Karteikarten
Security Posture (D-6)
Karten in diesem Stapel (32)
- 1What are IPtables?built-in Firewall
- 2The firewall consists of IPtables and netfilter combining forces. True or FalseTrue
- 3True or False? IPtables is a user module and Netfilter is a kernel module that actually does the filtering.True
- 4This places rules into a set of predefined chains (INPUT, OUTPUT, and FORWARD) which are compared to network packetsIPtables
- 5The two most common predefined actions are....DROP and ACCEPT
- 6there are 3 types of IP tables available. What are the 3 TABLE TYPES?1) Filter
2) NAT
3) Mangling - 7this Table Type is used to filter packets passing through the firewall..Filter
- 8What are the user-defined chains in the Filter Table Type?INPUT=filter incoming packets
OUTPUT=Filter outgoing packets
FORWARD=Filter packets (routed) through host computer - 9This TABLE TYPE is used when changing the source IPNAT
- 10This TABLE TYPE is used to modify packetsMangling
- 11True or False: All chains must have a policy of DROP or ACCEPTTRUE
- 12iptables -P INPUT DROPchanges the default policy and sets it to DROP
- 13What do the following syntax do? iptables -L =? iptables -F =? iptables -P =? iptables -A =?-L = lists rules added in verbose mode
-F= Flush all existing rules
-P= sets the default policy on the specified chain
-A= Append or add a rule to a specific chain - 14what would be the syntax to append to INPUT chain for allowing SSH connections over TCP port 22?# iptables -A INPUT -p tcp --dport 22 -j ACCECPT
- 15What does the -p do for IPTABLES-p allows you to specify a protocol
- 16what does the -j do for IPTABLES-j means jump to the target action for packets matching the rule
- 17What does --dport and --sport mean with IPtables--dport = destination port
--sport = source port - 18What does -j ACCEPT do in the IPTABLES syntax?-j jumps to target
- 19True or False: IPtable Scripts are used because if the system is rebooted rules are automatically flushed and rest to their original policy states.TRUE
- 20Solaris used which command to generate a 32 digital hex hash corresponding to file contents?md5
hashing tools are used for checking file integrity - 21LINUX used which command to generate a 32 digital hex hash corresponding to file contents?md5sum
- 22This is a security and data integrity tool used to monitor and send alerts on specific file changes.Tripwire
(booby trap) - 23True or False: Tripwire essentially takes a picture of the initial database and then checks the integrity of the database to for files being compromised.TRUE
- 24What are the 2 cryptograhic hashes available that we care about for this test?MD5
&
SHA2 - 25widely used 128-bit hash value commonly used to check file integrity (32 digit hex #)...MD5
- 26Popular one-way hash used to create digital signatures. it is the federal PKI policySHA-2
- 27The following 4 are names are what? Database Initialization Integrity Checker Database Update Interactive UpdateTripwire modes
- 28This Tripwire mode: generates initial database to monitor files/directoriesDatabase Initialization
- 29This Tripwire mode: will generate another database and compare it with the previous one & will report any changesIntegrity Checker
- 30This Tripwire mode: Allows command line updates to the databaseDatabase Update
- 31This Tripwire mode: will prompt the user to update the database when it finds an added, deleted, or changed file. (similar to the integrity checker mode)Interactive Update
- 32What is the main configuration file for Tripwire and what does each entry have in its properties?tw.conf.
select-Flags
Informationen
- Beschreibung
- College Unix Karteikarten am Security Posture (D-6), erstellt von jeriel.juarbe am 23/08/2014.
- Erstellt von
- jeriel.juarbe
- Aufrufe
- 18
- Bewertung