Started on Wednesday, 23 May 2018, 12:31 PM State Finished Completed on Wednesday, 23 May 2018, 1:10 PM Time taken 39 mins 8 secs Grade 70.50 out of 100.00 Question 1 Incorrect Mark 0.00 out of 3.00 Flag question Question text

A BIND server should never answer queries from certain networks or hosts. Which configuration

directive could be used for this purpose?

Select one: a. deny-query { ...; }; b.

no-answer { ...; }; c. deny-access { ...; }; d. blackhole { ...; }; e. deny-answer { ...; }; Feedback Вашият отговор не е верен. The correct answer is: blackhole { ...; }; Question 2 Incorrect Mark 0.00 out of 4.00 Flag question Question text

From the configuration below what will be the behavior of BIND server

options {

            directory "/var/named";

            allow-query {any;};

            allow-recursion {127.0.0.1; 10.0.0.0/24; };

            forwarders {192.168.0.4};

            forward firs;

};

zone "." {

            type hint;

            file "named.ca";

};

Select one: a.

If the server doesn't know the answer to a query, it sends a recursive query to 192.168.0.4 and,

if this fails, it returns a failure. b. Any host, from any network, may use this server as its main DNS server. c. If the server doesn't know the answer to a query, it sends a query to a root DNS server. d. If the server doesn't know the answer to a query, it sends a recursive query to 192.168.0.4. e. Hosts in the network 10.0.0.0/24 will be able to ask for zone transfers. Feedback Вашият отговор не е верен. The correct answer is: If the server doesn't know the answer to a query, it sends a recursive query to 192.168.0.4. Question 3 Partially correct Mark 1.50 out of 3.00 Flag question Question text

A DNS server has the IP address 192.168.0.1. Which TWO of the following need to be done on a

client machine to use this DNS server?

Select one or more: a. Run echo "nameserver 192.168.1.1" >> /etc/resolv.conf b. Run bind nameserver 192.168.1.1 c.

Run route add nameserver 192.168.0.1 d.

Add nameserver 192.168.0.1 to /etc/resolv.conf e.

Run ifconfig eth0 nameserver 192.168.0.1 Feedback Вашият отговор отчасти е верен. You have correctly selected 1. The correct answers are:

Add nameserver 192.168.0.1 to /etc/resolv.conf, Run echo "nameserver 192.168.1.1" >> /etc/resolv.conf Question 4 Correct Mark 3.00 out of 3.00 Flag question Question text

What directive can be used in named.conf to restrict zone transfers to the 192.168.1.0/24

network?

Select one: a.

allow-axfr { 192.168.1.0/24 }; b.

allow-transfer { 192.168.1.0/24; }; c. allow-xfer { 192.168.1.0/24; }; d.

allow-axfr { 192.168.1.0/24; }; e.

allow-transfer { 192.168.1.0/24 }; Feedback Вашият отговор е верен. The correct answer is:

allow-transfer { 192.168.1.0/24; }; Question 5 Correct Mark 2.00 out of 2.00 Flag question Question text

In what mode is your FTP session when the client side makes the connections to both the data and command ports of the FTP server?

Select one: a. impassive b. safe c. passive d. active e. inactive Feedback Вашият отговор е верен. The correct answer is: passive Question 6 Correct Mark 4.00 out of 4.00 Flag question Question text

The host, called " Certkiller ", with the MAC address "08:00:2b:4c:59:23", should always be given the IP address of 192.168.1.2 by the DHCP server. Which of the following configurations will achieve this?

Select one: a.

host Certkiller {

hardware-address 08:00:2b.4c:59:23;

fixed-ip 192.168.1.2;

} b.

host Certkiller = 08:00:2b:4c:59:23 192.168.1.2 c.

host Certkiller {

hardware-ethernet 08:00:2b:4c:59:23;

fixed-address 192.168.1.2;

} d.

host Certkiller {

mac=08:00:2b:4c:59:23;

ip= 192.168.1.2;

} e.

host Certkiller {

hardware ethernet 08:00:2b:4c:59:23;

fixed-address 192.168.1.2;

} Feedback Вашият отговор е верен. The correct answer is:

host Certkiller {

hardware ethernet 08:00:2b:4c:59:23;

fixed-address 192.168.1.2;

} Question 7 Correct Mark 1.00 out of 1.00 Flag question Question text

If you connect to TCP port 22, what is the protocol that you are expecting? Select one: a. HTTP b. SSH c. FTP d. FINGER Feedback Вашият отговор е верен. The correct answer is: SSH Question 8 Correct Mark 1.00 out of 1.00 Flag question Question text

If you connect to TCP port 25, what is the protocol that you are expecting? Select one: a. IMAP b. SMTP c. HTTPS d. POP3 Feedback Вашият отговор е верен. The correct answer is: SMTP Question 9 Correct Mark 1.00 out of 1.00 Flag question Question text

If you connect to TCP port 80, what is the protocol that you are expecting? Select one: a. HTTP b. DNS c. FTP d. SNMP Feedback Вашият отговор е верен. The correct answer is: HTTP Question 10 Incorrect Mark 0.00 out of 4.00 Flag question Question text

Which of the following options can be passed to a DHCP client machine using configuration options on the DHCP server? Select one: a. The priority order in nsswitch.conf b. The contents of hosts.allow and hosts.deny c. The NIS domain name d. The resolving order in /etc/resolv.conf e. The filter rules for iptables Feedback Вашият отговор не е верен. The correct answer is: The NIS domain name Question 11 Incorrect Mark 0.00 out of 2.00 Flag question Question text

What security precautions must be taken when creating a directory into which files can be

uploaded anonymously using FTP?

Select one: a. The directory must not contain other directories. b. The directory must not have the write permission set. c. The directory must not have the read permission set. d.

The directory must not have the read or execute permission set. e.

The directory must not have the execute permission set. Feedback Вашият отговор не е верен. The correct answer is: The directory must not have the read permission set. Question 12 Correct Mark 1.00 out of 1.00 Flag question Question text

Select the correct directory, which is used for logs ( in general )? Select one: a. /var/log b. /usr/bin/logs c. /usr/sbin/log d. /var/spool/log Feedback Вашият отговор е верен. The correct answer is: /var/log Question 13 Correct Mark 2.00 out of 2.00 Flag question Question text

Select two applications related to the sending and receiving e-mails (select 2 answers)? Select one or more: a. marcel b. exim4 c. dovecot d. gogle-mail Feedback Вашият отговор е верен. The correct answers are: exim4, dovecot Question 14 Incorrect Mark 0.00 out of 3.00 Flag question Question text

One of your clients is trying to send an e-mail without success. He has provided information related to what he has typed in the keyboard.

CUSTOMER OUTPUT

telnet 192.168.244.132 25

HELO 192.168.244.132

MAIL FROM: [email protected]

RCPT TO: [email protected]

DATA

Subject: Test mail

Dear Mr./Mrs,

YOU HAVE JUST WON 1 Million USD $$$.

Please click the link below to claim YOUR prize!!!

END OF CUSTOMER OUTPUT

The customer claims that the message is not received from the recipient. What is causing the issue?

Select one: a. Incorrect HELO address b. FROM field is too short. c. RCPT field in not configured correctly. d. Missing end of e-mail character Feedback Вашият отговор не е верен. The correct answer is: Missing end of e-mail character Question 15 Incorrect Mark 0.00 out of 4.00 Flag question Question text

To be able to access the server with the IP address 10.12.34.56 using HTTPS, a rule for iptables

has to be written. Given that the client host's IP address is 192.168.43.12, which of the following

commands is correct?

Select one: a. iptables - A FORWARD -p tcp -s 192.168.43.12 -d 10.12.34.56 --dport 443 -j ACCEPT. b.

iptables - A FORWARD -p tcp -s 0/0 -d 10.12.34.56 --dport 80 -j ACCEPT c.

iptables - A FORWARD -p tcp -s 192.168.43.12 d 10.12.34.56:443 -j ACCEPT. d. iptables - A FORWARD -p tcp -s 0/0 -d 10.12.34.56 --dport 443 -j ACCEPT. e. iptables - A INPUT -p tcp -s 192.168.43.12 - d 10.12.34.56:80 -j ACCEPT Feedback Вашият отговор не е верен. The correct answer is: iptables - A FORWARD -p tcp -s 192.168.43.12 -d 10.12.34.56 --dport 443 -j ACCEPT. Question 16 Correct Mark 2.00 out of 2.00 Flag question Question text

What command allows you to connect to any open TCP port and enter commands by protocol directly? Select one: a. nmap b. iptables c. telnet d. dig Feedback Вашият отговор е верен. The correct answer is: telnet Question 17 Correct Mark 1.00 out of 1.00 Flag question Question text

What command can be used to do a reconnaissance attack? Select one: a. telnet b.

nmap c. nc d. fail2ban Feedback Вашият отговор е верен. The correct answer is:

nmap Question 18 Correct Mark 2.00 out of 2.00 Flag question Question text

What command can be used to establish a VPN tunnel? Select one: a. nc b. tunnel-this-vpn c. openvpn d. vpn_tun Feedback Вашият отговор е верен. The correct answer is: openvpn Question 19 Correct Mark 2.00 out of 2.00 Flag question Question text

What command is used to change the password of a SAMBA user? Select one: a. passwd b. net c.

smbpasswd d. nmblookup Feedback Вашият отговор е верен. The correct answer is:

smbpasswd Question 20 Correct Mark 2.00 out of 2.00 Flag question Question text

What command is used to check the SAMBA config file? Select one: a.

smbclient –check-config smb.conf b. nfsstat c. testparm d. smbstatus Feedback Вашият отговор е верен. The correct answer is: testparm Question 21 Correct Mark 2.00 out of 2.00 Flag question Question text

What command is used to disable a module (Apache Web Server)? Select one: a. a2enmod b. a2dissite c. a2ensite d. a2dismod Feedback Вашият отговор е верен. The correct answer is: a2dismod Question 22 Correct Mark 2.00 out of 2.00 Flag question Question text

What command is used to enable new virtual web site (Apache Web Server)? Select one: a. a2dissite b. a2ensite c. a2dismod d. a2enmod Feedback Вашият отговор е верен. The correct answer is: a2ensite Question 23 Correct Mark 2.00 out of 2.00 Flag question Question text

What command is used to reload a set of saved netfilter rules?

Select one: a. iptables-restore b. iptables-load c. iptables-reload d. iptables-recover Feedback Вашият отговор е верен. The correct answer is: iptables-restore Question 24 Incorrect Mark 0.00 out of 2.00 Flag question Question text

What command is used to restart the Apache Web Server? Select one: a. service apache reload b. service apache restart c. service apache2 load d. apache2ctl restart Feedback Вашият отговор не е верен. The correct answer is: apache2ctl restart Question 25 Correct Mark 2.00 out of 2.00 Flag question Question text

What command is used to show the current SAMBA connections? Select one: a. smbstatus b. nfsstat c. testparm d.

smbclient –check-config smb.conf Feedback Вашият отговор е верен. The correct answer is: smbstatus Question 26 Correct Mark 2.00 out of 2.00 Flag question Question text

What is the correct format for an ftpusers file entry?

Select one: a. Use only one username on each line. b. Add ALLOW after each username. c.

Add a colon after each username. d. Add DENY after each username. e.

Add a semicolon after each username. Feedback Вашият отговор е верен. The correct answer is: Use only one username on each line. Question 27 Correct Mark 2.00 out of 2.00 Flag question Question text

What is the purpose of a PTR record? Select one: a.

To provide additional host information. b. To direct email to a specific host. c.

To provide IP to name resolution. d. To provide name to IP resolution. e. To direct clients to another nameserver. Feedback Вашият отговор е верен. The correct answer is:

To provide IP to name resolution. Question 28 Correct Mark 2.00 out of 2.00 Flag question Question text

What option for BIND is required in the global options to disable recursive queries on the DNS

server by default?

Select one: a. recursion { none; }; b. recursion no; c. allow-recursive-query off; d. allow-recursive-query { none; }; Feedback Вашият отговор е верен. The correct answer is: recursion no; Question 29 Correct Mark 3.00 out of 3.00 Flag question Question text

When the default policy for the iptables INPUT chain is set to DROP, why should a rule allowing

traffic to localhost exist?

Select one: a.

It doesn't matter; iptables never affects packets addressed to localhost b.

All traffic to localhost must always be allowed. c. syslogd receives messages on localhost d. Some applications use the localhost interface to communicate with other applications. e. Sendmail delivers emails to localhost Feedback Вашият отговор е верен. The correct answer is: Some applications use the localhost interface to communicate with other applications. Question 30 Correct Mark 2.00 out of 2.00 Flag question Question text

Which dhcpd.conf option defines the DNS server address(es) to be sent to the DHCP clients? Select one: a. domain-nameserver b. domainname c. domain-name-servers d. domain-name-server e. Feedback Вашият отговор е верен. The correct answer is: domain-name-servers Question 31 Correct Mark 2.00 out of 2.00 Flag question Question text

Which of the following files needs to be changed in order to enable anonymous FTP logins with

vsftpd?

Select one: a. /etc/vsftp/ftp.conf b. /etc/vsftpd.conf c. /etc/vsftpd/ftpd.conf d. /etc/vsftpd/anon.conf e. /etc/ftpd.conf Feedback Вашият отговор е верен. The correct answer is: /etc/vsftpd.conf Question 32 Correct Mark 2.00 out of 2.00 Flag question Question text

Which of these tools can provide the most information about DNS queries? Select one: a. named-checkzone b. named-checkconf c. dig d. host e. nslookup Feedback Вашият отговор е верен. The correct answer is: dig Question 33 Correct Mark 2.00 out of 2.00 Flag question Question text

Which option in named.conf specifies which hosts are permitted to ask for domain name information from the server? Select one: a. query-permitted b. allow-query c.

accept-query d. permit-query e. allowed-hosts Feedback Вашият отговор е верен. The correct answer is: allow-query Question 34 Correct Mark 2.00 out of 2.00 Flag question Question text

Which port must be open on a firewall, to allow a DNS server to receive queries? (Enter only the port number). Select one: a. 123 b. 53 c. 161 d. 20 e. 21 Feedback Вашият отговор е верен. The correct answer is: 53 Question 35 Correct Mark 2.00 out of 2.00 Flag question Question text

Which two ports are used to send and receive e-mail? (select 2 answers) Select one or more: a. 80 b. 22 c. 23 d. 110 e.

25 f. 53 Feedback Вашият отговор е верен. The correct answers are:

25, 110 Question 36 Correct Mark 4.00 out of 4.00 Flag question Question text

You need to do a wireless capture of all WiFi channels, but the box with the wireless adapter is not powerful enough for the task. You have dedicated a server for such tasks with an IP address of 192.168.244.132. The server accepts only lower case letters for file names. Which set of commands can help you achieve this? (select 2 answers) Select one or more: a.

telnet 192.168.244.132 80 b. nc –l –p 31337 > All.pcap c. tcpdump -n -i wlan0 -s 65535 -w - not port 31337 | nc 192.168.244.132 31337 d. nc –l –p 31337 > all.pcap Feedback Вашият отговор е верен. The correct answers are: tcpdump -n -i wlan0 -s 65535 -w - not port 31337 | nc 192.168.244.132 31337, nc –l –p 31337 > all.pcap Question 37 Incorrect Mark 0.00 out of 2.00 Flag question Question text

With netfilter, which packet matching table contains built-in chains called INPUT, OUTPUT and FORWARD?

Select one: a. ipconn b. masq c. default d. filter e. nat Feedback Вашият отговор не е верен. The correct answer is: filter Question 38 Correct Mark 4.00 out of 4.00 Flag question Question text

You have the following output:

Chain INPUT (policy DROP)

Chain FORWARD (policy ACCEPT)

Chain OUTPUT (policy ACCEPT)

Based on the information above, which statement is correct?

Select one: a. Traffic going to the box will be dropped and traffic from the box or traffic going through the box will be allowed. b.

Traffic going to the box will be allowed, traffic going from the box will be dropped and traffic passing through the box will be rejected. c.

Traffic going to the box will be dropped, traffic going from the box will be dropped and traffic passing through the box will be allowed. d. Traffic going to and from the box will be allowed, traffic passing through the box will be rejected. Feedback Вашият отговор е верен. The correct answer is: Traffic going to the box will be dropped and traffic from the box or traffic going through the box will be allowed. Question 39 Correct Mark 4.00 out of 4.00 Flag question Question text

You have the following web server configuration.

<VirtualHost *:80>

            ServerAdmin webmaster@localhost

            DocumentRoot /var/www/tempcust/

            ErrorLog ${APACHE_LOG_DIR}/error.log

            CustomLog ${APACHE_LOG_DIR}/access.log combined

In order to change the start page of this virtual server, you need to add the following row:

Select one: a. HomePage start.php b. StartPage start.php c. HomeIndex start.php d. DirectoryIndex start.php Feedback Вашият отговор е верен. The correct answer is: DirectoryIndex start.php Question 40 Correct Mark 4.00 out of 4.00 Flag question Question text

According to the dhcpd.conf file below, which domain name will clients in the 172.16.87.0/24 network get?

default-lease-time 1800

max-lease-time 7200

option domain-name "mydomain.com"

subnet 172.16.87.0 netmask 255.255.255.0 {

            range 172.16.87.10 172.16.87.20;

            option broadcast-address 172.16.87.255

            option domain-name-servers 172.16.87.1;

            option domain-name "lab.mydomain.com"

}

subnet 172.16.88.0 netmask 255.255.255.0 {

            range 172.16.88.10 172.16.88.20;

            option broadcast-address 172.16.88.255

            option domain-name-servers 172.16.88.1;

}

Answer: Feedback The correct answer is: lab.mydomain.com Question 41 Incorrect Mark 0.00 out of 4.00 Flag question Question text Using only commands included with named, what is the command, with options or parameters, to make named re-read its zone files? Answer: Feedback The correct answer is: rndc reload