Lpi LPI Level 3 Exam (LPI 303: Security) - 117-303 Exam Practice Test

When adding additional users to a file's extended ACLs, what is true about the default behaviour of the ACL mask for the file?

Which of the following lines in the OpenVPN server.conf file will supply a DNS server for DHCP clients to use?

The system administrator is keeping local configuration file changes in RCS. What command will commit the file to RCS revision control AND keep a local, unlocked copy of the latest version of the file?

The system administrator wishes to use John the Ripper to confirm that the passwords in a file called passwords are not weak. john has finished but the terminal window running the program has closed. What command can be used to list any cracked passwords for this file?

CORRECT TEXT
An administrator has successfully configured a cryptographic volume for dmcrypt, and has added the following line to /etc/fstab:
/dev/mapper/cryptvol /media/crypt auto defaults 0 0
Upon booting the system, the error message "mount: special device /dev/mapper/cryptvol does not exist" is displayed. What configuration file has the administrator forgotten to edit? (Provide the full path and filename)

What openssl command will generate a selfsigned test certificate?

An SELinux security context is required to ensure that all files in /opt have the default context of
system_u:object_r:usr_t. How should the corresponding configuration entry be formatted?

The openssl command can be used to test connections with various secure services. What command will open a connection with a remote POP3S (POP3 over SSL) server?

CORRECT TEXT
Which directive must be set to 0 in a host or service definition to prevent Nagios from sending more than one alert for a particular event? (Specify only the directive without any options or parameters).

In which of the following scenarios MUST an administrator use ethernet bridging instead of routing when configuring an OpenVPN site? (Select TWO correct answers)