Lpi 303-200 Online Practice Questions and Exam Preparation

Lpi 303-200 Online Questions & Answers

• Question 31:

  Which DNS label points to the DANE information used to secure HTTPS connections to https://www.example.com/?

  A. example.com
  B. dane.www.example.com
  C. soa.example com
  D. www.example.com
  E. _443_tcp.www example.com
  E. _443_tcp.www example.com

• Question 32:

  Which command is used to run a new shell for a user changing the SELinux context? (Specify ONLY the command without any path or parameters.)

  newrole

• Question 33:

  Which of the following commands makes the contents of the eCryptfs encrypted directory -/Private available to the user?

  A. eCryptfsclient
  B. eCryptfs.mount
  C. eCryptfs-mount-private
  D. deCryptfs
  E. eCryptfs-manage-di rectory
  C. eCryptfs-mount-private

• Question 34:

  Which of the following configuration options makes Apache HTTPD require a client certificate for authentication?

  A. Limit valid-x509
  B. SSLRequestClientCert always
  C. Require valid-x509
  D. SSLVerifyClient require
  E. SSLPolicy valid-client-cert
  D. SSLVerifyClient require

• Question 35:

  How are SELinux permissions related to standard Linux permissions? (Choose TWO correct answers.)

  A. SELinux permissions overnde standard Linux permissions.
  B. Standard Linux permissions override SELinux permissions.
  C. SELinux permissions are verified before standard Linux permissions.
  D. SELinux permissions are verified after standard Linux permissions.
  B. Standard Linux permissions override SELinux permissions.
  D. SELinux permissions are verified after standard Linux permissions.

• Question 36:

  Which of the following access control models is established by using SELinux?

  A. Security Access Control (SAC)
  B. Group Access Control (GAC)
  C. User Access Control (UAC)
  D. Discretionary Access Control (DAC)
  E. Mandatory Access Control (MAC)
  E. Mandatory Access Control (MAC)

• Question 37:

  Which of the following statements is true about chroot environments?

  A. Symbolic links to data outside the chroot path are followed, making files and directories accessible.
  B. Hard links to files outside the chroot path are not followed, to increase security.
  C. The chroot path needs to contain all data required by the programs running in the chroot environment.
  D. Programs are not able to set a chroot path by using a function call, they have to use the command chroot.
  E. When using the command chroot, the started command is running in its own namespace and cannot communicate with other processes.
  C. The chroot path needs to contain all data required by the programs running in the chroot environment.

• Question 38:

  Which command, included in BlND, generates DNSSEC keys? (Specify ONLY the command without any path or parameters.)

  dnssec-keygen

• Question 39:

  Which of the following sections are allowed within the Kerberos configuration file krb5.conf? (Choose THREE correct answers.)

  A. [plugins]
  B. [crypto]
  C. [domain]
  D. [capaths]
  E. [realms]
  A. [plugins]
  D. [capaths]
  E. [realms]

• Question 40:

  What is the purpose of the program snort-stat?

  A. lt displays statistics from the running Snort process.
  B. lt returns the status of all configured network devices.
  C. lt reports whether the Snort process is still running and processing packets.
  D. lt displays the status of all Snort processes.
  E. lt reads syslog files containing Snort information and generates port scan statistics.
  E. lt reads syslog files containing Snort information and generates port scan statistics.