24 Questions
Which DNS record is used to verify the authenticity of a DNS query in DNSSEC?
DNSKEY
What is the purpose of a Certificate Revocation List (CRL)?
To revoke X.509 certificates that have been compromised
What is the primary function of a Host Intrusion Detection System (HIDS)?
To monitor and detect potential security threats on a single computer or server
What is the main purpose of DNSSEC?
To sign a DNS zone and prevent DNS spoofing
What is the primary goal of social engineering attacks?
To trick users into revealing sensitive information
What is AIDE primarily used for?
To detect intrusions and system changes
What is phishing?
A type of social engineering attack
What is the purpose of a Certificate Authority (CA)?
To issue and sign X.509 certificates
What is the main purpose of NSEC or NSEC3 records in DNSSEC?
To deny the existence of a domain name
Which DNS record is used in DNSSEC?
RRSIG
What is the purpose of AppArmor?
To provide Mandatory Access Control
What is the purpose of a chroot environment?
To provide a secure environment for sensitive applications
What is the purpose of a Host Intrusion Detection System (HIDS)?
To detect host-based intrusions
What is the purpose of SELinux?
To provide Mandatory Access Control
What is the purpose of the Linux Audit system?
To provide a framework for auditing system events
What is the purpose of the push directive in an OpenVPN server configuration?
To push network configuration information to the client
What type of attack targets a specific user or organization?
Spear phishing attack
What is the purpose of the pam_cracklib PAM module?
To enforce password complexity and prevent dictionary words
What is the purpose of TSIG in DNS?
To sign DNS messages for secure communication
What is the purpose of IP sets in Linux?
To group together IP addresses that can be referenced by netfilter rules
What is the purpose of an extended attribute in Linux?
To store additional metadata about a file
Which file is used to configure rkhunter?
./etc/rkhunter.conf
What effect does the following command have on TCP packets? iptables -A INPUT -s 10.142.232.1 -p tcp --dport 20:21 -j ACCEPT
Accept all TCP traffic coming from 10.142.232.1 destined for port 20 or 21
What type of attack exploits a vulnerability to gain elevated privileges?
Privilege escalation attack
Study Notes
DNS and DNSSEC
- DNS records: RRSIG, NSEC, NSEC3, DS, PTR, and A records are used for different purposes in DNS.
- PTR records are used to map an IP address to a hostname.
- DNSKEY records are used to sign a DNS zone in DNSSEC.
Security Threats
- Phishing is a type of social engineering attack that targets a specific user or organization to steal sensitive information.
- Social engineering attacks aim to steal sensitive information by exploiting human psychology.
System Security
- Host intrusion detection (HID) is a system that monitors and detects potential security threats on a single computer or server.
- AIDE (Advanced Intrusion Detection Environment) is a tool that detects intrusions and system changes.
Password Management
- pam_cracklib is a PAM module that checks new passwords against dictionary words and enforces complexity.
Network Security
- TSIG is used to sign DNS messages for secure communication in DNS.
- IP sets group together IP addresses that can be referenced by netfilter rules.
- iptables is a command used to configure firewall rules in Linux.
Linux System Management
- Extended attributes in Linux are used to store additional metadata about a file.
- rkhunter is a tool that scans for rootkits and other malicious software, and is configured using the /etc/rkhunter.conf file.
Networking and Firewall Configuration
- setkey is a command used to configure IPsec policies and create new SPD entries.
- Snort is a network intrusion detection system that can be configured using rules files.
User Management
- SSSD (System Security Services Daemon) is a service that provides access to remote directories and authentication mechanisms.
Certificates and Encryption
- A Certificate Revocation List (CRL) is a list of X.509 certificates that have been revoked by a Certification Authority (CA).
- A CA is an entity that issues and signs X.509 certificates.
- OpenVPN is a VPN solution that uses X.509 certificates for authentication and encryption.
Kerberos Configuration
- The krb5.conf file is used to configure Kerberos settings, and allows sections such as [plugins], [domain], [capaths], and [realms].
- The push directive is used in OpenVPN server configuration to send network configuration information to the client.
Test your knowledge of DNS records and network security concepts with this quiz. Questions cover topics such as RRSIG, NSEC, and DS records, as well as host intrusion detection.
Make Your Own Quizzes and Flashcards
Convert your notes into interactive study material.
Get started for free
