Skip to content
Textbook Guides

Solution Manual for Linux Essentials for Cybersecurity Lab Manual

Prepare for success with Solution Manual for Linux Essentials for Cybersecurity Lab Manual, providing textbook solutions that help you understand the material better.

Preview 16 of 147 pages

See the first 16 pages exactly as they appear in the document.

  1. Page 1
    Read page 1 as text

    Linux Essentials for Cybersecurity Lab Manual ’s Answer Key William “Bo” Rothwell

  2. Page 2
  3. Page 3
    Read page 3 as text

    Contents at a Glance Introduction xiv Part I Introducing Linux CHAPTER 1 Distributions and Key Components 2 CHAPTER 2 Working on the Command Line 8 CHAPTER 3 Getting Help 14 CHAPTER 4 Editing Files 18 CHAPTER 5 When Things Go Wrong 22 Part II User and Group Accounts CHAPTER 6 Managing Group Accounts 26 CHAPTER 7 Managing User Accounts 30 CHAPTER 8 Develop an Account Security Policy 34 Part III File and Data Storage CHAPTER 9 File Permissions 36 CHAPTER 10 Manage Local Storage: Essentials 44 CHAPTER 11 Manage Local Storage: Advanced Features 50 CHAPTER 12 Manage Network Storage 56 CHAPTER 13 Develop a Storage Security Policy 62 Part IV Automation CHAPTER 14 Crontab and At 64 CHAPTER 15 Scripting 68 CHAPTER 16 Common Automation Tasks 72 CHAPTER 17 Develop an Automation Security Policy 76 Part V Networking CHAPTER 18 Networking Basics 78 CHAPTER 19 Network Configuration 82

  4. Page 4
    Read page 4 as text

    CHAPTER 20 Network Service Configuration: Essential Services 88 CHAPTER 21 Network Service Configuration: Web Services 92 CHAPTER 22 Connecting to Remote Systems 96 CHAPTER 23 Develop a Network Security Policy 98 Part VI Process and Log Administration CHAPTER 24 Process Control 102 CHAPTER 25 System Logging 106 Part VII Software Management CHAPTER 26 Red Hat-Based Software Management 110 CHAPTER 27 Debian-Based Software Management 114 CHAPTER 28 System Booting 118 CHAPTER 29 Develop a Software Management Security Policy 120 Part VIII Security Tasks CHAPTER 30 Footprinting 122 CHAPTER 31 Firewalls 126 CHAPTER 32 Intrusion Detection 128 CHAPTER 33 Additional Security Tasks 130

  5. Page 5
    Read page 5 as text

    Table of Contents Introduction xiv Part I Introducing Linux Chapter 1 Distributions and Key Components 2 Lab 1.1 Installing CentOS 3 Lab 1.2 Installing Ubuntu 4 Lab 1.3 Installing Kali 6 Chapter 2 Working on the Command Line 8 Lab 2.1 Manage Files 9 Lab 2.2 Using Shell Features 10 Lab 2.3 Compressing Files 12 Chapter 3 Getting Help 14 Lab 3.1 Getting Help with man 15 Lab 3.2 Getting Help with info 16 Chapter 4 Editing Files 18 Lab 4.1 Editing Files with the vim Editor 19 Chapter 5 When Things Go Wrong 22 Lab 5.1 Troubleshooting Linux Issues 23 Lab 5.2 Configuring User Notifications 24 Part II User and Group Accounts Chapter 6 Managing Group Accounts 26 Lab 6.1 Managing Group Accounts 27 Lab 6.2 Managing Group Administrators 28 Chapter 7 Managing User Accounts 30 Lab 7.1 Managing User Accounts 31 Lab 7.2 Securing User Accounts 32 Lab 7.3 Configuring sudo 33

  6. Page 6
    Read page 6 as text

    Linux Essentials for Cybersecurity Lab Manual vi Chapter 8 Develop an Account Security Policy 34 Lab 8.1 Testing the Security of Accounts 35 Lab 8.2 Developing an Account Security Policy 35 Part III File and Data Storage Chapter 9 File Permissions 36 Lab 9.1 Managing File Permissions 37 Lab 9.2 Managing Special Permissions 39 Lab 9.3 Enabling Access Control Lists 39 Lab 9.4 Managing File Ownership and Attributes 40 Lab 9.5 Monitoring Security Issues with SELinux 41 Chapter 10 Manage Local Storage: Essentials 44 Lab 10.1 Creating Partitions and Filesystems 45 Lab 10.2 Mounting Filesystems at Boot 48 Lab 10.3 Managing Swap Devices 49 Chapter 11 Manage Local Storage: Advanced Features 50 Lab 11.1 Managing Encrypted Filesystems 51 Lab 11.2 Configuring Logical Volumes 52 Lab 11.3 Administering Disk Quotas 54 Lab 11.4 Managing Hard and Soft Links 55 Chapter 12 Manage Network Storage 56 Lab 12.1 Configuring Samba 57 Lab 12.2 Administering NFS 59 Lab 12.3 Managing iSCSI 59 Chapter 13 Develop a Storage Security Policy 62 Lab 13.1 Backing Up a Filesystem 63 Lab 13.2 Developing a Backup Security Policy 63 Part IV Automation Chapter 14 Crontab and At 64 Lab 14.1 Managing crontab 65 Lab 14.2 Configuring at Commands 67

  7. Page 7
    Read page 7 as text

    Contents vii Chapter 15 Scripting 68 Lab 15.1 Script Project #1 69 Lab 15.2 Script Project #2 70 Chapter 16 Common Automation Tasks 72 Lab 16.1 Script Project #3 73 Lab 16.2 Script Project #4 74 Chapter 17 Develop an Automation Security Policy 76 Lab 17.1 Securing crontab and at 77 Lab 17.2 Creating an Automation Security Policy 77 Part V Networking Chapter 18 Networking Basics 78 Lab 18.1 Exploring Networking Components 79 Chapter 19 Network Configuration 82 Lab 19.1 Understanding Network Configuration on CentOS 83 Lab 19.2 Understanding Network Configuration on Ubuntu 85 Chapter 20 Network Service Configuration: Essential Services 88 Lab 20.1 Configuring a BIND Server 89 Lab 20.2 Configuring a Postfix Server 90 Chapter 21 Network Service Configuration: Web Services 92 Lab 21.1 Configuring and Administering an Apache Server 93 Lab 21.2 Configuring a Proxy Server 94 Chapter 22 Connecting to Remote Systems 96 Lab 22.1 Configuring an FTP Server 97 Lab 22.2 Administering an SSH Server 97 Chapter 23 Develop a Network Security Policy 98 Lab 23.1 Administering Kernel Security Parameters 99 Lab 23.2 Securing a System with TCP Wrappers 99 Lab 23.3 Configuring Network Time Protocol 100 Lab 23.4 Creating a Networking Security Policy 100

  8. Page 8
    Read page 8 as text

    viii Linux Essentials for Cybersecurity Lab Manual Part VI Process and Log Administration Chapter 24 Process Control 102 Lab 24.1 Managing System Processes 103 Lab 24.2 Displaying System Information 104 Chapter 25 System Logging 106 Lab 25.1 Managing Log Files 107 Lab 25.2 Configuring Log Rotation 107 Part VII Software Management Chapter 26 Red Hat-Based Software Management 110 Lab 26.1 Managing Software Packages with rpm 111 Lab 26.2 Managing Software Packages with yum 112 Chapter 27 Debian-Based Software Management 114 Lab 27.1 Managing Software Packages with dpkg 115 Lab 27.2 Managing Software Packages with apt 115 Chapter 28 System Booting 118 Lab 28.1 Configuring GRUB Security 119 Lab 28.2 Managing the Startup Process 119 Chapter 29 Develop a Software Management Security Policy 120 Lab 29.1 Exploring Common Vulnerabilities and Exposure Reports 121 Lab 29.2 Managing and Securing Legacy Services 121 Part VIII Security Tasks Chapter 30 Footprinting 122 Lab 30.1 Using Probing Tools 123 Lab 30.2 Scanning the Network 124 Chapter 31 Firewalls 126 Lab 31.1 Creating a Firewall to Protect a System 127 Chapter 32 Intrusion Detection 128 Lab 32.1 Creating an Intrusion Detection Security Plan 129 Chapter 33 Additional Security Tasks 130 Lab 33.1 Configuring fail2ban 131 Lab 33.2 Encrypting Files with gpg 131

  9. Page 9
    Read page 9 as text

    About the Author At the impressionable age of 14, William “Bo” Rothwell crossed paths with a TRS-80 Micro Computer System (affectionately known as a “Trash 80”). Soon after the adults responsible for Bo made the mistake of leaving him alone with the TRS-80, he immediately dismantled it and held his first computer class, showing his friends what made this “computer thing” work. Since that experience, Bo’s passion for understanding how computers work and sharing this knowledge with others has resulted in a rewarding career in IT training. His experience includes Linux, Unix, and programming languages such as Perl, Python, Tcl, and BASH. He is the founder and president of One Course Source, an IT training organization.

  10. Page 10
    Read page 10 as text

    Dedication For the last three books, I have thanked my wife and daughter for their patience and my parents for all that they have done throughout my life. My gratitude continues, as always. —William “Bo” Rothwell May 2018 Acknowledgments Thanks to everyone who has put in a direct effort toward making this book a success: You have my thanks, as always. —William “Bo” Rothwell May 2018

  11. Page 11
    Read page 11 as text

    About the Technical Reviewer Denise Kinsey, Ph.D., CISSP, CISCO, served as a Unix administrator (HP-UX) in the late 1990s and realized the power and flexibility of the operating system. This appreciation led to her home installation of different flavors of Linux and creation of several academic courses in Linux. With a strong background in cybersecurity, she works to share and implement best practices with her customers and students. Dr. Kinsey is an assistant professor at the University of Houston.

  12. Page 12
    Read page 12 as text

    We Want to Hear from You! As the reader of this book, you are our most important critic and commentator. We value your opinion and want to know what we’re doing right, what we could do better, what areas you’d like to see us publish in, and any other words of wisdom you’re willing to pass our way. We welcome your comments. You can email or write to let us know what you did or didn’t like about this book— as well as what we can do to make our books better. Please note that we cannot help you with technical problems related to the topic of this book. When you write, please be sure to include this book’s title and author as well as your name and email address. We will carefully review your comments and share them with the author and editors who worked on the book. Email: feedback@pearsonitcertification.com Reader Services Register your copy of Linux Essentials for Cybersecurity Lab Manual at www.pearsonitcertification.com for convenient access to downloads, updates, and corrections as they become available. To start the registration process, go to www.pearsonitcertification.com/register and log in or create an account*. Enter the product ISBN 9780789760555 and click Submit. When the process is complete, you will find any available bonus content under Registered Products. *Be sure to check the box that you would like to hear from us to receive exclusive discounts on future editions of this product.

  13. Page 13
    Read page 13 as text

    Figure Credits Figure 1-1 Courtesy of CentOS Corporation Figure 9-1 Courtesy of CentOS Corporation Figure 10-1 Courtesy of CentOS Corporation Figure 10-2 Courtesy of CentOS Corporation Figure 11-1 Courtesy of CentOS Corporation Figure 11-2 Courtesy of CentOS Corporation

  14. Page 14
    Read page 14 as text

    Introduction While developing Linux Essentials for Cybersecurity , it became clear that having hands-on experience would be very useful. Reading new content gets you only so far. To really become a Linux cybersecurity expert, you need practice. From that idea, this lab guide was born. You will note that there are three different types of labs in this book: ■ Labs in which you are presented with a short problem that requires only a single operation to complete. ■ Labs that are more complex but in which we provide you with a guide to perform each step, one at a time. ■ Scenario labs in which you are asked to solve a problem entirely on your own. These labs are designed to pose a greater challenge. No matter the type, these labs are designed to be performed on live systems. While you could just write down the answers in some cases, I highly encourage you to work on Linux systems to complete all the labs. Not only will you get a sense of accomplishment, but the concepts and practices that are explored in Linux Essentials for Cybersecurity are more likely to find a permanent home in your brain. Enjoy the journey and remember to always stand on the light side of the cybersecurity force. Who Should Read This Book? It might be easier to answer the question “Who shouldn’t read this book?” Linux distributions are used by a large variety of individuals, including the following: ■ Software developers ■ Database administrators ■ Website administrators ■ Security administrators ■ System administrators ■ System recovery experts ■ Big data engineers ■ Hackers ■ Government organizations ■ Mobile users and developers (Android is a Linux distribution.) ■ Chip vendors (Embedded Linux is found on many chip devices.) ■ Digital forensic experts ■ Educators This isn’t even a complete list! Linux is literally everywhere. It is the operating system used on Android phones. A large number of web and email servers run on Linux. Many network devices, such as routers and firewalls, have a version of embedded Linux installed on them. This book is for people who want to better use Linux systems and ensure that the Linux systems they work on are as secure as possible.

  15. Page 15
    Read page 15 as text

    How This Book Is Organized Chapter 1, “Distributions and Key Components,” includes labs in which you will install the Linux distributions that you will use throughout the rest of this book. Chapter 2, “Working on the Command Line,” covers labs related to the essential commands needed to work in the Linux environment. Chapter 3, “Getting Help,” provides you with hands-on experience to get additional information on Linux topics. Chapter 4, “Editing Files,” incorporates labs in which you practice using the vim editor. Chapter 5, “When Things Go Wrong,” provides you with experience in how to handle problems that may arise in Linux. Chapter 6, “Managing Group Accounts,” contains labs that focus on group accounts, including how to add, modify, and delete groups. Chapter 7, “Managing User Accounts,” contains labs that focus on user accounts, including how to add, modify, and delete users. This chapter also has a lab for securing user accounts as well as a lab for configuring sudo . Chapter 8, “Develop an Account Security Policy,” provides you with practice creating a user security policy and how to test the security of accounts. Chapter 9, “File Permissions,” focuses on securing files using Linux permissions. These labs also dive into more advanced topics, such as special permissions, umask , access control lists (ACLs), SELinux, and file attributes. Chapter 10, “Manage Local Storage: Essentials,” includes labs that are related to the concepts involved with local storage devices, such as how to create partitions and filesystems and some additional essential filesystem features. Chapter 11, “Manage Local Storage: Advanced Features,” provides hands-on activities related to advanced features of local storage devices, including how to create encrypted filesystems. You will get practice creating and managing logical volumes. Chapter 12, “Manage Network Storage,” provides exercises that are focused on making storage devices available across the network. Filesystem sharing techniques such as Network File System, Samba, and iSCSI are included. Chapter 13, “Develop a Storage Security Policy,” provides you with the experience of creating a security policy using the knowledge you acquired in Chapters 9–12. There is also a very important lab that covers performing filesystem backups. Chapter 14, “Crontab and At,” includes labs for managing the crontab and at systems. Chapter 15, “Scripting,” provides you with experience in shell scripting by having you create two shell scripts. Chapter 16, “Common Automation Tasks,” includes labs on creating shell scripts that are commonly used to automate tasks on Linux systems. xv Introduction

  16. Page 16
    Read page 16 as text

    xvi Linux Essentials for Cybersecurity Lab Manual Chapter 17, “Develop an Automation Security Policy,” provides you with the experience to create a security policy using the knowledge you acquired in Chapters 14–16. This chapter also includes a hands-on lab on securing the crontab and at systems. Chapter 18, “Networking Basics,” provides labs that help you explore network components on Linux. Chapter 19, “Network Configuration,” covers the process of configuring your system to connect to a network, both on Ubuntu and CentOS. Chapter 20, “Network Service Configuration: Essential Services,” includes labs for configuring several network-based tools, including DNS and email servers. Chapter 21, “Network Service Configuration: Web Services,” provides the experience of configuring several network-based tools, including the Apache web server and Squid. Chapter 22, “Connecting to Remote Systems,” includes labs on configuring LDAP, FTP, and SSH servers. Chapter 23, “Develop a Network Security Policy,” provides you with the experience to create a security policy using the knowledge you acquired in Chapters 18–22. Chapter 24, “Process Control,” includes labs on starting, viewing, and controlling processes (programs). Chapter 25, “System Logging,” gives you hands-on experience with viewing system logs as well as how to configure a system to create custom log entries. Chapter 26, “Red Hat–Based Software Management,” includes labs on administering software on Red Hat– based systems such as Fedora and CentOS. Chapter 27, “Debian–Based Software Management,” includes labs on administering software on Debian– based systems, such as Ubuntu. Chapter 28, “System Booting,” gives you practice configuring GRUB and managing the boot process. Chapter 29, “Develop a Software Management Security Policy,” provides you with the experience to create a security policy using the knowledge you acquired in Chapters 26–28. In addition, you will explore CVE reports. Chapter 30, “Footprinting,” includes labs that cover the techniques that hackers use to discover information about systems. Chapter 31, “Firewalls,” explores labs focused on configuring software that protects your systems from network-based attacks. Chapter 32, “Intrusion Detection,” provides you with experience using tools and techniques that help you determine if someone has successfully compromised the security of your systems. Chapter 33, “Additional Security Tasks,” includes labs that cover a variety of additional Linux security features, including the fail2ban service, VPNs, and file encryption.

131 more pages in the full document

Unlock it once and it stays in your library, ready to chat with or turn into flashcards.

Unlock the full document

More Information Technology study materials

See all

Study this document with CramX

Once it is in your library, every tool can work from it.