← Back to Linux Roadmaps

Press enter or space to select a node. You can then use the arrow keys to move the node around. Press delete to remove it and escape to cancel.

Press enter or space to select an edge. You can then press delete to remove it or escape to cancel.

Topic 110 · Security

110.2 Setup host security

Step 1 of 9 · weight 3

Three duties

Weight 3. This objective is where passwords live, how a login is refused, and which unused service should not be listening. TCP wrappers remain on the exam even when a modern distro has dropped them.

Privilege switching and password ageing stayed in 110.1. Runlevels and targets stayed in 101.3. Here the boundary is this host
Exam files: /etc/passwd, /etc/shadow, /etc/nologin, /etc/hosts.allow, /etc/hosts.deny, /etc/xinetd.conf, /etc/xinetd.d/, systemd.socket, /etc/inittab, /etc/init.d/
Much of the tooling is legacy. Know the role, then use systemctl on a current host

Exam note

If the question names hosts.allow, answer TCP wrappers. Do not invent a firewall rule the objective did not ask for.