← Back to exam page

212-77 – Linux Security

Loading demo links...

Showing 1–3 of 8 questions

Question 1

Which of the following types of information is returned by typing ifconfig eth0?

(Choose two)

Select all that apply, then click Submit answer.

  • ○

    The names of programs that are using eth0

  • ○

    The IP address assigned to eth0

  • ○

    The hardware address of eth0

  • ○

    The hostname associated with eth0


Question 2

Which of the following are risks of SUID and SGID programs? (Choose two)

Select all that apply, then click Submit answer.

  • ○

    Bugs in the programs may cause more damage than they would in ordinary programs.

  • ○

    The program files are large and thus may cause a disk to run out of space.

  • ○

    Because the programs require password entry, running them over an insecure network link runs the risk of password interception.

  • ○

    Users may be able to abuse a program's features, thus doing more damage than would otherwise be possible.


Question 3

A computer is chained firmly to the wall, all of its accounts are secured with good shadowed passwords, and it's configured to boot only from its hard disk, but the system has no BIOS or boot loader password. No users are currently logged into this system. How might a malicious individual without an account on this system corrupt it if given a few minutes alone with it? (Choose two)

Select all that apply, then click Submit answer.

  • ○

    The intruder could reboot it, reconfigure it to boot from floppy, boot a DOS floppy, and use DOS's disk utilities to delete the Linux partitions and erase the hard disk.

  • ○

    The intruder could open the case, remove the hard disk and insert it in another computer, then modify the configuration files and return the hard disk to the original machine.

  • ○

    The intruder could run a password-cracking program on the system's /etc/passwd file, thus obtaining all the user's passwords for use in further compromising the system at a later date.

  • ○

    The intruder could utilize a bug in su, passwd, or some other SUID root program to acquire root privileges and then alter the system's configuration files.