303-200

303-200 practice questions, page 3 of 3, with answer review and explanations.

Question 11

Which of the following expressions are valid AIDE rules? (Choose TWO correct answers.)

  1. !/var/run/.*
  2. append: /var/log/*
  3. /usr=all
  4. #/bin/
  5. /etc p+i+u+g

Question 12

Which of the following commands defines an audit rule that monitors read and write operations to the file/ etc/firewall/rules and associates the rule with the name firewall?

  1. auditctl -N firewall r r: /etc/firewall/rules r w: etc/firewall/rules
  2. auditctl -A –f /etc/firewall/rules –o r –o w –l firewall
  3. auditctl –w /etc/firewall/rules –p rw –k firewall
  4. auditctl -read /etc/firewall/rules -write /etc/firewall/rules --label firewall
  5. echo "n: firewall r:/etc/firewall/rules: w:/