Hardening Basics Part 1

Prompts and answers

• What group are users automatically added to in Ubuntu?
  sudo
• What would be the command to add an existing user, nick, to the sudo group? You're running as root
  usermod -aG sudo nick
• What command as a user can we enter to see what we are allowed to execute with sudo?
  sudo -l
• Where is the sudo policy file stored?
  /etc/sudoers
• When in visudo and you see %____, what does the % sign indicate that you are dealing with?
  group
• This Alias lets the user assign a name, like "ADMINS" to a group of people
  User
• Which Alias allows you to create a set of commands that you can then assign to a User Alias?
  Command
• Yey/Ney - emacs has a shell escape
  yey
• What is the minimum recommended password length set by NIST?
  8
• When using the pwhistory module, which file will contain the previous passwords for the user?
  opasswd
• What principle states that every user only has enough access to do their daily duties and tasks
  principle of least privilege
• This type of Firewall typically has two NIC cards
  Network-Based
• This type of Firewall is typically installed on a host computer and rules apply to that specific host only
  Host-Based
• Web Application Firewalls help add an extra layer of security to your web servers. Where should these be installed?
  Demilitarized Zone
• iptables is not the name of the Linux Firewall. What is the framework that iptables allows us to interact with?
  netfilter
• This 3 letter acronym is a set of rules that defines what the Firewall should allow and what it should deny
  ACL
• Which iptables option allows us to keep track of the connection state?
  --ctstate
• Which iptable Chain is responsible for packets on the local network that are being carried onwards?
  Forward
• Which table mashes up the packets as they go through the Firewall?
  Mangle
• What is the last rule that should be added to an access control list?
  implicit deny