Lpi LPIC-3 303-200 Questions & Answers

• Question 11:

  Which of the following methods can be used to deactivate a rule in Snort? (Choose TWO correct answers.)

  A. By placing a # in front of the rule and restarting Snort.

  B. By placing a pass rule in local.rules and restarting Snort.

  C. By deleting the rule and waiting for Snort to reload its rules files automatically.

  D. By adding a pass rule to /etc/snort/rules.deactivated and waiting for Snort to reload its rules files automatically.

  Correct Answer: BC

• Question 12:

  What is the purpose of lP sets?

  A. They group together lP addresses that are assigned to the same network interfaces.

  B. They group together lP addresses and networks that can be referenced by the network routing table.

  C. They group together lP addresses that can be referenced by netfilter rules.

  D. They group together lP and MAC addresses used by the neighbors on the local network.

  E. They group together lP addresses and user names that can be referenced from /etc/hosts allow and / etc/hosts deny.

  Correct Answer: C

• Question 13:

  Which of the following keywords are built-in chairs for the iptables nat table? (Choose THREE correct answers)

  A. OUTPUT

  B. MASQUERADE

  C. PROCESSlNG

  D. POSTROUTlNG

  E. PREROUTlNG

  Correct Answer: ADE

• Question 14:

  Which of the following commands displays all ebtable rules contained in the table filter including their packet and byte counters?

  A. ebtables -t nat -L -v

  B. ebtables-L-t filter -Lv

  C. ebtables -t filter –L --Lc

  D. ebtables -t filter -Ln -L

  E. ebtables-L -Lc-t filter

  Correct Answer: C

• Question 15:

  Which of the following command lines sets the administrator password for ntop to testing 123?

  A. ntop --set-admin-password=testing123

  B. ntop --set-password-testing123

  C. ntop --reset-password=testing 123

  D. ntop --set-new-password=testing123

  Correct Answer: A

• Question 16:

  What is the purpose of the program snort-stat?

  A. lt displays statistics from the running Snort process.

  B. lt returns the status of all configured network devices.

  C. lt reports whether the Snort process is still running and processing packets.

  D. lt displays the status of all Snort processes.

  E. lt reads syslog files containing Snort information and generates port scan statistics.

  Correct Answer: E

• Question 17:

  Which of the following commands changes the source lP address to 192.o.2.11 for all lPv4 packets which go through the network interface etho?

  A. iptables ~t nat -A POSTROUTlNG ~o etho -j SNAT -to-source 192.0.2.11

  B. iptables ~t nat -A PREROUT1NG -\ etho -j SNAT -to-source 192.0.2.11

  C. iptables -t nat -A POSTROUTlNG H etho -j DNAT -to-source 192.0.2.11

  D. iptables -t mangle -A POSTROUTlNG -i etho -j SNAT -to-source 192.0.2.11

  E. iptables -t mangle -A POSTROUTlNG -o etho -j SNAT -to-source 192.0.2.11

  Correct Answer: A

• Question 18:

  Which of the following commands makes the contents of the eCryptfs encrypted directory -/Private available to the user?

  A. eCryptfsclient

  B. eCryptfs.mount

  C. eCryptfs-mount-private

  D. deCryptfs

  E. eCryptfs-manage-di rectory

  Correct Answer: C

• Question 19:

  Which of the following openssl commands generates a certificate signing request (CSR) using the already existing private key contained in the file privatejkeypair.pem?

  A. openssl req -key private/keypair.pem -out req/csr.pem

  B. openssl req - new -key private/keypair.pem -out req/csr.pem

  C. openssl gencsr -key private/keypair.pem -out req.csr.pem

  D. openssl gencsr -new- key private/keypair.pem -out req.csr.pem

  Correct Answer: B

• Question 20:

  Which DNS label points to the DANE information used to secure HTTPS connections to https:// www.example.com/?

  A. example.com

  B. dane.www.example.com

  C. soa.example com

  D. www.example.com

  E. _443_tcp.www example.com

  Correct Answer: E