303-300 Exam Training Practice Tests (Lpi LPIC Exam 303: Security, version 3.0)]

Question 1

What is the purpose of an extended attribute in Linux?

A. To mark a file as executable B. To store additional metadata about a file C. To encrypt a file for secure transmission D. To compress a file to save disk space

Correct Answer: B

Question 2

Which of the following authentication methods was added to NFS in version 4?

A. SSL certificate authentication B. SSH hostkey authentication C. Winbind authentication D. Kerberos authentication

Correct Answer: D

Question 3

Which file is used to configure rkhunter?

A. /etc/maldet.conf B. /etc/rkhunter.conf C. /etc/audit/auditd.conf D. /etc/aide/aide.conf

Correct Answer: B

Question 4

Which DNS label points to the DANE information used to secure HTTPS connections to
https://www.example.com/?

A. _443_tcp.www.example.com B. example.com C. www.example.com D. soa.example.com E. dane.www.example.com

Correct Answer: A

Question 5

Which of the following components are part of FreeIPA? (Choose THREE correct answers.)

A. DHCP Server B. Public Key Infrastructure C. Directory Server D. Kerberos KDC E. Intrusion Detection System

Correct Answer: B,C,D

Question 6

Which command is used to relabel files according to the currently loaded SELinux policy?

A. setsebool B. chcon C. restorecon D. semanage

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

What is Linux Malware Detect?

A. A tool to detect malware on a Linux system B. A configuration management tool C. A tool to automate host scans D. A package management tool

Correct Answer: A

Question 8

How are SELinux permissions related to standard Linux permissions? (Choose TWO correct answers.)

A. Standard Linux permissions override SELinux permissions. B. SELinux permissions are verified after standard Linux permissions. C. SELinux permissions are verified before standard Linux permissions. D. SELinux permissions override standard Linux permissions.

Correct Answer: A,B

Question 9

Which of the following keywords are built-in chairs for the iptables nat table? (Choose THREE correct answers.)

A. PROCESSING B. MASQUERADE C. PREROUTING D. OUTPUT E. POSTROUTING

Correct Answer: C,D,E

Question 10

Which of the following parameters to openssl s_client specifies the host name to use for TLS Server Name Indication?

A. -host B. -sniname C. -tlsname D. -vhost E. -servername

Correct Answer: E

Question 11

Which of the following practices are important for the security of private keys? (Choose TWO correct answers.)

A. Private keys should be included in X509 certificates. B. Private keys should always be stored as plain text files without any encryption. C. Private keys should be uploaded to public key servers. D. Private keys should be created on the systems where they will be used and should never leave them. E. Private keys should have a sufficient length for the algorithm used for key generation.

Correct Answer: A,E

Question 12

Which auditd configuration file is used to define audit rules that control which system calls and files are monitored?

A. /etc/audit/auditd.conf B. /etc/audit/rules.d/audit.rules C. /var/log/audit/audit.log D. /etc/audisp/audispd.conf

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 13

Which command is used to set an extended attribute on a file in Linux?

A. getfattr B. getfacl C. setfacl D. setfattr

Correct Answer: D

Question 14

What is the purpose of rkhunter?

A. To manage system log files B. To detect rootkits and other security threats C. To manage installed packages D. To automate host scans

Correct Answer: B

Lpi LPIC Exam 303: Security, version 3.0 - 303-300 Exam Practice Test