LCA System Security & Firewall Management 2

Question 1

Which firewalld zone is most appropriate for a highly trusted internal network interface?

Accepted Answer

trusted

Answer

The 'trusted' zone in firewalld accepts all connections and is designed for fully trusted networks.

Question 2

What command permanently adds HTTP service to the active firewalld zone?

Accepted Answer

firewall-cmd --permanent --add-service=http

Answer

The --permanent flag ensures the rule persists across reboots; --reload is then needed to apply it.

Question 3

Which SELinux command is used to change a file's security context permanently?

Accepted Answer

semanage fcontext

Answer

semanage fcontext adds a persistent policy rule, while chcon only changes the context temporarily.

Question 4

What does the 'nmap -sS' scan type perform?

Accepted Answer

TCP SYN (stealth) scan

Answer

A SYN scan sends SYN packets and never completes the handshake, making it faster and less detectable than a full connect scan.

Question 5

Which file configures system-wide PAM password quality requirements on RHEL-based systems?

Accepted Answer

/etc/security/pwquality.conf

Answer

pwquality.conf is read by the pam_pwquality module to enforce password complexity rules.

(LCA) Certified Linux Administrator Practice Test