Lpi 303-200 Online Practice Questions and Exam Preparation

Lpi 303-200 Online Questions & Answers

• Question 1:

  Which of the following resources of a shell and its child processes can be controlled by the Bash build-in command ulimit? (Choose THREE correct answers.)

  A. The maximum size of written files
  B. The maximum number of open file descriptors
  C. The maximum number of newly created files
  D. The maximum number of environment variables
  E. The maximum number of user processes
  A. The maximum size of written files
  B. The maximum number of open file descriptors
  E. The maximum number of user processes

• Question 2:

  Which of the following parameters to openssl s_client specifies the host name to use for TLS Server Name lndication?

  A. -tlsname
  B. -servername
  C. -sniname
  D. -vhost
  E. -host
  B. -servername

• Question 3:

  Which of the following openssl commands generates a certificate signing request (CSR) using the already existing private key contained in the file privatejkeypair.pem?

  A. openssl req -key private/keypair.pem -out req/csr.pem
  B. openssl req
  C. openssl gencsr -key private/keypair.pem -out req.csr.pem
  D. openssl gencsr -new- key private/keypair.pem -out req.csr.pem
  B. openssl req

• Question 4:

  Which of the following commands defines an audit rule that monitors read and write operations to the file/etc/firewall/rules and associates the rule with the name firewall?

  A. auditctl -N firewall -r r: /etc/firewall/rules -r w: etc/firewall/rules
  B. auditctl -A –f/etc/firewall/rules -o r- o w -| firewall
  C. auditctl -w /etc/firewall/rules -p rw -k firewall
  D. auditctl -_read /etc/firewall/rules -_write /etc/firewall/rules --label firewall
  E. echo "n: firewall r:/etc/firewall/rules: w:/etc/firewall/rules:" | auditctl ~
  C. auditctl -w /etc/firewall/rules -p rw -k firewall

• Question 5:

  Which of the following statements is true regarding eCryptfs?

  A. For every file in an eCryptfs directory there exists a corresponding file that contains the encrypted content.
  B. The content of all files in an eCryptfs directory is stored in an archive file similar to a tar file with an additional index to improve performance.
  C. After unmounting an eCryptfs directory, the directory hierarchy and the original file names are still visible, although, it is not possible to view the contents of the files.
  D. When a user changes his login password, the contents of his eCryptfs home directory has to be re-encrypted using his new login password.
  E. eCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux user.
  E. eCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux user.

• Question 6:

  Which command included in the Linux Audit system provides searching and filtering of the audit log? (Specify ONLY the command without any path or parameters.)

  ausearch

• Question 7:

  Which PAM module checks new passwords against dictionary words and enforces complexity? (Specially the module name only without any path.)

  pam_cracklib

• Question 8:

  What effect does the following command have on TCP packets? iptables- A lNPUT -d 10 142 232.1 -p tcp -dport 20:21 -j ACCEPT

  A. Forward all TCP traffic not on port 20 or 21 to the lP address 10.142 232.1
  B. Drop all TCP traffic coming from 10 142 232.1 destined for port 20 or 21.
  C. Accept only TCP traffic from 10.142 232.1 destined for port 20 or 21.
  D. Accept all TCP traffic on port 20 and 21 for the lP address 10.142.232.1
  D. Accept all TCP traffic on port 20 and 21 for the lP address 10.142.232.1

• Question 9:

  Which of the following statements are valid wireshark capture filters? (Choose TWO correct answers.)

  A. port range 10000:tcp-15000:tcp
  B. port-range tcp 10000-15000
  C. tcp portrange 10000-15000
  D. portrange 10000/tcp-15000/tcp E. portrange 10000-15000 and tcp
  C. tcp portrange 10000-15000

• Question 10:

  What command is used to update NVTs from the OpenVAS NVT feed? (Specify ONLY the command without any path or parameters).

  openvas-nvtsync