LX0-104 · Question #219
Which of the following are common techniques for securing Nagios? (Select THREE correct answers)
The correct answer is A. Require authentication for access to the CGI scripts. D. Do not run as the root user. E. Disable external commands. Common Nagios security practices involve restricting web access, running the service with minimal privileges, and limiting the execution of external commands.
Question
Options
- ARequire authentication for access to the CGI scripts.
- BRun Nagios in a chroot jail.
- CCompile Nagios with the enabletls option.
- DDo not run as the root user.
- EDisable external commands.
How the community answered
(32 responses)- A72% (23)
- B9% (3)
- C19% (6)
Why each option
Common Nagios security practices involve restricting web access, running the service with minimal privileges, and limiting the execution of external commands.
Requiring authentication for CGI scripts ensures that only authorized users can access the Nagios web interface, preventing unauthorized viewing of monitoring data or administrative actions.
While chroot jails can enhance security, running Nagios in one is not a common or practical security technique due to its dependencies and interactions with the system.
Nagios Core does not have an 'enabletls' compile option for its daemon; TLS/SSL for the web interface is typically handled by the underlying web server (e.g., Apache, Nginx).
Running Nagios as a non-root user (e.g., nagios user) limits the potential damage if the daemon is compromised, as it would have restricted system privileges.
Disabling external commands reduces the attack surface by preventing Nagios from executing arbitrary scripts or binaries, which could be exploited if an attacker gains control over the external command pipe.
Concept tested: Nagios security best practices
Source: https://assets.nagios.com/downloads/nagioscore/docs/nagioscore/3/en/security.html
Topics
Community Discussion
No community discussion yet for this question.