GSEC Definitions and Practice Questions
With Correct Answers
$ |- |CORRECT |ANSWER✔✔-Hidden |and |admin |share
./ |- |CORRECT |ANSWER✔✔-CLI |for |beginning |to |run |an |executable |command |in |the |current |
directory
./ |configure |- |CORRECT |ANSWER✔✔-This |is |the |new |makefile |usually |have |to |type |./configure |
as |most |people |don't |have |the |current |directory |in |their |search |path
/ |- |CORRECT |ANSWER✔✔-Root |file |system |top |of |the |directory |hierarchy
./ |configure |&&make&&make |install |- |CORRECT |ANSWER✔✔-•make |= |make |would |be |
executed, |it |would |look |for |the |first |target |in |Makefile |and |do |what |the |instructions |said. |The |
expected |end |result |would |be |to |build |an |executable |program. |•make |install |= |This |again |
invokes |make, |make |finds |the |target |install |in |Makefile |and |files |the |directions |to |install |the |
program.
/bin |- |CORRECT |ANSWER✔✔-location |of |executable |programs, |some |SUID/SGID
/bin, |/usr/bin, |/usr/local, |/opt |- |CORRECT |ANSWER✔✔-location |of |executable |programs, |some
|SUID/SGID
/dev |or |/devices |- |CORRECT |ANSWER✔✔-location |that |contains |devices |files |that |programs |
running |on |the |system |use |to |communicate |with |the |physical |hardware |devices |controlled |by |
the |OS |kernel; |directory |containing |"files" |used |to |talk |to |system |devices
,/dev/hda |- |CORRECT |ANSWER✔✔-HDA |is |first |IDE |HDD. |SDA1 |is |1st |partition |on |that |drive. |0-
15
/dev/sda |- |CORRECT |ANSWER✔✔-Sda |is |the |first |SCSI |HDD. |SDA1 |is |the |first |partition. |0-15
/etc/aliases |- |CORRECT |ANSWER✔✔-file |is |used |to |contain |mail |aliases.
/etc/default/useradd |- |CORRECT |ANSWER✔✔-Config |file |for |password |aging
/etc/fstab |- |CORRECT |ANSWER✔✔-File |is |used |in |most |Linux/Windows |to |hold |the |static |
name-to-address |maps || |Linux |= |/etc/hosts || |Windows |= |%\systemroot%\system32\drivers\
etc\hosts |and |lmhosts
/etc/hosts |- |CORRECT |ANSWER✔✔-File |is |used |in |most |Linux/Windows |to |hold |the |static |
name-to-address |maps || |Linux |= |/etc/hosts || |Windows |= |%\systemroot%\system32\drivers\
etc\hosts |and |lmhosts
/etc/init.d |- |CORRECT |ANSWER✔✔-directory |where |control |scripts |are |stored; |The |
initialization |scripts |used |during |system |startup |can |also |be |used |to |startup |services |
individually. |These |are |located |in |the |/etc/init.d |directories, |and |can |be |used |to |(re)launch |
services |using |the |following |syntax: |# |/etc/init.d/<script |name> |start
/etc/inittab |- |CORRECT |ANSWER✔✔-Lists |each |of |the |init |processes |the |system |should |start |at
|boot |and |stop |at |shutdown
/etc/login.defs |- |CORRECT |ANSWER✔✔-Config |files |for |password |aging
/etc/logrotate.conf |- |CORRECT |ANSWER✔✔-moves |log |files |to |keep |from |over |filling |log |space
,/etc/named.conf |- |CORRECT |ANSWER✔✔-(if |it |exists) |is |the |configuration |file |for |the |local |
name |service |cache
/etc/pam.d |- |CORRECT |ANSWER✔✔-Location |of |all |PAM |configuration |files
/etc/pam.d/system-auth |- |CORRECT |ANSWER✔✔-used |to |enforce |passwords |strength |and |
reuse |restrictions
/etc/passwd |- |CORRECT |ANSWER✔✔-Today's |Linux |environment |uses |a |two |file |system |-
|/etc/passwd |and |/etc/shadow; |passwords |are |not |stored |in |/etc/shadow/; |shadow |file |only |
accessible |by |root
/etc/resolv.conf |- |CORRECT |ANSWER✔✔-tells |the |host |in |which |order |to |attempt |to |resolve |
names
/etc/security/opasswd |- |CORRECT |ANSWER✔✔-file |created |to |restrict |use |of |previous |
passwords
/etc/services |- |CORRECT |ANSWER✔✔-Mapping |of |services |to |port. |Works |with |inetd.conf
/etc/shadow |- |CORRECT |ANSWER✔✔-Today's |Linux |environment |uses |a |two |file |system |-
|/etc/passwd |and |/etc/shadow; |passwords |are |not |stored |in |/etc/shadow/; |shadow |file |only |
accessible |by |root
/etc/xinetd.conf |- |CORRECT |ANSWER✔✔-Global |xinetd |configuratio |file. |Read-only |once |the |
xinet |service |is |started.
/export/home, |/home |- |CORRECT |ANSWER✔✔-user |home |directories.
, /home |- |CORRECT |ANSWER✔✔-user |home |directories
/opt |- |CORRECT |ANSWER✔✔-executable |programs, |some |SUID/SGID
/sbin |- |CORRECT |ANSWER✔✔-Contains |system |binary |files
/usr |- |CORRECT |ANSWER✔✔-Most |of |the |critical |components |of |the |OS |live, |including |system |
binaries, |programming |libraries |and |tools, |and |on-line |documentation; |Ready-Only |unless |OS |is
|upgraded |or |patches |installed. |Files |should |be |protected.
/usr/bin |- |CORRECT |ANSWER✔✔-executable |programs, |some |SUID/SGID
/usr/local |- |CORRECT |ANSWER✔✔-executable |programs, |some |SUID/SGID
/usr/sbin |- |CORRECT |ANSWER✔✔-Contains |system |binary |files.
/var |- |CORRECT |ANSWER✔✔-Systems |keeps |frequent |changing |data, |such |as |log |files |and |
temp |queues |for |system |services |like |email
/var/log/secure |- |CORRECT |ANSWER✔✔-Activities |related |to |the |use |of |the |su |command |are |
authentication |types |of |activities, |where |the |user |must |authenticate |themselves |to |the |system
|before |being |allowed |to |switch |users. |Authentication |activities |are |logged |under |the |rules |
associated |with |the |"auth" |and |"authpriv" |facilities |in |the |syslog.conf |file. |Based |on |this |
syslog.conf |file, |the |"authpriv" |facility |messages |are |supposed |to |be |sent |to |/var/log/secure.
| |- |CORRECT |ANSWER✔✔-Piping |use; |Piping |command |output |into |another |command |as |
input.
> |- |CORRECT |ANSWER✔✔-Creating |output |files
With Correct Answers
$ |- |CORRECT |ANSWER✔✔-Hidden |and |admin |share
./ |- |CORRECT |ANSWER✔✔-CLI |for |beginning |to |run |an |executable |command |in |the |current |
directory
./ |configure |- |CORRECT |ANSWER✔✔-This |is |the |new |makefile |usually |have |to |type |./configure |
as |most |people |don't |have |the |current |directory |in |their |search |path
/ |- |CORRECT |ANSWER✔✔-Root |file |system |top |of |the |directory |hierarchy
./ |configure |&&make&&make |install |- |CORRECT |ANSWER✔✔-•make |= |make |would |be |
executed, |it |would |look |for |the |first |target |in |Makefile |and |do |what |the |instructions |said. |The |
expected |end |result |would |be |to |build |an |executable |program. |•make |install |= |This |again |
invokes |make, |make |finds |the |target |install |in |Makefile |and |files |the |directions |to |install |the |
program.
/bin |- |CORRECT |ANSWER✔✔-location |of |executable |programs, |some |SUID/SGID
/bin, |/usr/bin, |/usr/local, |/opt |- |CORRECT |ANSWER✔✔-location |of |executable |programs, |some
|SUID/SGID
/dev |or |/devices |- |CORRECT |ANSWER✔✔-location |that |contains |devices |files |that |programs |
running |on |the |system |use |to |communicate |with |the |physical |hardware |devices |controlled |by |
the |OS |kernel; |directory |containing |"files" |used |to |talk |to |system |devices
,/dev/hda |- |CORRECT |ANSWER✔✔-HDA |is |first |IDE |HDD. |SDA1 |is |1st |partition |on |that |drive. |0-
15
/dev/sda |- |CORRECT |ANSWER✔✔-Sda |is |the |first |SCSI |HDD. |SDA1 |is |the |first |partition. |0-15
/etc/aliases |- |CORRECT |ANSWER✔✔-file |is |used |to |contain |mail |aliases.
/etc/default/useradd |- |CORRECT |ANSWER✔✔-Config |file |for |password |aging
/etc/fstab |- |CORRECT |ANSWER✔✔-File |is |used |in |most |Linux/Windows |to |hold |the |static |
name-to-address |maps || |Linux |= |/etc/hosts || |Windows |= |%\systemroot%\system32\drivers\
etc\hosts |and |lmhosts
/etc/hosts |- |CORRECT |ANSWER✔✔-File |is |used |in |most |Linux/Windows |to |hold |the |static |
name-to-address |maps || |Linux |= |/etc/hosts || |Windows |= |%\systemroot%\system32\drivers\
etc\hosts |and |lmhosts
/etc/init.d |- |CORRECT |ANSWER✔✔-directory |where |control |scripts |are |stored; |The |
initialization |scripts |used |during |system |startup |can |also |be |used |to |startup |services |
individually. |These |are |located |in |the |/etc/init.d |directories, |and |can |be |used |to |(re)launch |
services |using |the |following |syntax: |# |/etc/init.d/<script |name> |start
/etc/inittab |- |CORRECT |ANSWER✔✔-Lists |each |of |the |init |processes |the |system |should |start |at
|boot |and |stop |at |shutdown
/etc/login.defs |- |CORRECT |ANSWER✔✔-Config |files |for |password |aging
/etc/logrotate.conf |- |CORRECT |ANSWER✔✔-moves |log |files |to |keep |from |over |filling |log |space
,/etc/named.conf |- |CORRECT |ANSWER✔✔-(if |it |exists) |is |the |configuration |file |for |the |local |
name |service |cache
/etc/pam.d |- |CORRECT |ANSWER✔✔-Location |of |all |PAM |configuration |files
/etc/pam.d/system-auth |- |CORRECT |ANSWER✔✔-used |to |enforce |passwords |strength |and |
reuse |restrictions
/etc/passwd |- |CORRECT |ANSWER✔✔-Today's |Linux |environment |uses |a |two |file |system |-
|/etc/passwd |and |/etc/shadow; |passwords |are |not |stored |in |/etc/shadow/; |shadow |file |only |
accessible |by |root
/etc/resolv.conf |- |CORRECT |ANSWER✔✔-tells |the |host |in |which |order |to |attempt |to |resolve |
names
/etc/security/opasswd |- |CORRECT |ANSWER✔✔-file |created |to |restrict |use |of |previous |
passwords
/etc/services |- |CORRECT |ANSWER✔✔-Mapping |of |services |to |port. |Works |with |inetd.conf
/etc/shadow |- |CORRECT |ANSWER✔✔-Today's |Linux |environment |uses |a |two |file |system |-
|/etc/passwd |and |/etc/shadow; |passwords |are |not |stored |in |/etc/shadow/; |shadow |file |only |
accessible |by |root
/etc/xinetd.conf |- |CORRECT |ANSWER✔✔-Global |xinetd |configuratio |file. |Read-only |once |the |
xinet |service |is |started.
/export/home, |/home |- |CORRECT |ANSWER✔✔-user |home |directories.
, /home |- |CORRECT |ANSWER✔✔-user |home |directories
/opt |- |CORRECT |ANSWER✔✔-executable |programs, |some |SUID/SGID
/sbin |- |CORRECT |ANSWER✔✔-Contains |system |binary |files
/usr |- |CORRECT |ANSWER✔✔-Most |of |the |critical |components |of |the |OS |live, |including |system |
binaries, |programming |libraries |and |tools, |and |on-line |documentation; |Ready-Only |unless |OS |is
|upgraded |or |patches |installed. |Files |should |be |protected.
/usr/bin |- |CORRECT |ANSWER✔✔-executable |programs, |some |SUID/SGID
/usr/local |- |CORRECT |ANSWER✔✔-executable |programs, |some |SUID/SGID
/usr/sbin |- |CORRECT |ANSWER✔✔-Contains |system |binary |files.
/var |- |CORRECT |ANSWER✔✔-Systems |keeps |frequent |changing |data, |such |as |log |files |and |
temp |queues |for |system |services |like |email
/var/log/secure |- |CORRECT |ANSWER✔✔-Activities |related |to |the |use |of |the |su |command |are |
authentication |types |of |activities, |where |the |user |must |authenticate |themselves |to |the |system
|before |being |allowed |to |switch |users. |Authentication |activities |are |logged |under |the |rules |
associated |with |the |"auth" |and |"authpriv" |facilities |in |the |syslog.conf |file. |Based |on |this |
syslog.conf |file, |the |"authpriv" |facility |messages |are |supposed |to |be |sent |to |/var/log/secure.
| |- |CORRECT |ANSWER✔✔-Piping |use; |Piping |command |output |into |another |command |as |
input.
> |- |CORRECT |ANSWER✔✔-Creating |output |files
