202-450 試験問題を無料オンラインアクセス

Using its standard configuration, how does fail2ban block offending SSH clients?

• A.By creating and maintaining netfilter rules.
• B.By modifying and adjusting the TCP Wrapper configuration for SSHD.
• C.By creating null routes that drop any answer packets sent to the client.
• D.By rejecting connections due to its role as a proxy in front of SSHD.
• E.By modifying and adjusting the SSHD configuration.

Which of the following options are valid in /etc/exports? (Choose two.)

• A.uid
• B.ro
• C.norootsquash
• D.rw
• E.rootsquash

With fail2ban, what is a 'jail'?

• A.A netfilter rules chain blocking offending IP addresses for a particular service
• B.A group of services on the server which should be monitored for similar attack patterns in the log files
• C.The chroot environment in which fail2ban runs
• D.A filter definition and a set of one or more actions to take when the filter is matched

Which of the following are logging directives in Apache HTTPD? (Choose two.)

• A.ErrorLog
• B.ServerLog
• C.TransferLog
• D.CustomLog
• E.VHostLog

On a Linux router, packet forwarding for IPv4 has been enabled. After a reboot, the machine no longer forwards IP packets from other hosts. The command:
echo 1 > /proc/sys/net/ipv4/ip_forward
temporarily resolves this issue.
Which one of the following options is the best way to ensure this setting is saved across system restarts?

• A.In /etc/sysconfig/iptables-config add ipv4.ip_forward = 1
• B.In /etc/sysct1.conf change net.ipv4.ip_forward to 1
• C.Add echo 1 > /proc/sys/net/ipv4/ip_forward to the root user login script
• D.Add echo 1 > /proc/sys/net/ipv4/ip_forward to any user login script
• E.In /etc/rc.local add net.ipv4.ip_forward = 1