Securing data with encryption
Lesson 3 of 3 in objective 110. Security, part of LPIC-1 Exam 102-500.
- Objective
- 110. Security
- Share of the exam
- 16.67% (the whole objective)
- Questions in this lesson
- 7
- Signed for by a person
- 0
Partly checked. None of the 7 questions here has been read against the cited source by a person. 7 questions have been checked against their cited clause by an automated pass — which is not the same thing, and is not a signature.
Only questions a person has signed for are used in mock exams here. That is the whole difference between the two kinds of checking above.
Questions in this lesson
- Your SSH agent is running and you want to see the fingerprints of the identities it is currently holding in memory. Type the complete command. machine-checked
- You generated an SSH key pair on your laptop and want passwordless logins to the server web01. Which file has to change, and on which machine? machine-checked
- Key-based login to web01 fails and the server's log records: `Authentication refused: bad ownership or modes for directory /home/dev/.ssh`. Which fix is the right one? machine-checked
- A PostgreSQL server on host db01 listens only on 127.0.0.1 port 5432. From your workstation you want to reach it by connecting to port 15432 on your own machine, tunnelled over SSH. Which command sets that up? machine-checked
- Which two statements about ssh-agent and ssh-add are correct? (Choose two.) machine-checked
- You want to send report.txt to your colleague Alice so that only she can read it, using GnuPG public key cryptography. Which key do you need, and which command uses it? machine-checked
- Immediately after creating a GnuPG key pair you want to produce the revocation certificate for the key whose ID is A1B2C3D4, so that you can withdraw the key later even if you lose the passphrase. Type the gpg command, with no output-file option. machine-checked
Drill this lesson
A lesson is one sitting: the trainer draws a short run from these questions alone and spaces the ones you get wrong.
Practise Securing data with encryption
The rest of objective 110
- Security administration tasks
- Host security
- Securing data with encryption — you are here