303-300 by Lpi Valid Free Exam Practice Test

Question 1

Which command included in the Linux Audit system provides searching and filtering of the audit log? (Specify ONLY the command without any path or parameters.) Solution: ausearch Determine whether the given solution is correct?

A. Incorrect B. Correct

Correct Answer: B

Question 2

What is the purpose of the GnuPG "trust level" assigned to a key, as opposed to a signature on that key?

A. It indicates how much the owner trusts that key's holder to properly verify and sign other people's keys. B. It indicates how strongly the key's authenticity has been verified. C. It determines the key's expiration date. D. It is identical in meaning to a key signature and is redundant.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

Which SELinux mode logs policy violations without actually enforcing the policy?

A. Disabled B. Targeted C. Permissive D. Enforcing

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

What is the purpose of a TLSA record in DANE?

A. To sign a TLS server's public key B. To authenticate a DNS server C. To map a domain name to an IP address D. To provide information about a TLS server

Correct Answer: A

Question 5

What is a symmetric key?

A. A key used for decryption that is different from the key used for encryption B. A key used for encryption that is different from the key used for decryption C. A key used for both encryption and decryption that is generated randomly D. A key used for encryption and decryption that is the same

Correct Answer: D

Question 6

In nftables, what is the purpose of a "base chain" as opposed to a "regular chain"?

A. A base chain can only contain accept rules. B. A base chain is used only for NAT rules. C. A base chain is directly attached to a netfilter hook, such as input or forward, allowing it to receive packets from the kernel. D. There is no functional difference between base and regular chains.

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 7

Which mount option prevents the execution of binaries located on the mounted filesystem?

A. noexec B. nosuid C. nodev D. ro

Correct Answer: A

Question 8

Which of the following statements is true regarding eCryptfs?

A. When a user changes his login password, the contents of his eCryptfs home directory has to be re- encrypted using his new login password. B. For every file in an eCryptfs directory there exists a corresponding file that contains the encrypted content. C. The content of all files in an eCryptfs directory is stored in an archive file similar to a tar file with an additional index to improve performance. D. After unmounting an eCryptfs directory, the directory hierarchy and the original file names are still visible, although, it is not possible to view the contents of the files. E. eCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux user.

Correct Answer: E

Question 9

Which of the following parameters to openssl s_client specifies the host name to use for TLS Server Name Indication?

A. -vhost B. -sniname C. -tlsname D. -servername E. -host

Correct Answer: D

Question 10

Which IPsec mode encapsulates and protects the entire original IP packet, including its header, typically used for site-to-site VPN gateways?

A. Aggressive mode B. Main mode C. Tunnel mode D. Transport mode

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 11

What is the purpose of a Certificate Authority (CA)?

A. To encrypt X.509 certificates B. To decrypt X.509 certificates C. To issue and sign X.509 certificates D. To store X.509 certificates

Correct Answer: C

Question 12

Which of the following resources of a shell and its child processes can be controlled by the Bash build- in command ulimit? (Choose THREE correct answers.)

A. The maximum number of newly created files B. The maximum number of environment variables C. The maximum number of open file descriptors D. The maximum number of user processes E. The maximum size of written files

Correct Answer: C,D,E

Question 13

What is a trust anchor?

A. A list of public keys that are trusted by a particular CA B. A key pair that is generated by a particular CA C. A root certificate that is trusted by a particular CA D. A list of private keys that are trusted by a particular CA

Correct Answer: C

Question 14

Which mount option prevents the execution of binaries located on the mounted filesystem?

A. noexec B. nosuid C. nodev D. ro

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Lpi LPIC Exam 303: Security, version 3.0 - 303-300 Exam Practice Test