Continue your lesson
Connect the command you run to the file, process, service, permission, or kernel state it changes.
Block 1 of 2Compare AIDE · OpenSCAP · Lynis
Current · 11 min
Compare AIDE · OpenSCAP · Lynis
Optional concept notes
AIDE
Detects unexpected file changes against a recorded integrity database.
OpenSCAP
Evaluates systems against machine-readable security compliance content.
Lynis
Audits host configuration and reports Linux hardening recommendations.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Block 2 of 2Understand Linux audit rule
10 min
Understand Linux audit rule
Optional concept notes
Linux audit rule
Selects system activity that the audit subsystem must record.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Practice the reasoning here
Use a disposable Linux system. Predict a command's effect, run it, inspect exit status and logs, then restore the starting state.
- State the expected result before changing or testing anything.
- Name the observation, command, log, or report that would confirm it.
- Explain why the closest alternative does not fit the same requirement.
Check the whole objective
This unlocks objective 3.6 for recall. The latest checkpoint needs 70% or higher; a lower result puts the lesson back near the front of your timeline.