stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
COMP315 - Cloud Computing - Linux and security Flashcards | StudBud
Explore
/
COMP315 - Cloud Computing - Linux and security
COMP315 - Cloud Computing - Linux and security
30 terms
·
StudBud Administration
·
3 plays
Imported from external platform
Flashcards
30 cards
F
Practice quiz
P
Host live
L
Questions
30
Answers
1
where is SELinux implemented in a linux system?
kernel
hardware
network settings
applications
2
Using semanage, how do you set SELinux to permissive mode for httpd, without affecting the global SELinux mode?
semanage boolean -m --on httpd_permissive
semanage permissive -a httpd_t
semanage permissive -d httpd_t
semanage permissive -m httpd_t
3
What does the -t flag do in the following "chcon" command?
sets the SELinux user for the file.
specifies the SELinux type (context) to assign to the file.
transfers ownership of the file to a specific user.
changes the timestamp of the file.
4
What is the purpose of the USER namespace?
isolates inter-process communication
manages mount points (file systems)
isolates host name and domain name
provides privilege isolation and user identification segregation
5
What is the purpose of the MNT namespace?
isolates inter-process communication
manages mount points (file systems)
isolates host name and domain name
provides privilege isolation and user identification segregation
6
what is the purpose of "ls -Z"
It displays SELinux security contexts for each file.
It shows file sizes in human-readable format.
It lists files with their compression ratios.
It prints hidden files only.
7
What is the purpose of the PID namespace?
isolates the process ID number space
isolates host name and domain name
manages mount points (file systems)
network namespaces virtualise the network stack
8
describe the role of SELinux labels (also known as contexts) in file system management
They specify permissions for files, processes, and users
They store metadata about disk usage for performance tuning.
They manage user quotas and group allocations for shared files.
They define network routes used by system services.
9
What is meant by Sandboxing?
running programs in contexts that limit their capabilities
limiting how much RAM and CPU power an application can use
firewall rule that blocks untrusted applications from accessing internet
storing copies of important files in a secure, offline environment
10
What is the purpose of the NET namespace?
isolates inter-process communication
manages mount points (file systems)
isolates host name and domain name
network namespaces virtualise the network stack
11
What is the Principle of Least Privilege
only one user can have admin access at a time
users should only be given necessary access to complete their tasks
a rule that limits how much storage space a user can use on a network
users should only access company data on premises, not remotely
12
which of these commands corresponds to this permission: -rwx--xrw-
chmod 556 <file name>
chmod 511 <file name>
chmod 716 <file name>
chmod 726 <file name>
13
What does permissive mode do in SELinux?
It disables SELinux completely
It logs policy violations without enforcing rules
It prompts users before allowing access
It enforces all SELinux policies
14
what command can you use to temporarily change the state of an SELinux boolean?
getenforce
sestatus --booleans
getsebool
setsebool
15
How do we undo the change from performing "semanage permissive -a httpd_t"?
semanage enforcing -a httpd_t
semanage permissive -d httpd_t
semanage permissive -a httpd_t
semanage permissive -m httpd_t
16
which linux kernel feature ensures global resources are isolated for processes
hypervisor
containers
namespaces
groups
17
What is the purpose of the audit2allow command?
To automatically switch SELinux to permissive mode
To analyse audit logs and generate policy rules
To restart SELinux services after a policy change
To set boolean values for SELinux features
18
What is Multi Level Security (MLS) enforcement in SELinux
allows users to log in from multiple devices securely at once
enforces different firewall rules depending on network load
lets users switch between admin and user modes dynamically
restricts resourc access using hierarchical labels (Top secret > secret)
19
What is the purpose of Mandatory Access Control (MAC)?
a type of firewall that blocks unauthorised applications
user-controlled permission system in Linux
enforces system-defined access rule
encryption used to protect files
20
How do you make a setsebool state change permanent?
sestatus --booleans
getenforce
setsebool -P
setsebool -t
21
what defines the access rules of users in MAC?
file owners
the sys admin
applications
the operating system
22
What is the purpose of the UTS namespace?
provides privilege isolation and user identification segregation
manages mount points (file systems)
isolates host name and domain name
isolates inter-process communication
23
Linux uses Discretionary Access Control (DAC) for sandboxing. What does this do?
only the sys admin can control all access permissions
blocks all network access for untrusted applications by default
programs run with the permissions of the user executing it
prevents all programs from accessing files outside their own directory
24
what is a zero-day vulnerability?
when hackers erase all data from a system, resetting it to 'day zero'
a security bug that only exists for one day
an exploit that only affects newly released software updates
a vulnerability for which no patch is yet available
25
What is the purpose of the IPC namespace?
manages mount points (file systems)
provides privilege isolation and user identification segregation
isolates inter-process communication
isolates host name and domain name
26
What is the purpose of the "chcon" command?
It changes the file permissions to allow all users to read the file.
t enables automatic updates for the file by the web server.
changes the SELinux security context type of the file
It assigns a new owner to the file.
27
What is type enforcement in SELinux?
assigning file permissions based on type
assigning labels to files based on their type
a firewall rule that blocks unauthorised network traffic
assigning labels to processes and objects based on their type
28
what command can you use to view the state of an SELinux boolean?
setsebool
getenforce
getsebool
sestatus --booleans
29
What does enforcing mode do in SELinux?
It logs policy violations but allows access.
It enforces SELinux policies and blocks unauthorized access.
It allows manual user override of all security policies.
It disables SELinux policies completely.
30
What does Multi-Category Security (MCS) do?
allows user access to all files as long as they belong to the same category
restricts access based on security categories for users/files
assigns different security clearance levels to each user
sets up security categories that encrypt data between servers
