nerdexam
CompTIA

LX0-104 · Question #219

Which of the following are common techniques for securing Nagios? (Select THREE correct answers)

The correct answer is A. Require authentication for access to the CGI scripts. D. Do not run as the root user. E. Disable external commands. Common Nagios security practices involve restricting web access, running the service with minimal privileges, and limiting the execution of external commands.

Security

Question

Which of the following are common techniques for securing Nagios? (Select THREE correct answers)

Options

  • ARequire authentication for access to the CGI scripts.
  • BRun Nagios in a chroot jail.
  • CCompile Nagios with the enabletls option.
  • DDo not run as the root user.
  • EDisable external commands.

How the community answered

(32 responses)
  • A
    72% (23)
  • B
    9% (3)
  • C
    19% (6)

Why each option

Common Nagios security practices involve restricting web access, running the service with minimal privileges, and limiting the execution of external commands.

ARequire authentication for access to the CGI scripts.Correct

Requiring authentication for CGI scripts ensures that only authorized users can access the Nagios web interface, preventing unauthorized viewing of monitoring data or administrative actions.

BRun Nagios in a chroot jail.

While chroot jails can enhance security, running Nagios in one is not a common or practical security technique due to its dependencies and interactions with the system.

CCompile Nagios with the enabletls option.

Nagios Core does not have an 'enabletls' compile option for its daemon; TLS/SSL for the web interface is typically handled by the underlying web server (e.g., Apache, Nginx).

DDo not run as the root user.Correct

Running Nagios as a non-root user (e.g., nagios user) limits the potential damage if the daemon is compromised, as it would have restricted system privileges.

EDisable external commands.Correct

Disabling external commands reduces the attack surface by preventing Nagios from executing arbitrary scripts or binaries, which could be exploited if an attacker gains control over the external command pipe.

Concept tested: Nagios security best practices

Source: https://assets.nagios.com/downloads/nagioscore/docs/nagioscore/3/en/security.html

Topics

#Nagios security#authentication#privilege separation#security hardening

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice