Lpi LPI Level 3 Exam (LPI 303: Security) - 117-303 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

What is the purpose of snort inline?

A. To run the snort daemon as a nonroot user. B. To run the snort daemon without forking child processes. C. To have iptables use snort rules to filter packets. D. To have snort log suspicious activity only, without performing any actions

Discussion 0

Correct Answer: C Vote an answer

Question 2

What does the following iptables rule accomplish:
iptables A INPUT s 208.77.188.166 j DROP

A. Nothing, there is a syntax error. B. Drops all traffic from 208.77.188.166. C. Accepts all traffic from 208.77.188.166. D. Forwards all incoming traffic to the host 208.77.188.166.

Discussion 0

Correct Answer: B Vote an answer

Question 3

What is one of the primary claimed benefits of Smack over SELinux?

A. Configuration of Smack is much more simple. B. Smack allows users to share files without administrator intervention. C. Smack implements Rule Set Based Access Control. SELinux doesn't support this model. D. SELinux has export restrictions placed on it by the NSA.

Discussion 0

Correct Answer: A Vote an answer

Question 4

SELinux has just been installed on a Linux system and the administrator wants to use SELinux in permissive mode in order to audit the various services on the system. What command will switch SELinux into permissive mode?

A. selinux passive B. setenforce 0 C. /etc/init.d/selinux stop D. /etc/init.d/selinux startpassive

Discussion 0

Correct Answer: B Vote an answer

Question 5

Which of the following is NOT included in a Snort rule header?

A. source port B. protocol C. source IP address D. packet byte offset E. action

Discussion 0

Correct Answer: D Vote an answer

Question 6

CORRECT TEXT
An administrator has successfully configured a cryptographic volume for dmcrypt, and has added the following line to /etc/fstab:
/dev/mapper/cryptvol /media/crypt auto defaults 0 0
Upon booting the system, the error message "mount: special device /dev/mapper/cryptvol does not exist" is displayed. What configuration file has the administrator forgotten to edit? (Provide the full path and filename)

Discussion 0

Correct Answer:

/etc/crypttab

Question 7

Which statements are true of the following Wireshark capture filter:
(tcp[2:2] > 1500 and tcp[2:2] < 1550) or (tcp[4:2] > 1500 and tcp[4:2] < 1550)
(Select TWO correct answers)

A. Only two bytes are being checked in each packet. B. Up to four bytes are being check in each packet. C. Traffic on ports 15001550 is being captured. D. Every packet being checked has a 2 byte offset. E. Traffic on ports 15011549 is being captured.

Discussion 0

Correct Answer: B,E Vote an answer

Question 8

Which of the following statements is true when querying the extended attributes of a file that has no extended attributes set?

A. getfattr will print a warning and exit with a value of 0. B. getfattr will print a warning and exit with a value of 1. C. No output will be produced and getfattr will exit with a value of 1. D. No output will be produced and getfattr will exit with a value of 0.

Discussion 0

Correct Answer: D Vote an answer