nerdexam
Linux_Foundation

LFCS · Question #208

Which of the following are common techniques for securing a sendmail server? (Select THREE correct answers)

The correct answer is B. Enable TLS. C. Disable VRFY. D. Run sendmail in a chroot'd environment. This question asks to identify three common techniques for securing a sendmail server.

Submitted by skyler.x· Apr 18, 2026Service Configuration

Question

Which of the following are common techniques for securing a sendmail server? (Select THREE correct answers)

Options

  • AMaintain user accounts in an LDAP directory.
  • BEnable TLS.
  • CDisable VRFY.
  • DRun sendmail in a chroot'd environment.
  • EDisable USRLKUP.

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    92% (24)
  • E
    4% (1)

Why each option

This question asks to identify three common techniques for securing a sendmail server.

AMaintain user accounts in an LDAP directory.

Maintaining user accounts in an LDAP directory is a method for user management and authentication, but it is not primarily a direct security technique for the sendmail server's operations itself.

BEnable TLS.Correct

Enabling TLS (Transport Layer Security) encrypts communication between mail servers and clients, protecting email content and credentials from eavesdropping, which is a fundamental security practice for modern email.

CDisable VRFY.Correct

Disabling the VRFY (verify) command prevents remote users from confirming the existence of user accounts on the server, thus reducing the risk of email address harvesting by spammers or attackers.

DRun sendmail in a chroot'd environment.Correct

Running sendmail in a chroot'd environment isolates the mail server process and its files to a confined portion of the filesystem, significantly limiting the potential damage if the service is compromised.

EDisable USRLKUP.

Disabling USRLKUP is not a universally recognized common security technique for sendmail; the focus is generally on preventing user enumeration and enforcing secure authentication, rather than disabling a lookup feature.

Concept tested: sendmail security best practices

Source: https://www.oreilly.com/library/view/sendmail-4th-edition/0596008432/ch04.html

Topics

#sendmail#server security#TLS#chroot

Community Discussion

No community discussion yet for this question.

Full LFCS Practice