Questions

1. Which of the following statements is true?
   1. You can use the noexec, nosuid, and nodev mount options on any Linux distro.
   2. You can use fapolicyd on any Linux distro.
   3. You can prevent rogue programs from running by using the noexec mounting option on the / partition.
   4. To use the noexec, nosuid, and nodev mount options, you can edit the /etc/mtab file.
2. You need to run a program that fapolicyd normally won’t allow. What is the best way to deal with this?
   1. Add it by hand-editing the /etc/fapolicyd/fapolicyd.trust file.
   2. Add it by creating a custom rule.
   3. Add it by running the sudo fapolicyd-cli --file add command.
   4. Add it by hand-editing the /etc/fapolicyd/fapolicyd.conf file.
3. When you apply the STIG OpenSCAP profile, what permissions settings will files and directories have when you create them?
   1. 644 for files, 755 for directories.
   ...