Lpi 303-200 Test Engine Practice Test Questions, Exam Dumps
100% Free 303-200 Daily Practice Exam With 60 Questions
LPI LPIC-3 Exam Certification Details:
| Exam Name | LPIC-3 Security |
| Duration | 90 mins |
| Exam Price | $200 (USD) |
| Passing Score | 500 / 800 |
| Exam Code | 303-200 |
| Number of Questions | 60 |
| Sample Questions | LPI LPIC-3 Sample Questions |
NEW QUESTION 23
When OpenVPN sends a control packet to its peer, it expects an acknowledgement in 2 seconds by default. Which of the following options changes the timeout period to 5 seconds?
- A. -tls- timer 5
- B. -tls-timeout 5
- C. -tls- timer 500
- D. -tls- timeout 500
Answer: B
NEW QUESTION 24
What is the purpose of the program snort-stat?
- A. It displays the status of all Snort processes.
- B. It returns the status of all configured network devices.
- C. It displays statistics from the running Snort process.
- D. It reports whether the Snort process is still running and processing packets.
- E. It reads syslog files containing Snort information and generates port scan statistics.
Answer: E
Explanation:
Explanation/Reference:
http://manpages.ubuntu.com/manpages/trusty/man8/snort-stat.8.html
NEW QUESTION 25
SIMULATION
Which command installs and configures a new FreeIPA server, including all sub-components, and creates a new FreeIPA domain? (Specially ONLY the command without any path or parameters).
Answer:
Explanation:
ipa-server-install
Explanation/Reference:
https://www.freeipa.org/images/2/2b/Installation_and_Deployment_Guide.pdf
NEW QUESTION 26
How are SELinux permissions related to standard Linux permissions? (Choose TWO correct answers.)
- A. SELinux permissions are verified before standard Linux permissions.
- B. SELinux permissions are verified after standard Linux permissions.
- C. Standard Linux permissions override SELinux permissions.
- D. SELinux permissions override standard Linux permissions.
Answer: B,C
Explanation:
Explanation/Reference:
http://www.linuxtopia.org/online_books/getting_started_with_SELinux/SELinux_overview.html
NEW QUESTION 27
Which of the following are differences between AppArmor and SELinux? (Choose TWO correct answers).
- A. The SELinux configuration is loaded at boot time and cannot be changed later on AppArmor provides user space tools to change its behavior.
- B. SELinux stores information in extended file attributes. AppArmor does not maintain file specific information and states.
- C. AppArmor neither requires nor allows any specific configuration. SELinux must always be manually configured.
- D. AppArmor is less complex and easier to configure than SELinux.
- E. AppArmor is implemented in user space only. SELinux is a Linux Kernel Module.
Answer: B,D
NEW QUESTION 28
Which of the following methods can be used to deactivate a rule in Snort? (Choose TWO correct answers.)
- A. By deleting the rule and waiting for Snort to reload its rules files automatically.
- B. By placing a # in front of the rule and restarting Snort.
- C. By placing a pass rule in local.rules and restarting Snort.
- D. By adding a pass rule to /etc/snort/rules.deactivated and waiting for Snort to reload its rules files automatically.
Answer: A,C
NEW QUESTION 29
SIMULATION
What command is used to update NVTs from the OpenVAS NVT feed? (Specify ONLY the command without any path or parameters).
Answer:
Explanation:
openvas-nvt-sync
Explanation/Reference:
http://www.openvas.org/openvas-nvt-feed.html
NEW QUESTION 30
When OpenVPN sends a control packet to its peer, it expects an acknowledgement in 2 seconds by default.
Which of the following options changes the timeout period to 5 seconds?
- A. -- tls- timeout 500
- B. -- tls- timer 500
- C. -- tls- timer 5
- D. -- tls-timeout 5
Answer: D
Explanation:
Explanation/Reference:
https://openvpn.net/index.php/open-source/documentation/manuals/65-openvpn-20x-manpage.html
NEW QUESTION 31
Which of the following prefixes could be present in the output of getcifsacl? (Choose THREE correct answers.)
- A. ACL
- B. GROUP
- C. GRANT
- D. SID
- E. OWNER
Answer: A,B,D
Explanation:
Explanation/Reference:
https://www.mankier.com/1/getcifsacl
NEW QUESTION 32
Which of the following configuration options makes Apache HTTPD require a client certificate for authentication?
- A. SSLVerifyClient require
- B. SSLRequestClientCert always
- C. SSLPolicy valid-client-cert
- D. Limit valid-x509
- E. Require valid-x509
Answer: A
NEW QUESTION 33
What effect does the configuration SSLStrictSNIVHostCheck on have on an Apache HTTPD virtual host?
- A. Despite its configuration, the virtual host is served only on the common name and Subject Alternative Names of the server certificates.
- B. The virtual host is used as a fallback default for all clients that do not support SNI.
- C. The clients connecting to the virtual host must provide a client certificate that was issued by the same CA that issued the server's certificate.
- D. All of the names of the virtual host must be within the same DNS zone.
- E. The virtual host is served only to clients that support SNI.
Answer: E
Explanation:
Explanation/Reference:
http://serverfault.com/questions/510132/apache-sni-namevhosts-always-route-to-first-virtualhost-entry
NEW QUESTION 34
Which of the following stanzas is a valid client configuration for FreeRADIUS?
- A. client private-network-1 {
ip = 192.0.2.0/24
secret = testing123-1
} - B. client private-network-1 {
ipaddr = 192.0.2.0/24
secret = testing123-1
} - C. client private-network-1 {
ip = 192.0.2.0/24
passwd = testing123-1
} - D. client private-network-1 {
ipaddr = 192.0.2.0/24
password = testing123-1
} - E. client private-network-1 {
ip = 192.0.2.0/24
password = testing123-1
}
Answer: B
Explanation:
Explanation/Reference:
http://linux.die.net/man/5/clients.conf
NEW QUESTION 35
Which of the following sections are allowed within the Kerberos configuration file krb5.conf? (Choose THREE correct answers.)
- A. [capaths]
- B. [plugins]
- C. [domain]
- D. [realms]
- E. [crypto]
Answer: A,B,D
Explanation:
Explanation/Reference:
http://linux.die.net/man/5/krb5.conf
NEW QUESTION 36
Which DNS label points to the DANE information used to secure HTTPS connections to https://www.example.com/?
- A. soa.example com
- B. www.example.com
- C. example.com
- D. _443_tcp.www example.com
- E. dane.www.example.com
Answer: D
NEW QUESTION 37
Which of the following components are part of FreeIPA? (Choose THREE correct answers.)
- A. Directory Server
- B. Public Key Infrastructure
- C. DHCP Server
- D. Intrusion Detection System
- E. Kerberos KDC
Answer: A,B,E
NEW QUESTION 38
Which command revokes ACL-based write access for groups and named users on the file afile?
- A. setfacl ~m group: * : rx, user :*: rx afile
- B. setfacl -x mask: : rx afile
- C. setfacl ~m mask: : rx afile
- D. setfacl -x group: * : rx, user:*: rx afile
Answer: C
Explanation:
Explanation/Reference:
http://linuxcommand.org/man_pages/setfacl1.html
NEW QUESTION 39
Which of the following commands defines an audit rule that monitors read and write operations to the file/ etc/firewall/rules and associates the rule with the name firewall?
- A. auditctl -N firewall -r r: /etc/firewall/rules -r w: etc/firewall/rules
- B. auditctl -w /etc/firewall/rules -p rw -k firewall
- C. auditctl -A -f /etc/firewall/rules -o r- o w -l firewall
- D. echo "n: firewall r:/etc/firewall/rules: w:/ etc/firewall/rules:" | auditctl ~
- E. auditctl -_read /etc/firewall/rules -_write /etc/firewall/rules --label firewall
Answer: B
NEW QUESTION 40
Which of the following database names can be used within a Name Service Switch (NSS) configuration file? (Choose THREE correct answers).
- A. shadow
- B. passwd
- C. service
- D. group
- E. host
Answer: C,D,E
NEW QUESTION 41
Which option of the openvpn command should be used to ensure that ephemeral keys are not written to the swap space?
- A. --no-swap
- B. --keys-no-swap
- C. --mlock
- D. --root-swap
Answer: C
NEW QUESTION 42
......
Use Valid New 303-200 Test Notes & 303-200 Valid Exam Guide: https://pass4sure.actualtorrent.com/303-200-exam-guide-torrent.html