Chapter 13 - Using CIS Benchmarks

1. They provide a standardized, industry-agreed way to secure Linux servers.
2. Yes, it does.
3. A level 1 benchmark is not expected to have an impact on day-to-day operations of your server. A level 2 benchmark is and so should be implemented with care.
4. Scored benchmarks are expected to be crucial to all systems, whereas benchmarks that are not scored are expected to be applied to only some systems (for example, wireless network adapter configuration hardening will only apply to a subset of machines—hence, this should not affect the score of all machines).
5. This is normally provided in the benchmark document but often involves using the grep utility within the script to check for the configuration settings in a given file and reporting back on whether it was found or not.
6. Possible answers include the following:
   • Pattern matching can be an imprecise...