linux安全模拟试题（国外英文资料）.doc

linux安全模拟试题（国外英文资料） One, single choice question (one point per question) The default keystore file on the server side is () when building a key-based SSH service. (choose one item) A: know_hosts B: authorized_keys C: id. Rsa D: id_rsa.pub Reference answer: B If you need to configure the iptables firewall to enable Intranet users to share the Internet via NAT, you can add MASQUERADE rules to (). A: the filter in the table of the OUTPUT chain B: the filter in the table FORWARD chain C: the PREROUTING chain in the NAT table D: the POSTOUTING chain in the NAT table Reference answer: D In the RHEL5 system, security tools () are used to detect vulnerabilities and vulnerabilities in the networks hosts, and provide targeted security recommendations. (choose one item) A: NMAP B: Nessus C: EtterCAP D: WireShark Reference answer: B 4. Squid proxy server in the RHEL5 system is installed by default, squids. Conf Squid is the main configuration file server, Squid in the conf configuration file does not include () in the default configuration. A: http_port sets the network port for the agent service 8080 B: using the cache_mem sets the buffer memory size of the proxy server using 8MB C: cache_dir sets the working directory of the proxy server /var/spool/squid D: the proxy server is set up using http_access and acl to accept only agent access requests from the native Reference answer: a. 5. In RHEL5 system command interface, if set the environment variable () has a value of 60, is when the user more than 60 seconds without any operation, will automatically cancel the current command to the location of the terminal. A: TTL B: IDLE_TTL C: TMOUT D: the TIMEOUT Reference answer: C 6. In building a gateway server RHEL5 system, in the NAT table of iptables firewall is set up correctly () strategy, in the Internet network can be used to publish the application server is located in the local area network. A: SNAT B: DNAT C: MASQUERADE D: REDIRECT Reference answer: B In the cacti detection