Lpi 303-200 Online Practice Questions and Exam Preparation

Lpi 303-200 Online Questions & Answers

• Question 41:

  Which of the following commands adds a new user usera to FreelPA?

  A. useradd usera --directory ipa --gecos *User A"
  B. idap- useradd --H ldaps:jjipa-server CN=UserA --attribs "Firstname: User: Lastname: A"
  C. ipa-admin create user --account usera -_fname User --iname A
  D. ipa user-add usera --first User --last A
  E. ipa-user- add usera --name "User A"
  D. ipa user-add usera --first User --last A

• Question 42:

  Which of the following statements are true regarding the certificate of a Root CA? (Choose THREE correct answers.)

  A. It is a self-signed certificate.
  B. lt does not include the private key of the CA.
  C. lt must contain a host name as the common name.
  D. lt has an infinite lifetime and never expires.
  E. lt must contain an X509v3 Authority extension.
  A. It is a self-signed certificate.
  B. lt does not include the private key of the CA.
  E. lt must contain an X509v3 Authority extension.

• Question 43:

  Which of the following expressions are valid AlDE rules? (Choose TWO correct answers.)

  A. !/var/run/.*
  B. append: /var/log/*
  C. /usr=all
  D. #/bin/
  E. /etc p+i+u+g
  A. !/var/run/.*
  E. /etc p+i+u+g

• Question 44:

  Which of the following statements are true regarding the certificate? (Choose THREE correct answers.)

  A. This certificate belongs to a certification authority.
  B. This certificate may be used to sign certificates of subordinate certification authorities.
  C. This certificate may never be used to sign any other certificates.
  D. This certificate may be used to sign certificates that are not also a certification authority.
  E. This certificate will not be accepted by programs that do not understand the listed extension.
  A. This certificate belongs to a certification authority.
  B. This certificate may be used to sign certificates of subordinate certification authorities.
  D. This certificate may be used to sign certificates that are not also a certification authority.

• Question 45:

  What is the purpose of lP sets?

  A. They group together lP addresses that are assigned to the same network interfaces.
  B. They group together lP addresses and networks that can be referenced by the network routing table.
  C. They group together lP addresses that can be referenced by netfilter rules.
  D. They group together lP and MAC addresses used by the neighbors on the local network.
  E. They group together lP addresses and user names that can be referenced from /etc/hosts allow and /etc/hosts deny.
  C. They group together lP addresses that can be referenced by netfilter rules.

• Question 46:

  Which of the following DNS record types can the command dnssec-signzone add to a zone? (Choose THREE correct answers.)

  A. ASlG
  B. NSEC
  C. NSEC3
  D. NSSlG
  E. RRSlG
  B. NSEC
  C. NSEC3
  E. RRSlG

• Question 47:

  Which of the following commands adds users using SSSD's local service?

  A. sss_adduser
  B. sss_useradd
  C. sss_add
  D. sss-addlocaluser
  E. sss_local_adduser
  B. sss_useradd

• Question 48:

  In which path is the data, which can be altered by the sysctl command, accessible?

  A. /dev/sys/
  B. /sys/
  C. /proc/sys/
  D. /sysctl/
  C. /proc/sys/

• Question 49:

  Which of the following are differences between AppArmor and SELinux? (Choose TWO correct answers).

  A. AppArmor is implemented in user space only. SELinux is a Linux Kernel Module.
  B. AppArmor is less complex and easier to configure than SELinux.
  C. AppArmor neither requires nor allows any specific configuration. SELinux must always be manually configured.
  D. SELinux stores information in extended file attributes. AppArmor does not maintain file specific information and states.
  E. The SELinux configuration is loaded at boot time and cannot be changed later on AppArmor provides user space tools to change its behavior.
  B. AppArmor is less complex and easier to configure than SELinux.
  D. SELinux stores information in extended file attributes. AppArmor does not maintain file specific information and states.

• Question 50:

  Given that this device has three different keys, which of the following commands deletes only the first key?

  A. cryptsetup luksDelKey/dev/sda 10
  B. cryptsetup luksDelkey /dev/sda 11
  C. cryptsetup luksDelKey/dev /mapper/crypt- vol 1
  D. cryptsetup luksDelKey /dev/mapper/crypt- vol 0
  A. cryptsetup luksDelKey/dev/sda 10