303-200 by Lpi Valid Free Exam Practice Test

Question 1

Which command revokes ACL-based write access for groups and named users on the file afile?

A. setfacl -x mask: : rx afile B. setfacl ~m group: * : rx, user:*: rx afile C. setfacI -x group: * : rx, user:*: rx afile D. setfacl ~m mask: : rx afile

Correct Answer: D

Question 2

Which of the following keywords are built-in chairs for the iptables nat table? (Choose THREE correct answers)

A. PROCESSING B. MASQUERADE C. PREROUTING D. OUTPUT E. POSTROUTING

Correct Answer: C,D,E

Question 3

What effect does the following command have on TCP packets?
iptables- A INPUT -d 10 142 232.1 -p tcp -dport 20:21 -j ACCEPT

A. Accept only TCP traffic from 10.142 232.1 destined for port 20 or 21. B. Drop all TCP traffic coming from 10 142 232.1 destined for port 20 or 21. C. Accept all TCP traffic on port 20 and 21 for the IP address 10.142.232.1 D. Forward all TCP traffic not on port 20 or 21 to the IP address 10.142 232.1

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

Which of the following statements is used in a parameter file for setkey in order to create a new SPD entry?

A. newspd B. addspd C. spdadd D. spd E. spdnew

Correct Answer: C

Question 5

Which of the following information, within a DNSSEC- signed zone, is signed by the key signing key?

A. The NSEC or NSEC3 records of the zone. B. The DS records pointing to the zone C. The zone signing key of the zone. D. The RRSIG records of the zone. E. The non-DNSSEC records like A, AAAA or MX

Correct Answer: C

Question 6

Which of the following commands changes the source IP address to 192.0.2.11 for all IPv4 packets which go through the network interface eth0?

A. iptables ~t nat -A POSTROUTING ~o eth0 -j SNAT -to-source 192.0.2.11 B. iptables -t mangle -A POSTROUTING -i eth0 -j SNAT -to-source 192.0.2.11 C. iptables -t nat -A POSTROUTING H eth0 -j DNAT -to-source 192.0.2.11 D. iptables ~t nat -A PREROUT1NG -\ eth0 -j SNAT -to-source 192.0.2.11 E. iptables -t mangle -A POSTROUTING -0 eth0 -j SNAT -to-source 192.0.2.11

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Lpi 303-200: LPIC-3 Exam 303: Security, version 2.0 - 303-200 Exam Practice Test