LFCS · Question #208
Which of the following are common techniques for securing a sendmail server? (Select THREE correct answers)
The correct answer is B. Enable TLS. C. Disable VRFY. D. Run sendmail in a chroot'd environment. This question asks to identify three common techniques for securing a sendmail server.
Question
Options
- AMaintain user accounts in an LDAP directory.
- BEnable TLS.
- CDisable VRFY.
- DRun sendmail in a chroot'd environment.
- EDisable USRLKUP.
How the community answered
(26 responses)- A4% (1)
- B92% (24)
- E4% (1)
Why each option
This question asks to identify three common techniques for securing a sendmail server.
Maintaining user accounts in an LDAP directory is a method for user management and authentication, but it is not primarily a direct security technique for the sendmail server's operations itself.
Enabling TLS (Transport Layer Security) encrypts communication between mail servers and clients, protecting email content and credentials from eavesdropping, which is a fundamental security practice for modern email.
Disabling the VRFY (verify) command prevents remote users from confirming the existence of user accounts on the server, thus reducing the risk of email address harvesting by spammers or attackers.
Running sendmail in a chroot'd environment isolates the mail server process and its files to a confined portion of the filesystem, significantly limiting the potential damage if the service is compromised.
Disabling USRLKUP is not a universally recognized common security technique for sendmail; the focus is generally on preventing user enumeration and enforcing secure authentication, rather than disabling a lookup feature.
Concept tested: sendmail security best practices
Source: https://www.oreilly.com/library/view/sendmail-4th-edition/0596008432/ch04.html
Topics
Community Discussion
No community discussion yet for this question.