, no more modules of the same type will be invoked

B. The success of the module is needed for the module-type facility to succeed. If it returns a failure, control is returned to the calling application

C. The success of the module is needed for the module-type facility to succeed. However, all remaining modules of the same type will be invoked

D. The module is not critical and whether it returns success or failure is not important

E. If the module returns failure, no more modules of the same type will be invoked C

Which net filter table contains built-in chains called INPUT, OUTPUT and FORWARD?

A. ipconn

B. filter

C. nat

D. default

E. masq
eference: http://shorewall.org/Net lterOverview.html
Reference: http://shorewall.org/Net lterOverview.html

Which command is used to administer IPv6 net filter rules?

A. iptables

B. iptablesv6

C. iptables6

D. ip6tables

E. ipv6tables
eference: https://www.centos.org/docs/5/html/5.1/Deployment_Guide/s1-ip6tables.html Community vote distribution
Reference: https://www.centos.org/docs/5/html/5.1/Deployment_Guide/s1-ip6tables.html Community vote distribution

When are Sieve lters usually applied to an email?

A. When the email is delivered to a mailbox

B. When the email is relayed by an SMTP server

C. When the email is received by an SMTP smarthost

D. When the email is sent to the first server by an MUA

E. When the email is retrieved by an MUA

After the installation of Dovecot, it is observed that the dovecot processes are shown in ps ax like this:

In order to associate the processes with users and peers, the username, IP address of the peer and the connection status, which of the following options must be set?

A. –with-linux-extprocnames for ./configure when building Dovecot

B. sys.ps.allow_descriptions = 1 in sysct1.conf or /proc

C. proc.all.show_status = 1 in sysctl.conf or /proc

D. verbose_proctitle = yes in the Dovecot configuration

E. process_format = “%u %I %s” in the Dovecot configuration

FILL BLANK -
Which directive in a Nginx server configuration block defines the TCP ports on which the virtual host will be available, and which protocols it will use? (Specify
ONLY the option name without any values.)
listen

FILL BLANK -
What is the name of the root element of the LDAP tree holding the configuration of an OpenLDAP server that is using directory based configuration? (Specify
ONLY the element's name without any additional information.)

What is the name of the Dovecot configuration variable that speci es the location of user mail?

A. mbox

B. mail_location

C. user_dir

D. maildir

E. user_mail_dir

With fail2ban, what is a "~jail'?

A. A net filter rules chain blocking offending IP addresses for a particular service

B. A group of services on the server which should be monitored for similar attack patterns in the log files

C. A filter definition and a set of one or more actions to take when the filter is matched

D. The chroot environment in which fail2ban runs

Which of the following values can be used in the OpenLDAP attribute olcBackend for any object of the class olcBackendconfig to specify a backend?
(Choose three.)

A. xml

B. bdb

C. passwd

D. ldap

E. text

Topic 2 – More Questions.

What word is missing from the following excerpt of a named.conf file?

A. networks

B. net

C. list

D. acl

E. group

What option in the client configuration file would tell OpenVPN to use a dynamic source port when making a connection to a peer?

A. src-port

B. remote

C. source-port

D. nobind

E. dynamic-bind

What is the standard port used by OpenVPN?

A. 1723

B. 4500

C. 500

D. 1194

Which of the following services belongs to NFSv4 and does not exist in NFSv3?

A. rpc.idmapd

B. rpc.statd

C. nfsd

D. rpc.mountd
eference: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/5/html/deployment_guide/ch-nfs
Reference: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/5/html/deployment_guide/ch-nfs

What is the name of the network security scanner project which, at the core, is a server with a set of network vulnerability tests?

A. NetMap

B. OpenVAS

C. Smartscan

D. Wireshark

The program vsftpd, running in a chroot jail, gives the following error:

Which of the following actions would fix the error?

A. The file /etc/ld.so.conf in the root filesystem must contain the path to the appropriate lib directory in the chroot jail

B. Create a symbolic link that points to the required library outside the chroot jail

C. Copy the required library to the appropriate lib directory in the chroot jail

D. Run the program using the command chroot and the option–static_libs

Which of the following DNS records could be a glue record?

A. ns1.lab A 198.51.100.53

B. lab NS 198.51.100.53

C. ns1.lab NS 198.51.100.53

D. ns1. A 198.51.100.53

E. ns1.lab GLUE 198.51.100.53

Which tool creates a certificate Signing Request (CSR) for serving HTTPS with Apache HTTPD?

A. apachect1

B. certgen

C. cartool

D. httpsgen

E. openssl

If there is no access directive, what is the default setting for OpenLDAP?

A. IMAGE”202-450 Exam ITE-16_14.jpg” width=”269″ height=”68″>

B. IMAGE”202-450 Exam ITE-16_15.jpg” width=”277″ height=”100″>

C. IMAGE”202-450 Exam ITE-16_16.jpg” width=”273″ height=”98″>

D. IMAGE”202-450 Exam ITE-16_17.jpg” width=”284″ height=”101″>

Which of the statements below are correct regarding the following commands, which are executed on a Linux router? (Choose two.)

A. Packets with source or destination addresses from fe80::/64 will never occur in the FORWARD chain

B. The rules disable packet forwarding because network nodes always use addresses from fe80::/64 to identify routers in their routing tables

C. ip6tables returns an error for the second command because the affected network is already part of another rule

D. Both ip6tables commands complete without an error message or warning

E. The rules suppress any automatic configuration through router advertisements or DHCPv6

Which of the following OpenVPN configuration options makes OpenVPN forward network packets between VPN clients itself instead of passing the packets on to the Linux host which runs the OpenVPN server for further processing?

A. inter-client-traffic

B. client-to-client

C. client-router

D. client-pass

E. grant-client-traffic

Which of the following commands is used to change user passwords in an OpenLDAP directory?

A. setent

B. ldpasswd

C. olppasswd

D. ldappasswd

E. ldapchpw

In which CIFS share must printer drivers be placed to allow Point'n'Print driver deployment on Windows?

A. winx64drv$

B. print$

C. The name of the share is speci ed in the option print driver share within each printable share in smb.conf

D. pnpdrivers$

E. NETLOGON

After running ssh-keygen and accepting the default values, which of the following files are changed or created? (Choose two.)

A. ~/.ssh/id_rsa.key

B. ~/.ssh/id_rsa.pub

C. ~/.ssh/id_rsa.prv

D. ~/.ssh/id_rsa.crt

E. ~/.ssh/id_rsa

Which FTP names are recognized as anonymous users in vsftp when the option anonymous_enable is set to yes in the configuration files? (Choose two.)

A. anonymous

B. ftp

C. In the described configuration, any username which neither belongs to an existing user nor has another special meaning is treated as anonymous user.

D. nobody

E. guest
eference: http://vsftpd.beasts.org/vsftpd_conf.html#lbAE
Reference: http://vsftpd.beasts.org/vsftpd_conf.html#lbAE

Which of the following lines in the sshd configuration file should, if present, be changed in order to increase the security of the server? (Choose two.)

A. Protocol 2, 1

B. PermitEmptyPasswords no

C. Port 22

D. PermitRootLogin yes

E. IgnoreRhosts yes

Which Post x command can be used to rebuild all of the alias database files with a single invocation and without the need for any command line arguments?

A. makealiases

B. newaliases

C. postalias

D. postmapbuild