Flashcards
Chapter 11 - Review Questions
Cards in this deck (25)
- 1What is the name of the command to start the graphical SELinux administration tool?The name of the command to start the graphical SELinux
administration tool is system-config-selinux. - 2What would the command iptables –A OUTPUT –p tcp --dport 25 –j DROP do?This command will append a rule to the output chain to prevent TCP
packets from leaving the system via port 25. - 3What are the two commands to display and modify the SELinux mode?3. The getenforce and setenforce commands.
- 44. Iptables is a packet-filtering firewall. True or False?4. True.
- 5SELinux is an implementation of discretionary access control. True or False?5. False.
- 6Where do SELinux denial messages are logged in the absence of the auditd daemon?6. The SELinux denial messages are logged to the /var/log/messages file.
- 77. What is the name of the graphical tool for firewalld administration?7. The graphical tool for firewalld administration is called firewall-config.
- 8What is the name of the SELinux configuration file and where is it located in the system?The configuration file name is selinux and it is located in the
/etc/sysconfig directory. - 99. A firewall cannot be configured between two networks. True or False?9. False.
- 10Which command can be used to ensure modified SELinux contexts survive file system relabeling, chcon or semanage?10. The semanage command.
- 1111. Which option is used with the ps command to view the security contexts on processes?11. The –Z option.
- 12What would the command restorecon –F /etc do?12. This command will restore the default SELinux contexts on the /etc directory.
- 13What is the name of the default SELinux policy used in RHEL7?The default policy used in RHEL7 for SELinux is the targeted policy.
- 14What is the name of the iptables configuration file and where is it located in the system?The configuration file name is iptables and it is located in the
/etc/sysconfig directory. - 15What would the rule “-I INPUT -m state --state NEW -p tcp --dport 23 -j ACCEPT” do?The specified string will insert a rule in the iptables firewall to allow
new traffic on port 23 to pass through without affecting any of the
existing connections on this port. - 16What is the purpose of the command sestatus?The sestatus command displays the SELinux status.
- 17What is the name of the directory that stores SELinux boolean files?The /sys/fs/selinux/booleans directory.
- 18What one task must be done to change the SELinux mode from enforcing to disabled?The system has to be rebooted.
- 19What is the process of data packet formation called?The process of data packet formation is called encapsulation.
- 20Which option with the cp command must be specified to preserve the SELinux contexts?The --preserve=context option.
- 21Name the two commands that can be used to modify a boolean value.The semanage and setsebool commands.
- 22If one service on the system running SELinux is compromised, all other services will be affected as well. True or False?False.
- 23What would the command iptables –L do?This command will display all loaded firewall rules on the system.
- 24Name the command to start the SELinux Troubleshooter program.The command name is sealert.
- 25What would the command semanage login –a –s user_u user10 do?This command will map Linux user user10 with SELinux user user_u.
Information
- Description
- RHCSA EX200 (11. Controlling Access through Firewall and SELinux) Flashcards on Chapter 11 - Review Questions, created by Vagner Aragão on 29/01/2019.
- Created by
- Vagner Aragão
- Views
- 0
- Rating