How does Kali Live Instance work?

It does not install the instance but uses guest resources instead

What is Privilege Escalation?

Techniques attackers use to gain access to root passwords

Which is a primary goal for attackers?

Finding a vulnerablity that allows them to login as root

What can be done to protect sensitive information?

Store sensitive info in encrypted storage NOT on the workstation

What is NOT a function of PAM in the formation and enforcement of password policies?

Allows the use of unprintable characters

Which of these is a description of AppArmor?

A security feature that reinforces profile rules and alerts when violated

What is a "wildcard injection"?

Symbols that represent 1 or more characters

How can GRUB encryption be implemented?

by pressing the e key during the boot process

What is NOT a control that can be used to protect root passwords?

Passwords should be easily rememberable

Which of these is a description of SELinux?

A security feature that controls who can edit, upload, or move files

What is the purpose of the PAM password packages "cracklib-runtime" & "libpam-pwquality"?

Prevents users from setting easily crackable passwords

What is required for full disk encryption in Debian?

LVM must be enabled during Debian installation

What is the function of "pspy"?

Displays all the commands given by a host

What is LinEnum often used for?

By attackers to gather information for privilege escalation

Which is a description of SELinux policies?

A set of rules over access to files, devices, users, and processes

What does LinEnum do?

Checks for application misconfigurations

Which is NOT a way that "crontab"can be used in attacks?

It can be used in brute force attacks on passwords

What is a "bootloader"?

A small program that moves the OS to memory

studbud

Linux Security - Module 7: Host Security

30 termsStudBud Administration46 plays

Imported from external platform

Flashcards30 cardsFPractice quizPHost liveL

Questions 30

Answers

1
SELinux or AppArmor: Recommended only for advanced users
SELinux
AppArmor
2
How does Kali Live Instance work?
A server is sacrificed to Gary Bode. That opens up a digital portal to Kali
It does not install the instance but uses guest resources instead
Its a fast-install OS because it uses preset configurations
Starts a Kali Linux virtualization from within another linux distribution
3
What is NOT a function of "PAM"?
Configures password policies
Performs authentication, authorization, and modification
Controls who can switch user
Makes your device non-stick
4
What is Privilege Escalation?
Techniques attackers use to gain access to root passwords
An emergency response tool that elevates a user to respond to an attack
The process taken to raise an employees access when they are promoted
Identifying a suspicious user and restricting their access as a precaution
5
Which is a primary goal for attackers?
Blocking network connections
Deleting legitimate user profiles
Editing and corrupting scripts
Finding a vulnerablity that allows them to login as root
6
What is the configuration file for GRUB and where is it located?
grub.conf in /etc/grub.d
Slimey_Yet_Satisfying.grub in /Hakuna/Matata
grub.d in /etc/grub.conf
grub.cfg in /etc/grub.d
7
What can be done to protect sensitive information?
Store sensitive info in encrypted storage NOT on the workstation
Make many copies incase files get deleted or corrupted
Share an admin password in case of emergency
Store all back ups in one centralized location
8
SELinux or AppArmor: Manually configured
AppArmor
SELinux
9
SELinux or AppArmor: Most documentation files are in OpenSUSE OS
AppArmor
SELinux
10
What is NOT a function of PAM in the formation and enforcement of password policies?
Allows the use of unprintable characters
Prevents the reuse of old passwords
Ensures uniform operation
11
What are the effects of misconfigurations?
Error messages
Lack of service
Your termination
Back doors + weak spots
12
Which of these is a description of AppArmor?
A tool that prevents a user from changing their password without permission
A tool that gives limited sudo privileges for events like disaster recovery
A security feature that controls who can edit, upload, or move files
A security feature that reinforces profile rules and alerts when violated
13
Which is NOT a partition involved in a live instance?
/stm
/boot
/proc
/dev
14
What is a "wildcard injection"?
A single character shortcut that inserts a full script
An attacking technique of adding a keylogger to a script
Going for a Covid shot but getting surprised with flu and MMR vaccines too
Symbols that represent 1 or more characters
15
SELinux or AppArmor: More complex configuration
AppArmor
SELinux
16
Which is NOT a token available in the PAM functionality
onerr
set
required
sense
17
How can GRUB encryption be implemented?
by editing the boot file to include the GRUB command
by holding the esc key during the boot process
by pressing the e key during the boot process
using the command: apt grub start
18
What is NOT a control that can be used to protect root passwords?
Passwords should be complex
Passwords should not be able to be found in a dictionary
Passwords should be different on each machine
Passwords should be easily rememberable
19
SELinux or AppArmor: Includes reports and alerting
SELinux
AppArmor
20
Which of these is a description of SELinux?
A security feature that controls who can edit, upload, or move files
A tool that gives limited sudo privileges for events like disaster recovery
A security feature that reinforces profile rules and alerts when violated
A tool that prevents a user from changing their password without permission
21
What is the purpose of the PAM password packages "cracklib-runtime" & "libpam-pwquality"?
These are the logs were hashed passwords are saved.
Prevents users from setting easily crackable passwords
Contains lists or suggested passwords with high levels of complexity
Creates a password recovery tool
22
What is required for full disk encryption in Debian?
The private key must be reset just prior to encryption
Password policy must be disabled
LVM must be enabled during Debian installation
CAT must be enabled during Debian installation
23
What is the function of "pspy"?
Displays the privileges available to the current user
Displays the current tuition owed to Hacker U by the user
Displays all the commands given by a host
Displays the current port security settings
24
Which is NOT a difference between a "live" and an "installed" system?
Can be configured to use HDD for storage
Saves all files as temporary
Can run from memory
Folders of the original OS are visible
25
What is LinEnum often used for?
By attackers to gather information for privilege escalation
By programmers for script testing
By admins for documentation
By users for disaster response
26
Which is a description of SELinux policies?
A set of rules over who is allowed to add new applications and services
A set of rules over access to files, devices, users, and processes
A set of rules over who has access to read or modify logs
A set of rules over who's turn it is to brag about using Linux
27
Which is NOT a token available in the PAM functionality
file
list_pam.so
pam_listfile.so
auth
28
What does LinEnum do?
Checks for application misconfigurations
Repairs OS misconfigurations
Repairs system misconfigurations
Checks for OS misconfigurations
29
Which is NOT a way that "crontab"can be used in attacks?
It modify or replace scripts
It can be used for privilege escalation
It can be used in brute force attacks on passwords
30
What is a "bootloader"?
A short program that copies the boot-up files to RAM at start up
A program that keeps multiple operating systems from running simultaneously
A highly specialized Payless employee
A small program that moves the OS to memory

Linux Security - Module 7: Host Security Flashcards | StudBud