110.3 Securing data with encryption Weight: 3 Description: The candidate should be able to use public key techniques to secure data and communication. Key Knowledge Areas: Perform basic OpenSSH 2 client configuration and usage Understand the role of OpenSSH 2 server host keys Perform basic GnuPG configuration, usage and revocation …
110.2 Setup host security Weight: 3 Description: Candidates should know how to set up a basic level of host security. Key Knowledge Areas: Awareness of shadow passwords and how they work Turn off network services not in use Understand the role of TCP wrappers Terms and Utilities: /etc/nologin /etc/passwd /etc/shadow …
110.1 Perform security administration tasks Weight: 3 Description: Candidates should know how to review system configuration to ensure host security in accordance with local security policies. Key Knowledge Areas: Audit a system to find files with the suid/sgid bit set Set or change user passwords and password aging information Being …
107.3 Localisation and internationalisation Weight: 3 Description: Candidates should be able to localize a system in a different language than English. As well, an understanding of why LANG=C is useful when scripting. Key Knowledge Areas: Configure locale settings and environment variables Configure timezone settings and environment variables Terms and Utilities: …
107.1 Manage user and group accounts and related system files Weight: 5 Description: Candidates should be able to add, remove, suspend and change user accounts. Key Knowledge Areas: Add, modify and remove users and groups Manage user/group info in password/group databases Create and manage special purpose and limited accounts Terms …
107.2 Automate system administration tasks by scheduling jobs Weight: 4 Description: Candidates should be able to use cron or anacron to run jobs at regular intervals and to use at to run jobs at a specific time. Key Knowledge Areas: Manage cron and at jobs Configure user access to cron …
109.4 Configure client side DNS Weight: 2 Description: Candidates should be able to configure DNS on a client host. Key Knowledge Areas: Query remote DNS servers Configure local name resolution and use remote DNS servers Modify the order in which name resolution is done Terms and Utilities: /etc/hosts /etc/resolv.conf /etc/nsswitch.conf …
109.3 Basic network troubleshooting Weight: 4 Description: Candidates should be able to troubleshoot networking issues on client hosts. Key Knowledge Areas: Manually and automatically configure network interfaces and routing tables to include adding, starting, stopping, restarting, deleting or reconfiguring network interfaces Change, view, or configure the routing table and correct …
109.2 Basic network configuration Weight: 4 Description: Candidates should be able to view, change and verify configuration settings on client hosts. Key Knowledge Areas: Manually and automatically configure network interfaces Basic TCP/IP host configuration Setting a default route Terms and Utilities: /etc/hostname /etc/hosts /etc/nsswitch.conf ifconfig ifup ifdown ip route ping …
109.1 Fundamentals of internet protocols Weight: 4 Description: Candidates should demonstrate a proper understanding of TCP/IP network fundamentals. Key Knowledge Areas: Demonstrate an understanding of network masks and CIDR notation Knowledge of the differences between private and public “dotted quad” IP addresses Knowledge about common TCP and UDP ports and …