Questions

• What is a CVE, and what is its purpose?
• Applying updates to a running kernel can be done automatically and without rebooting by utilizing Canonical's ____ service.
• The default configuration file for Fail2Ban is ____, but you should copy it to ____ to avoid your changes being overwritten.
• What are some of the things you can do to secure OpenSSH?
• Explain the principle of least privilege.
• What command can we use in order to list the ports our server is listening on?
• The ____ command allows us to encrypt an entire disk.
• Explore Landscape on a test server, and list some of the features you're able to find within the interface that weren't mentioned in this chapter.