LX0-104 · Question #422
Which of the following commands will create a new, signed tw.pol file?
The correct answer is C. twadmin createpolfile S mykey.key /etc/tripwire/twpol.txt. To create a new, signed Tripwire policy file, the twadmin command uses the createpolfile subcommand with the S option to specify the signing key.
Question
Options
- Atwadmin createpolfile e S mykey.key /etc/tripwire/twpol.txt
- Btwadmin createcfgfile S mykey.key /etc/tripwire/twpol.txt
- Ctwadmin createpolfile S mykey.key /etc/tripwire/twpol.txt
- Dtwadmin createcfgfile e S mykey.key /etc/tripwire/twpol.txt
How the community answered
(19 responses)- B5% (1)
- C89% (17)
- D5% (1)
Why each option
To create a new, signed Tripwire policy file, the twadmin command uses the createpolfile subcommand with the S option to specify the signing key.
The e option is not typically used with createpolfile for signing; it might be for encryption, but signing is indicated by S.
The createcfgfile subcommand is used for creating a configuration file, not a policy file.
The twadmin utility is used for administrative tasks in Tripwire, and createpolfile is the specific subcommand for generating a new policy file. The S option, followed by the private key file (mykey.key), is used to cryptographically sign the policy file, ensuring its integrity and authenticity, and the policy source is twpol.txt.
This command incorrectly uses createcfgfile instead of createpolfile and includes an extraneous e option.
Concept tested: Tripwire policy file creation and signing
Source: https://linux.die.net/man/8/twadmin
Topics
Community Discussion
No community discussion yet for this question.