Which of the following BEST describes containers running on a Linux system?

• A.Containers only need the namespaces functionality to run on a Linux system available since kernel 2.6.
• B.Containers need a hypervisor to run on a Linux system. Cgroups namespaces are functionalities used for the kernel but not for running containers.
• C.Containers only need the cgroups functionality for running on a Linux system. Namespaces is not a Linux kernel functionality needed for creating and managing containers.
• D.Containers use the cgroups and namespaces functionalities to isolate processes and assign hardware resources to each of those isolated processes.

Comment: *

Name: *

Email: *

Verification: *

A technician wants to secure a sensitive workstation by ensuring network traffic is kept within the local subnet. To accomplish this task, the technician executes the following command:
echo 0 > /proc/sys/net/ipv4/ip_default_ttl
Which of the following commands can the technician use to confirm the expected results? (Choose two.)

• A.ip
• B.tcpdump
• C.route
• D.iperf
• E.traceroute
• F.arp

Comment: *

Name: *

Email: *

Verification: *

A systems administrator configured a new kernel module, but it stopped working after reboot. Which of the following will allow the systems administrator to check for module problems during server startup?

• A.lsmod
• B.modprobe
• C.modinfo
• D.dmesg

Comment: *

Name: *

Email: *

Verification: *

A Linux systems administrator is setting up SSH access with PKI for several using their newly created RSA keys. Which of the following MOST securely achieves this task?

• A.Use curl to copy each user's public key file to the respective system
• B.Use ssh-copy-id to copy each user's public key file to the respective system
• C.Use cp to copy each user's public key file to the respective system
• D.Use ssh-copy-id to copy each user's private key file to the respective system

Comment: *

Name: *

Email: *

Verification: *

A Linux administrator is helping the security team troubleshoot an SELinux policy violation incident. Which of the following would be the BEST utility command to display SELinux violation and AVC denial messages?

• A.sealert -a /var/log/audit/audit.log
• B.cat /var/log/messages | grep selinux
• C.journalctl | grep sealert
• D.aureport | grep AVC

Comment: *

Name: *

Email: *

Verification: *