Cover Page

CompTIA Linux+™
Powered by Linux Professional Institute Study Guide

Exam LX0-103 and Exam LX0-104

Third Edition

 

Christine Bresnahan

Richard Blum

 

 

 

Wiley Logo
image

Acknowledgments

First, all glory and praise go to God, who through His Son, Jesus Christ, makes all things possible, and gives us the gift of eternal life.

Many thanks go to the fantastic team of people at Sybex for their outstanding work on this project. Thanks to Kenyon Brown, the acquisitions editor, for offering us the opportunity to work on this book. Also thanks to Gary Schwartz, the development editor, for keeping things on track and making this book more presentable. Thanks, Gary, for all your hard work and diligence. The technical editor, Kevin E. Ryan, did a wonderful job of double-checking all of the work in the book in addition to making suggestions to improve the content. We would also like to thank Carole Jelen at Waterside Productions, Inc., for arranging this opportunity for us and for helping us out in our writing careers.

Christine would particularly like to thank her husband, Timothy, for his encouragement, patience, and willingness to listen, even when he has no idea what she is talking about.

About the Authors

Richard Blum, CompTIA Linux+, LPIC-1, has worked in the IT industry for more than 25 years as both a system and network administrator, and he has published numerous Linux and open-source books. Rich is an online instructor for Linux and Web programming courses that are used by colleges and universities across the United States. When he is not being a computer nerd, Rich enjoys spending time with his wife, Barbara, and two daughters, Katie Jane and Jessica.

Christine Bresnahan, CompTIA Linux+, LPIC-1, started working with computers more than 25 years ago in the IT industry as a systems administrator. Christine is an Adjunct Professor at Ivy Tech Community College where she teaches Linux certification and Python programming classes. She also writes books and produces instructional resources for the classroom.

image

Introduction

Why should you learn about Linux? It's a fast-growing operating system, and it is inexpensive and flexible. Linux is also a major player in the small and mid-size server field, and it's an increasingly viable platform for workstation and desktop use as well. By understanding Linux, you'll increase your standing in the job market. Even if you already know Windows or Mac OS and your employer uses these systems exclusively, understanding Linux will give you an edge when you're looking for a new job or you're looking for a promotion. For instance, this knowledge will help you make an informed decision about if and when you should deploy Linux.

The Computing Technology Industry Association (CompTIA) has developed its Linux+ certification as an introductory certification for people who want to enter careers involving Linux. The exam is meant to certify that an individual has the skills necessary to install, operate, and troubleshoot a Linux system and is familiar with Linux-specific concepts and basic hardware.

The purpose of this book is to help you pass the Linux+ exams (LX0-103 and LX0-104), updated in 2015. Because these exams cover basic Linux installation, configuration, maintenance, applications, networking, and security, those are the topics that are emphasized in this book. You'll learn enough to get a Linux system up and running and to configure it for many common tasks. Even after you've taken and passed the Linux+ exams, this book should remain a useful reference.

What Is Linux?

Linux is a clone of the Unix operating system (OS) that has been popular in academia and many business environments for years. Formerly used exclusively on large mainframes, Unix and Linux can now run on small computers, which are actually far more powerful than the mainframes of just a few years ago. Because of its mainframe heritage, Unix (and hence also Linux) scales well to perform today's demanding scientific, engineering, and network server tasks.

Linux consists of a kernel, which is the core control software, and many libraries and utilities that rely on the kernel to provide features with which users interact. The OS is available in many different distributions, which are collections of a specific kernel with specific support programs.

Why Become Linux Certified?

Several good reasons to get your Linux certification exist. There are four major benefits:

  1. Relevance

    The exams were designed with the needs of Linux professionals in mind. Surveys of Linux administrators were performed to learn what they actually needed to know to do their jobs.

  2. Quality

    The exams have been extensively tested and validated using psychometric standards. The result is an ability to discriminate between competent administrators and those who must still learn more material.

  3. Neutrality

    CompTIA is an organization that doesn't itself market any Linux distribution. This fact removes the motivation to create an exam that's designed as a way to market a particular distribution.

  4. Support

    Major players in the Linux world support the exams.

How to Become Certified

The certification is available to anyone who passes the two required exams: LX0-103 and LX0-104 (often referred to as simply 103 and 104). You don't have to work for a particular company. It's not a secret society.

Pearson VUE administers the exam. The exam can be taken at any Pearson VUE testing center. If you pass, you will get a certificate in the mail saying that you have passed.

Who Should Buy This Book

Anybody who wants to pass the certification exams may benefit from this book. This book covers the material that someone new to Linux will need to learn the OS from the beginning, and it continues to provide the knowledge you need up to a proficiency level sufficient to pass the two exams. You can pick up this book and learn from it even if you've never used Linux before, although you'll find it an easier read if you've at least casually used Linux for a few days. If you're already familiar with Linux, this book can serve as a review and as a refresher course for information with which you might not be completely familiar. In either case, reading this book will help you pass the exams.

This book is written with the assumption that you know at least a little bit about Linux (what it is and possibly a few Linux commands). We also assume that you know some basics about computers in general, such as how to use a keyboard, how to insert a disc into an optical drive, and so on. Chances are that you have used computers in a substantial way in the past—perhaps even Linux, as an ordinary user, or maybe you have used Windows or Mac OS. We do not assume that you have extensive knowledge of Linux system administration, but if you've done some system administration, you can still use this book to fill in gaps in your knowledge.

How This Book Is Organized

This book consists of 10 chapters plus supplementary information: an online glossary, this introduction, and the assessment test after the introduction. The chapters are organized as follows:

Chapters 1 through 5 cover the LX0-103 exam, while Chapters 6 through 10 cover the LX0-104 exam. These make up Part I and Part II of the book, respectively.

What's Included in the Book

We've included several study learning tools throughout the book:

  1. Assessment Test

    At the end of this introduction is an assessment test that you can use to check your readiness for the exam. Take this test before you start reading the book; it will help you determine the areas you might need to brush up on. The answers to the assessment test questions appear on a separate page after the last question of the test. Each answer includes an explanation and a note telling you the chapter in which the material appears.

  2. Objective Map and Opening List of Objectives

    An objective map shows you where each of the exam objectives is covered in this book. In addition, each chapter opens with a list of the exam objectives it covers. Use these to see exactly where each of the exam topics is covered.

  3. Exam Essentials

    Each chapter, just after the summary, includes a number of exam essentials. These are the key topics you should take from the chapter in terms of areas to focus on when preparing for the exam.

  4. Chapter Review Questions

    To test your knowledge as you progress through the book, there are review questions at the end of each chapter. As you finish each chapter, answer the review questions and then check your answers—the correct answers and explanations are in Appendix A. You can go back to reread the section that deals with each question you got wrong to ensure that you answer correctly the next time you're tested on the material.

To get the most out of this book, you should read each chapter from start to finish and then check your memory and understanding with the end-of-chapter elements. Even if you're already familiar with a topic, you should skim the chapter; Linux is complex enough that there are often multiple ways to accomplish a task, so you may learn something even if you're already competent in an area.

Interactive Online Learning Environment and Test Bank

The interactive online learning environment that accompanies the book provides a test bank with study tools to help you prepare for the certification exam—and increase your chances of passing it the first time! The test bank includes the following:

  1. Sample Tests

    All of the questions in this book are provided, including the Assessment Test, which you'll find at the end of this introduction, and the Chapter Tests that include the Review Questions at the end of each chapter. In addition, there are two Practice Exams. Use these questions to test your knowledge of the study guide material. The online test bank runs on multiple devices.

  2. Flashcards

    Questions are provided in digital flashcard format (a question followed by a single correct answer). You can use the flashcards to reinforce your learning and provide last-minute test prep before the exam.

  3. Other Study Tools

    A glossary of key terms from this book and their definitions are available as a fully searchable PDF.

Conventions Used in This Book

This book uses certain typographic styles in order to help you quickly identify important information and to avoid confusion over the meaning of words such as onscreen prompts. In particular, look for the following styles:

In addition to these text conventions, which can apply to individual words or entire paragraphs, a few conventions highlight segments of text:

The Exam Objectives

Behind every computer industry exam, you can be sure to find exam objectives—the broad topics in which exam developers want to ensure your competency. The official exam objectives are listed here. (They're also printed at the start of the chapters in which they're covered.)

Exam LX0-103 Objectives

Following are the areas in which you must be proficient in order to pass the LX0-103 exam. This exam is broken into four topics (101–104), each of which has three to eight objectives. Each objective has an associated weight, which reflects its importance to the exam as a whole. The four main topics are as follows:

Subject Area
101 System Architecture
102 Linux Installation and Package Management
103 GNU and Unix Commands
104 Devices, Linux Filesystems, Filesystem Hierarchy Standard

101 System Architecture

101.1 Determine and configure hardware settings (Chapter 3)

  • Enable and disable integrated peripherals
  • Configure systems with or without external peripherals such as keyboards
  • Differentiate between the various types of mass storage devices
  • Know the differences between coldplug and hotplug devices
  • Determine hardware resources for devices
  • Tools and utilities to list various hardware information (e.g., lsusb, lspci, etc.)
  • Tools and utilities to manipulate USB devices
  • Conceptual understanding of sysfs, udev, hald, dbus
  • The following is a partial list of the files, terms, and utilities covered in this objective: /sys, /proc, /dev, modprobe, lsmod, lspci, lsusb

101.2 Boot the system (Chapter 5)

  • Provide common commands to the boot loader and options to the kernel at boot time
  • Demonstrate knowledge of the boot sequence from BIOS to boot completion
  • Understanding of SysVinit and systemd
  • Awareness of Upstart
  • Check boot events in the log file
  • The following is a partial list of the files, terms and utilities covered in this objective: dmesg, BIOS, bootloader, kernel, init, initramfs, SysVinit, systemd

101.3 Change runlevels/boot targets and shutdown or reboot system (Chapter 5)

  • Set the default runlevel or boot target
  • Change between runlevels/boot targets, including single user mode
  • Shutdown and reboot from the command line
  • Alert users before switching runlevels/boot targets or other major system events
  • Properly terminate processes
  • The following is a partial list of the files, terms and utilities covered in this objective: /etc/inittab, shutdown, init, /etc/init.d, telinit, systemd, systemctl, /etc/systemd/, /usr/lib/systemd/, wall

102 Linux Installation and Package Management

102.1 Design hard disk layout (Chapter 3)

  • Allocate filesystems and swap space to separate partitions or disks
  • Tailor the design to the intended use of the system
  • Ensure that the /boot partition conforms to the hardware architecture requirements for booting
  • Knowledge of basic features of LVM
  • The following is a partial list of the files, terms and utilities covered in this objective: / (root) filesystem, /var filesystem, /home filesystem, /boot filesystem, swap space, mount points, partitions

102.2 Install a boot manager (Chapter 5)

  • Providing alternative boot locations and backup boot options
  • Install and configure a boot loader such as GRUB Legacy
  • Perform basic configuration changes for GRUB 2
  • Interact with the boot loader
  • The following is a partial list of the files, terms, and utilities covered in this objective: /boot/grub/menu.lst, grub.cfg and grub.conf, grub-install, grub-mkconfig, MBR

102.3 Manage shared libraries (Chapter 2)

  • Identify shared libraries
  • Identify the typical locations of system libraries
  • Load shared libraries
  • The following is a partial list of the files, terms and utilities covered in this objective: ldd, ldconfig, /etc/ld.so.conf, LD_LIBRARY_PATH

102.4 Use Debian package management (Chapter 2)

  • Install, upgrade, and uninstall Debian binary packages
  • Find packages containing specific files or libraries which may or may not be installed
  • Obtain package information like version, content, dependencies, package integrity, and installation status (whether or not the package is installed)
  • The following is a partial list of the files, terms and utilities covered in this objective: /etc/apt/sources.list, dpkg, dpkg-reconfigure, apt-get, apt-cache, aptitude

102.5 Use RPM and YUM package management (Chapter 2)

  • Install, reinstall, upgrade. and remove packages using RPM and YUM
  • Obtain information on RPM packages such as version, status, dependencies, integrity, and signatures
  • Determine what files a package provides, as well as find which package a specific file comes from
  • The following is a partial list of the files, terms and utilities covered in this objective: rpm, rpm2cpio, /etc/yum.conf, /etc/yum.repos.d/, yum, yumdownloader

103 GNU and Unix Commands

103.1 Work on the command line (Chapter 1)

  • Use single shell commands and one-line command sequences to perform basic tasks on the command line
  • Use and modify the shell environment. including defining, referencing, and exporting environment variables
  • Use and edit command history
  • Invoke commands inside and outside the defined path
  • The following is a partial list of the files, terms, and utilities covered in this objective: bash, echo, env, exec, export, pwd, set, unset, man, uname, history, .bash_history

103.2 Process text streams using filters (Chapter 1)

  • Send text files and output streams through text utility filters to modify the output using standard Unix commands
  • The following is a partial list of the files, terms, and utilities covered in this objective: cat, cut, expand, fmt, head, od, join, less, nl, paste, pr, sed, sort, split, tail, tr, unexpand, uniq, wc

103.3 Perform basic file management (Chapter 4)

  • Copy, move, and remove files and directories individually
  • Copy multiple files and directories recursively
  • Remove files and directories recursively
  • Use simple and advanced wildcard specifications in commands
  • Using find to locate and act on files based on type, size, or time
  • Usage of tar, cpio, and dd
  • The following is a partial list of the files, terms and utilities covered in this objective: cp, find, mkdir, mv, ls, rm, rmdir, touch, tar, cpio, dd, file, gzip, gunzip, bzip2, xz, file globbing

103.4 Use streams, pipes, and redirects (Chapter 1)

  • Redirecting standard input, standard output, and standard error
  • Pipe the output of one command to the input of another command
  • Use the output of one command as arguments to another command
  • Send output to both STDOUT and a file
  • The following is a partial list of the files, terms and utilities covered in this objective: tee, xargs

103.5 Create, monitor, and kill processes (Chapter 2)

  • Run jobs in the foreground and background
  • Signal a program to continue running after logout
  • Monitor active processes
  • Select and sort processes for display
  • Send signals to processes
  • The following is a partial list of the files, terms and utilities covered in this objective: &, bg, fg, jobs, kill, nohup, ps, top, free, uptime, pgrep, pkill, killall, screen

103.6 Modify process execution priorities (Chapter 2)

  • Know the default priority of a job that is created
  • Run a program with higher or lower priority than the default
  • Change the priority of a running process
  • The following is a partial list of the files, terms, and utilities covered in this objective: nice, ps, renice, top

103.7 Search text files using regular expressions (Chapter 1)

  • Create simple regular expressions containing several notational elements
  • Use regular expression tools to perform searches through a filesystem or file content
  • The following is a partial list of the files, terms and utilities covered in this objective: grep, egrep, fgrep, sed, regex(7)

103.8 Perform basic file editing operations using vi (Chapter 5)

  • Navigate a document using vi
  • Use basic vi modes
  • Insert, edit, delete, copy, and find text
  • The following is a partial list of the files, terms and utilities covered in this objective: vi, /, ?, h, j, k, l, i, o, a, c, d, p, y, dd, yy, ZZ, :w!, :q!, :e!

104 Devices, Linux Filesystems, Filesystem Hierarchy Standard

104.1 Create partitions and filesystems (Chapter 3)

  • Manage MBR partition tables
  • Use various mkfs commands to create various filesystems, such as ext2, ext3, ext4, xfs, vfat
  • Awareness of ReiserFS and Btrfs
  • Basic knowledge of gdisk and parted with GPT
  • The following is a partial list of the files, terms, and utilities covered in this objective: fdisk, gdisk, parted, mkfs, mkswap

104.2 Maintain the integrity of filesystems (Chapter 3)

  • Verify the integrity of filesystems
  • Monitor free space and inodes
  • Repair simple filesystem problems
  • The following is a partial list of the files, terms, and utilities covered in this objective: du, df, fsck, e2fsck, mke2fs, debugfs, dumpe2fs, tune2fs, xfs tools (such as xfs_metadump and xfs_info)

104.3 Control mounting and unmounting of filesystems (Chapter 3)

  • Manually mount and unmount filesystems
  • Configure filesystem mounting on bootup
  • Configure user mountable removeable filesystems
  • The following is a partial list of the files, terms, and utilities covered in this objective: /etc/fstab, /media, mount, umount

104.4 Manage disk quotas (Chapter 4)

  • Set up a disk quota for a filesystem
  • Edit, check, and generate user quota reports
  • The following is a partial list of the files, terms, and utilities covered in this objective: quota, edquota, repquota, quotaon

104.5 Manage file permissions and ownership (Chapter 4)

  • Manage access permissions on regular and special files as well as directories
  • Use access modes such as SUID, SGID, and the sticky bit to maintain security
  • Know how to change the file creation mask
  • Use the group field to grant file access to group members
  • The following is a partial list of the files, terms, and utilities covered in this objective: chmod, umask, chown, chgrp

104.6 Create and change hard and symbolic links (Chapter 4)

  • Create links
  • Identify hard and/or soft links
  • Copying versus linking files
  • Use links to support system administration tasks
  • This utility is covered in this objective: ln, ls

104.7 Find system files and place files in the correct location (Chapter 4)

  • Understand the correct locations of files under the FHS
  • Find files and commands on a Linux system
  • Know the location and purpose of important files and directories as defined in the FHS
  • The following is a partial list of the files, terms, and utilities covered in this objective: find, locate, updatedb, whereis, which, type, /etc/updatedb.conf

Exam LX0-104 Objectives

The LX0-104 exam comprises six topics (105–110), each of which contains three or four objectives. The six major topics are as follows:

Subject Area
105 Shells, Scripting, and Data Management
106 User Interfaces and Desktops
107 Administrative Tasks
108 Essential System Services
109 Networking Fundamentals
110 Security

105 Shells, Scripting, and Data Management

105.1 Customize and use the shell environment (Chapter 9)

  • Set environment variables (e.g., PATH) at login or when spawning a new shell
  • Write bash functions for frequently used sequences of commands
  • Maintain skeleton directories for new user accounts
  • Set command search path with the proper directory
  • The following is a partial list of the files, terms, and utilities covered in this objective: source, /etc/bash.bashrc, /etc/profile, env, export, set, unset, ∼/.bash_profile, ∼/.bash_login, ∼/.profile, ∼/.bashrc, ∼/.bash_logout, function, alias, lists

105.2 Customize or write simple scripts (Chapter 9)

  • Use standard sh syntax (loops, tests)
  • Use command substitution
  • Test return values for success or failure or other information provided by a command
  • Perform conditional mailing to the superuser
  • Correctly select the script interpreter through the shebang (#!) line
  • Manage the location, ownership, execution, and SUID rights of scripts
  • The following is a partial list of the files, terms, and utilities covered in this objective: for, while, test, if, read, seq, exec

105.3 SQL data management (Chapter 9)

  • Use of basic SQL commands
  • Perform basic data manipulation
  • The following is a partial list of the files, terms, and utilities covered in this objective: insert, update, select, delete, from, where, group by, order by, join

106 User Interfaces and Desktops

106.1 Install and configure X11 (Chapter 6)

  • Verify that the video card and monitor are supported by an X server
  • Awareness of the X font server
  • Basic understanding and knowledge of the X Window configuration file
  • The following is a partial list of the files, terms, and utilities covered in this objective: /etc/X11/xorg.conf, xhost, DISPLAY, xwininfo, xdpyinfo, X

106.2 Set up a display manager (Chapter 6)

  • Basic configuration of LightDM
  • Turn the display manager on or off
  • Change the display manager greeting
  • Awareness of XDM, KDM, and GDM
  • The following is a partial list of the files, terms, and utilities covered in this objective: lightdm, /etc/lightdm

106.3 Accessibility (Chapter 6)

  • Basic knowledge of keyboard accessibility settings (AccessX)
  • Basic knowledge of visual settings and themes
  • Basic knowledge of assistive technologies (ATs)
  • The following is a partial list of the files, terms, and utilities covered in this objective: sticky/repeat keys, slow/bounce/toggle keys, mouse keys, high contrast/large Print Desktop themes, screen reader, Braille display, screen magnifier, onscreen keyboard, Gestures (used at login; for example, gdm), Orca, GOK, emacspeak

107 Administrative Tasks

107.1 Manage user and group accounts and related system files (Chapter 7)

  • Add, modify, and remove users and groups
  • Manage user/group info in password/group databases
  • Create and manage special-purpose and limited accounts
  • The following is a partial list of the files, terms, and utilities covered in this objective: /etc/passwd, /etc/shadow, /etc/group, /etc/skel, chage, getent, groupadd, groupdel, groupmod, passwd, useradd, userdel, usermod

107.2 Automate system administration tasks by scheduling jobs (Chapter 7)

  • Manage cron and at jobs
  • Configure user access to cron and at services
  • Configure anacron
  • The following is a partial list of the files, terms, and utilities covered in this objective: /etc/cron.{d,daily,hourly,monthly,weekly}, /etc/at.deny, /etc/at.allow, /etc/crontab, /etc/cron.allow, /etc/cron.deny, /var/spool/cron/*, crontab, at, atq, atrm, anacron, /etc/anacrontab

107.3 Localization and internationalization (Chapter 6)

  • Configure locale settings and environment variables
  • Configure time zone settings and environment variables
  • The following is a partial list of the files, terms, and utilities covered in this objective: /etc/timezone, /etc/localtime, /usr/share/zoneinfo, environment variables (LC_*, LC_ALL, LANG, TZ), /usr/bin/locale, tzselect, tzconfig, date, iconv, UTF-8, ISO-8859, ASCII, Unicode

108 Essential System Services

108.1 Maintain system time (Chapter 7)

  • Set the system date and time
  • Set the hardware clock to the correct time in UTC
  • Configure the correct time zone
  • Basic NTP configuration
  • Knowledge of using the pool.ntp.org service
  • Awareness of the ntpq command
  • The following is a partial list of the files, terms, and utilities covered in this objective: /usr/share/zoneinfo, /etc/timezone, /etc/localtime, /etc/ntp.conf, date, hwclock, ntpd, ntpdate, pool.ntp.org

108.2 System logging (Chapter 7)

  • Configuration of the syslog daemon
  • Understanding of standard facilities, priorities, and actions
  • Configuration of logrotate
  • Awareness of rsyslog and syslog-ng
  • The following is a partial list of the files, terms, and utilities covered in this objective: syslog.conf, syslogd, klogd, /var/log, logger, logrotate, /etc/logrotate.conf, /etc/logrotate.d/, journalctl, /etc/system/journal.conf, /var/log/journal/

108.3 Mail Transfer Agent (MTA) basics (Chapter 9)

  • Create email aliases
  • Configure email forwarding
  • Knowledge of commonly available MTA programs (postfix, sendmail, qmail, exim) (no configuration)
  • The following is a partial list of the files, terms, and utilities covered in this objective: ∼/.forward, sendmail emulation layer commands, newaliases, mail, mailq, postfix, sendmail, exim, qmail

108.4 Manage printers and printing (Chapter 6)

  • Basic CUPS configuration (for local and remote printers)
  • Manage user print queues
  • Troubleshoot general printing problems
  • Add and remove jobs from configured printer queues
  • The following is a partial list of the files, terms, and utilities covered in this objective: CUPS configuration files, tools and utilities; /etc/cups; lpd legacy interface (lpr, lprm, lpq)

109 Networking Fundamentals

109.1 Fundamentals of Internet protocols (Chapter 8)

  • Demonstrate an understanding of network masks and CIDR notation
  • Knowledge of the differences between private and public “dotted quad” IP addresses
  • Knowledge about common TCP and UDP ports (20, 21, 22, 23, 25, 53, 80, 110, 123, 139, 143, 161, 162, 389, 443, 465, 514, 636, 993, 995)
  • Knowledge about the differences and major features of UDP, TCP, and ICMP
  • Knowledge of the major differences between IPv4 and IPV6
  • Knowledge of the basic features of IPv6
  • The following is a partial list of the files, terms, and utilities covered in this objective: /etc/services, IPv4, IPv6, subnetting, TCP, UDP, ICMP

109.2 Basic network configuration (Chapter 8)

  • Manually and automatically configure network interfaces
  • Basic TCP/IP host configuration
  • Setting a default route
  • The following is a partial list of the files, terms, and utilities covered in this objective: /etc/hostname, /etc/hosts, /etc/nsswitch.conf, ifconfig, ifup, ifdown, ip, route, ping

109.3 Basic network troubleshooting (Chapter 8)

  • Manually and automatically configure network interfaces and routing tables to include adding, starting, stopping, restarting, deleting, or reconfiguring network interfaces
  • Change, view, or configure the routing table and correct an improperly set default route manually
  • Debug problems associated with the network configuration
  • The following is a partial list of the files, terms, and utilities covered in this objective: ifconfig, ip, ifup, ifdown, route, host, hostname, dig, netstat, ping, ping6, traceroute, traceroute6, tracepath, tracepath6, netcat

109.4 Configure client-side DNS (Chapter 8)

  • Query remote DNS servers
  • Configure local name resolution and use remote DNS servers
  • Modify the order in which name resolution is done
  • The following is a partial list of the files, terms, and utilities covered in this objective: /etc/hosts, /etc/resolv.conf, /etc/nsswitch.conf, host, dig, getent

110 Security

110.1 Perform security administration tasks (Chapter 10)

  • Audit a system to find files with the SUID/SGID bit set
  • Set or change user passwords and password aging information
  • Be able to use nmap and netstat to discover open ports on a system
  • Set up limits on user logins, processes, and memory usage
  • Determine which users have logged in to the system or are currently logged in
  • Basic sudo configuration and usage
  • The following is a partial list of the files, terms, and utilities covered in this objective: find, passwd, lsof, nmap, chage, netstat, sudo, /etc/sudoers, su, usermod, ulimit, who, w, last

110.2 Set up host security (Chapter 10)

  • Awareness of shadow passwords and how they work
  • Turn off network services not in use
  • Understand the role of TCP wrappers
  • The following is a partial list of the files, terms, and utilities covered in this objective: /etc/nologin, /etc/passwd, /etc/shadow, /etc/xinetd.d/*, /etc/xinetd.conf, /etc/inetd.d/*, /etc/inetd.conf, /etc/inittab, /etc/init.d/*, /etc/hosts.allow, /etc/hosts.deny

110.3 Securing data with encryption (Chapter 10)

  • Perform basic OpenSSH 2 client configuration and usage
  • Understand the role of OpenSSH 2 server host keys
  • Perform basic GnuPG configuration and usage
  • Understand SSH port tunnels (including X11 tunnels)
  • The following is a partial list of the files, terms, and utilities covered in this objective: ssh, ssh-keygen, ssh-agent, ssh-add, ∼/.ssh/id_rsa and id_rsa.pub, ∼/.ssh/id_dsa and id_dsa.pub, /etc/ssh/ssh_host_rsa_key and ssh_host_rsa_key.pub, /etc/ssh/ssh_host_dsa_key and ssh_host_dsa_key.pub, ∼/.ssh/authorized_keys, /etc/ssh_known_hosts, gpg, ∼/.gnupg/*