LFCS · Question #422
Which of the following commands will create a new, signed tw.pol file?
The correct answer is C. twadmin createpolfile S mykey.key /etc/tripwire/twpol.txt. The twadmin createpolfile command is used to compile a plain text Tripwire policy file into a signed, encrypted policy file, with the -S option specifying the signing key.
Question
Options
- Atwadmin createpolfile e S mykey.key /etc/tripwire/twpol.txt
- Btwadmin createcfgfile S mykey.key /etc/tripwire/twpol.txt
- Ctwadmin createpolfile S mykey.key /etc/tripwire/twpol.txt
- Dtwadmin createcfgfile e S mykey.key /etc/tripwire/twpol.txt
How the community answered
(25 responses)- A4% (1)
- C96% (24)
Why each option
The `twadmin createpolfile` command is used to compile a plain text Tripwire policy file into a signed, encrypted policy file, with the `-S` option specifying the signing key.
The `e` option is not a standard or recognized flag for the `twadmin createpolfile` command in this context, making the syntax incorrect.
The `twadmin createcfgfile` command is used for creating the Tripwire configuration file (`tw.cfg`), not the policy file (`tw.pol`).
The `twadmin createpolfile` command is specifically designed to process a human-readable Tripwire policy definition file (e.g., `twpol.txt`) and convert it into the binary, signed, and encrypted format (`tw.pol`) that Tripwire uses. The `-S mykey.key` option provides the private key necessary to sign the policy file, ensuring its authenticity and integrity.
This option incorrectly uses `createcfgfile` for a policy file and includes the non-standard `e` option, making it incorrect for generating a policy file.
Concept tested: Tripwire policy file creation command
Topics
Community Discussion
No community discussion yet for this question.