Lpi LPIC Exam 303: Security, version 3.0 - 303-300 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

What is the purpose of a DNSKEY record in DNSSEC?

A. To verify the authenticity of a DNS query B. To map an IP address to a hostname C. To sign a DNS zone D. To provide information about a DNS server

Discussion 0

Correct Answer: C Vote an answer

Question 2

Which command-line tool is commonly used to test and verify TLS/SSL configuration and certificate details of a remote server?

A. tcpdump B. openssl s_client C. ss -tlnp D. nmap -sV

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

Which of the following statements is true regarding eCryptfs?

A. After unmounting an eCryptfs directory, the directory hierarchy and the original file names are still visible, although, it is not possible to view the contents of the files. B. For every file in an eCryptfs directory there exists a corresponding file that contains the encrypted content. C. When a user changes his login password, the contents of his eCryptfs home directory has to be re- encrypted using his new login password. D. The content of all files in an eCryptfs directory is stored in an archive file similar to a tar file with an additional index to improve performance. E. eCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux user.

Discussion 0

Correct Answer: E Vote an answer

Question 4

What is Cryptography?

A. The art of sending anonymous messages B. The art of sending secret messages C. The art of sending public messages D. The art of decoding messages

Discussion 0

Correct Answer: B Vote an answer

Question 5

Which command installs and configures a new FreeIPA server, including all sub-components, and creates a new FreeIPA domain? (Specially ONLY the command without any path or parameters).
Solution: ipa-server-install
Determine whether the given solution is correct?

A. Correct B. Incorrect

Discussion 0

Correct Answer: A Vote an answer

Question 6

Which SELinux mode logs policy violations without actually enforcing the policy?

A. Disabled B. Permissive C. Enforcing D. Targeted

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

Which of the following commands lists the extended attributes set on a file?

A. getfacl B. lsattr C. getfattr D. stat

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

What is OCSP stapling?

A. A mechanism that allows a server to provide proof of the revocation status of all certificates issued by a particular Certificate Authority B. A mechanism that allows a server to provide proof of the revocation status of its own SSL/TLS certificate C. A mechanism that allows a server to provide proof of its own identity to clients D. A mechanism that allows a server to provide proof of a client's identity to other servers

Discussion 0

Correct Answer: B Vote an answer

Question 9

Which of the following openssl commands generates a certificate signing request (CSR) using the already existing private key contained in the file private/ keypair.pem?

A. openssl gencsr -key private/keypair.pem -out req/csr.pem B. openssl req -key private/keypair.pem -out req/csr.pem C. openssl gencsr -new- key private/keypair.pem -out req/csr.pem D. openssl req - new -key private/keypair.pem -out req/csr.pem

Discussion 0

Correct Answer: D Vote an answer

Question 10

Which OpenVPN configuration directive specifies that the tunnel should operate at Layer 3, routing IP packets rather than bridging Ethernet frames?

A. proto udp B. topology subnet C. dev tap D. dev tun

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 11

Which of the following keywords are built-in chairs for the iptables nat table? (Choose THREE correct answers.)

A. PREROUTING B. POSTROUTING C. OUTPUT D. MASQUERADE E. PROCESSING

Discussion 0

Correct Answer: A,B,C Vote an answer

Question 12

Which of the following resources of a shell and its child processes can be controlled by the Bash build- in command ulimit? (Choose THREE correct answers.)

A. The maximum number of newly created files B. The maximum number of environment variables C. The maximum size of written files D. The maximum number of user processes E. The maximum number of open file descriptors

Discussion 0

Correct Answer: C,D,E Vote an answer

Question 13

What is the purpose of the Linux Audit system?

A. To manage system log files B. To manage installed packages C. To detect intrusions and system changes D. To automate host scans

Discussion 0

Correct Answer: C Vote an answer

Question 14

Which command displays the capabilities currently assigned to a specific binary file?

A. setcap /path/to/binary B. chmod +cap /path/to/binary C. capsh --print D. getcap /path/to/binary

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).