A security-conscious administrator would change which TWO of the following lines found in an SSH configuration file?

A. Protocol 2, 1

B. PermitEmptyPasswords no

C. Port 22

D. PermitRootLogin yes

E. IgnoreRhosts yes

A GRUB boot loader installed in the MBR was accidentally overwritten. After booting with a rescue CDROM, how can the lost GRUB first stage loader be recovered?

A. Use dd to restore a previous backup of the MBR

B. Install LILO since there is no easy way to recover GRUB

C. Running mformat will create a new MBR and fix GRUB using info from grub.conf

D. Run grub-install after verifying that grub.conf is correct.

E. Run fdisk --mbr /dev/had assuming that the boot harddisk is /dev/hda.

Which TWO of the following wireless tools can be used to check the wireless network link quality?

A. iwconfig

B. iwlink

C. iwscan

D. iwifi

E. iwspy

Which daemon is required on the client if an ethernet device gets its IP address from a central server?

A. dhcp

B. dhcpcd

C. bootpd

D. ethd

E. dhcpd

What is the correct format for an ftpusers file entry?

A. Use only one username on each line.

B. Add a colon after each username.

C. Add a semicolon after each username.

D. Add ALLOW after each username.

E. Add DENY after each username.

Using only commands included with named, what is the command, with options or parameters, to make named re-read its zone files?

A. rndc reload

A server with 2 network interfaces, eth0 and eth1, should act as a router. eth0 has the IP address 192.168.0.1 in the subnet 192.168.0.1/24 and eth1 has the IP address 10.0.0.1 in the subnet 10.0.0.0/16.

The routing table looks fine, but no data is traversing the networks. Which TWO of the following need to be done?

A. Enable IP forwarding with echo "1" > /proc/sys/net/ipv4/ip_forward

B. Add new firewall chains to handle inbound and outbound traffic on both interfaces.

C. Reconfigure the firewall rules to allow traffic to traverse the networks.

D. The routing table needs to be restarted, for the changes to take effect.

E. The server needs to be restarted, for the changes to take effect.

After the installation of Dovecot, it is observed that the dovecot processes are shown in ps ax like this:

In order to associate the processes with users and peers, the username, IP address of the peer and the connection status, which of the following options must be set?

A. --with-linux-extprocnames for ./configure when building Dovecot

B. sys.ps.allow_descriptions = 1 in sysct1.conf or /proc

C. proc.all.show_status = 1 in sysctl.conf or /proc

D. verbose_proctitle = yes in the Dovecot configuration

E. process_format = "%u %I %s" in the Dovecot configuration

In order to join a file server to the Active Directory domain intra.example.com, the following smb.conf has been created:

The command net ads join raises an error and the server is not joined to the domain. What should be done to successfully join the domain?

A. Change server role to ad member server to join an Active Directory domain instead of an NT4 domain.

B. Add realm = intra.example.com to the smb.conf and change workgroup to the domain's netbios workgroup name.

C. Manually create a machine account in the Active Directory domain and specify the machine account's name with when starting net ads join.

D. Remove the winbind enum users and winbind enum groups since winbind is incompatible with Active Directory domains.

E. Remove all idmap configuration stanzas since the id mapping is defined globally in an Active Directory domain and cannot be changed on a member server.

Which Apache HTTPD configuration directive specifies the RSA private key that was used in the generation of the SSL certificate for the server?

A. SSLCertificateKeyFile

B. SSLKeyFile

C. SSLPrivateKeyFile

D. SSLRSAKeyFile