How would you configure auditing to identify when an attacker has removed audit records?

Which statement concerning the output of a Solaris Security Toolkit run is true?

The svcs output of a system lists this service: legacy_run Jan_30 lrc:/etc/rc3_d/S52imq If the system administrator wants this service to be disabled permanently, which action needs to be taken?

The security policy of your organization specifies that systems have to be hardened. In which case do systems have to be re-hardened?

Which two message digest algorithms are shipped with Solaris 10, unmodified? (Choose two.)

Your employer has acquired a number of systems as
a part of an acquisition of another company. You suspect that a number of the
systems might have been hacked, so you want to remove any malicious software
that might have been installed by the hacker. The systems have not previously had
the Solaris Security Toolkit software used on them. Which would remove any
software installed by the hacker?

Which command lists the hash of the local system’s public key?

The kernel calculates the effective set of privileges based on three other privilege sets. This calculation begins with the set of privileges inherited from the parent process. The effective set is then further constrained by two other sets of privileges. Which two describe the remaining privilege sets? (Choose two.)

During the configuration of a system to install signed patches, you discover that the system does not have the required Sun Microsystems Enterprise Service Patch Management public key installed. Which is true?

The Solaris 10 cryptographic framework provides user-level commands to
encrypt files. A combination of commands is reported below: # tar cvf – /data | encrypt -a arcfour – k /tmp/key -o /tmp/backup Which two statements are true? (Choose two.)