Hi there, I think 110.1 and 110.2 need a clean up.
What's the difference between "Perform security administration tasks" and "Setup host security"? Why is "Set or change user passwords and password aging information." in 110.1 and "Awareness of shadow passwords and how they work." in 110.2? I'd prefer, if we would move all network related stuff to 110.2 and rename 110.2 to "basic network security". And 110.1 to "host security". netstat-> ss: We should replace netstat with ss, because netstat comes from the legacy net-tools. ulimit: Does anybody still use ulimit and /etc/security/limits.conf? Wouldn't you use loginctl and/or systemd-run for that? Wifi: I think canditates should be able to check whether they use an encrypted connection using network-manager iptables: if we get rid of TCP wrappers we could include simple iptables usage: close single ports using iptables. In my opinion, thats much more common today. Ingo _______________________________________________ lpi-examdev mailing list [email protected] http://list.lpi.org/cgi-bin/mailman/listinfo/lpi-examdev
