Lpi LPIC-3 303-200 Questions & Answers

• Question 31:

  How does TSlG authenticate name servers in order to perform secured zone transfers?

  A. Both servers mutually verify their X509 certificates.

  B. Both servers use a secret key that is shared between the servers.

  C. Both servers verify appropriate DANE records for the labels of the NS records used to delegate the transferred zone.

  D. Both servers use DNSSEC to mutually verify that they are authoritative for the transferred zone.

  Correct Answer: B

• Question 32:

  Which of the following statements are true regarding the certificate of a Root CA? (Choose THREE correct answers.)

  A. It is a self-signed certificate.

  B. lt does not include the private key of the CA.

  C. lt must contain a host name as the common name.

  D. lt has an infinite lifetime and never expires.

  E. lt must contain an X509v3 Authority extension.

  Correct Answer: ABE

• Question 33:

  Which of the following DNS record types can the command dnssec-signzone add to a zone? (Choose THREE correct answers.)

  A. ASlG

  B. NSEC

  C. NSEC3

  D. NSSlG

  E. RRSlG

  Correct Answer: BCE

• Question 34:

  What effect does the configuration SSLStrictSNlVHostCheck on have on an Apache HTTPD virtual host?

  A. The clients connecting to the virtual host must provide a client certificate that was issued by the same CA that issued the server's certificate.

  B. The virtual host is served only to clients that support SNl.

  C. All of the names of the virtual host must be within the same DNS zone.

  D. The virtual host is used as a fallback default for all clients that do not support SNl.

  E. Despite its configuration, the virtual host is served only on the common name and Subject Alternative Names of theserver certificates.

  Correct Answer: B

• Question 35:

  Which of the following commands adds users using SSSD's local service?

  A. sss_adduser

  B. sss_useradd

  C. sss_add

  D. sss-addlocaluser

  E. sss_local_adduser

  Correct Answer: B

• Question 36:

  Which of the following commands adds a new user usera to FreelPA?

  A. useradd usera --directory ipa --gecos *User A"

  B. idap- useradd --H ldaps:jjipa-server CN=UserA --attribs "Firstname: User: Lastname: A"

  C. ipa-admin create user --account usera -_fname User --iname A

  D. ipa user-add usera --first User --last A

  E. ipa-user- add usera --name "User A"

  Correct Answer: D

• Question 37:

  Which command included in the Linux Audit system provides searching and filtering of the audit log? (Specify ONLY the command without any path or parameters.)

  Correct Answer: ausearch

• Question 38:

  In which path is the data, which can be altered by the sysctl command, accessible?

  A. /dev/sys/

  B. /sys/

  C. /proc/sys/

  D. /sysctl/

  Correct Answer: C

• Question 39:

  Which of the following statements is true about chroot environments?

  A. Symbolic links to data outside the chroot path are followed, making files and directories accessible.

  B. Hard links to files outside the chroot path are not followed, to increase security.

  C. The chroot path needs to contain all data required by the programs running in the chroot environment.

  D. Programs are not able to set a chroot path by using a function call, they have to use the command chroot.

  E. When using the command chroot, the started command is running in its own namespace and cannot communicate with other processes.

  Correct Answer: C

• Question 40:

  Which of the following commands disables the automatic password expiry for the user usera?

  A. chage --maxdays none usera

  B. chage -maxdays 99 usera

  C. chage --maxdays -1 usera

  D. chage --lastday none usera

  E. chage --lastday o usera

  Correct Answer: C