CSA Server Configuration & Management 3 — Questions and Answers
Question 1: What is the primary function of a bastion host in a server environment?
- Serve as the primary file storage node
- Act as a secure, hardened entry point for accessing internal network resources (Correct answer)
- Provide automatic failover for the primary web server
- Handle all outbound email routing for the organization
Correct answer: Act as a secure, hardened entry point for accessing internal network resources
A bastion host is a specially hardened server that provides a secure, monitored entry point (often via SSH/RDP) for administrators accessing an internal network.
Question 2: Which log file in Linux systems records authentication attempts and sudo usage?
- /var/log/syslog
- /var/log/auth.log (Correct answer)
- /var/log/kern.log
- /var/log/messages
Correct answer: /var/log/auth.log
The /var/log/auth.log file (on Debian/Ubuntu) records all authentication events including SSH logins, sudo commands, and failed login attempts.
Question 3: What does 'server hardening' involve?
- Adding physical reinforcement to server rack enclosures
- Reducing the server's attack surface by disabling unnecessary services and applying security policies (Correct answer)
- Increasing CPU and RAM capacity for high-load environments
- Configuring RAID arrays to protect against disk failure
Correct answer: Reducing the server's attack surface by disabling unnecessary services and applying security policies
Server hardening involves disabling unused services, applying patches, enforcing strong passwords, and configuring security policies to minimize vulnerabilities.
Question 4: Which command is used to view real-time CPU and memory usage on a Linux server?
- netstat
- top (Correct answer)
- df -h
- lsblk
Correct answer: top
The `top` command displays real-time information about running processes, CPU usage, and memory consumption on a Linux system.
Question 5: What is the purpose of a server's management NIC (Network Interface Card) in an out-of-band management setup?
- Handles all production user traffic at higher throughput
- Provides a dedicated network path for server management independent of the production network (Correct answer)
- Bonds multiple NICs together for redundancy
- Connects the server to a storage area network
Correct answer: Provides a dedicated network path for server management independent of the production network
An out-of-band management NIC (often connected to an IPMI/iDRAC/iLO interface) allows administrators to manage a server even when the OS is down.
Question 6: In Windows Server, what is the role of Active Directory Domain Services (AD DS)?
- Manage disk partitions and storage volumes
- Provide centralized authentication, authorization, and directory services for users and computers (Correct answer)
- Host websites and web applications
- Monitor network bandwidth usage across the domain
Correct answer: Provide centralized authentication, authorization, and directory services for users and computers
AD DS provides a centralized directory for managing users, computers, groups, and policies across a Windows domain environment.
Question 7: What is a 'snapshot' in the context of virtual machine management?
- A real-time performance report of VM resource usage
- A point-in-time copy of a VM's disk state that can be used to roll back changes (Correct answer)
- A network packet capture taken from the virtual switch
- A backup of VM configuration files only, excluding disk data
Correct answer: A point-in-time copy of a VM's disk state that can be used to roll back changes
A VM snapshot captures the state of a virtual machine's disk (and optionally memory) at a specific moment, allowing rollback if needed.
CSA Server Configuration & Management 3
What is the primary function of a bastion host in a server environment?