- Lab
-
Libraries: If you want this lab, consider one of these libraries.
- Core Tech
Implementing Security and Compliance Protocols for CompTIA Linux+ (XK0-006)
Prepare for the CompTIA Linux exam by hardening a bastion host to work with strict compliance regulations. Begin by configuring the host to work with LDAP, then using PAM modules to further enforce login limits. Then, enable system auditing, lock down the server with iptables and AppArmor, and use kernel modules to further harden the host against potential attacks. Finally, enable secure options for SSH, generate a SSH keys, and encrypt important files.
Lab Info
Table of Contents
-
Challenge
Manage User Access with LDAP and PAM
Configure the System Security Services Daemon to work with LDAP, and use PAM modules to enable session limits on LDAP-based groups.
-
Challenge
Set Up System Auditing
Enable auditing for the shadow file to track unwarranted changes to the password file, track potential privilege escalation issues by ensuring superuser commands are being audited, and ensure that any audit rules will persist beyond system reboot.
-
Challenge
Secure Server Access via Firewalls
Leverage iptables to restrict access related to LDAP users, then use AppArmor to block unneeded common services and ports.
-
Challenge
Enforce Sensible Server Limits
Leverage kernel modules to block certain actions such as inputting USB devices into the server, and enable file resource limits to enhance server stability.
-
Challenge
Encrypt Sensitive Data
Leverage OpenSSL to encrypt audit and compliance artifacts stored on the bastion host.
-
Challenge
Harden SSH
Generate an SSH key pair for use on the bastion host, then update the SSH configuration to prevent password authentication, and permit only the defined LDAP groups.
Real skill practice before real-world application
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Learn by doing
Engage hands-on with the tools and technologies you’re learning. You pick the skill, we provide the credentials and environment.
Follow your guide
All labs have detailed instructions and objectives, guiding you through the learning process and ensuring you understand every step.
Turn time into mastery
On average, you retain 75% more of your learning if you take time to practice. Hands-on labs set you up for success to make those skills stick.