LPI 303-200 Exam Questions Instant Access

Question 1

Which command is used to run a new shell for a user changing the SELinux context? (Specify ONLY the command without any path or parameters.)

See Below Explanation:

https://www.centos.ofg/docs/5/html/DeployrnenLGuide-en-US/sec-sel-admincontrol.html

Answer : A

https://www.centos.ofg/docs/5/html/DeployrnenLGuide-en-US/sec-sel-admincontrol.html

Question 2

Which of the following authentication methods was added to NFS in version 4?

AKerberos authentication

BSSH hostkey authentication

CWinbind authentication

DSSL certificate authentication

Answer : A

Question 3

Which of the following statements are true regarding the certificate of a Root CA? (Choose TWO correct answers.)

AIt is a self-signed certificate.

BIt does not include the private key of the CA

CIt must contain a host name as the common name.

DIt has an infinite lifetime and never expires.

EIt must contain an X509v3 Authority extension.

Answer : A, B, E

Question 4

Which of the following components are part of FreeIPA? (Choose THREE correct answers.)

ADHCP Server

BKerberos KDC

CIntrusion Detection System

DPublic Key Infrastructure

EDirectory Server

Answer : B, D, E

Question 5

Which of the following types can be specified within the Linux Audit system? (Choose THREE correct answers)

AControl rules

BFile system rules

CNetwork connection rules

DConsole rules

ESystem call rules

Answer : A, B, E

Question 6

Which of the following expressions are valid AIDE rules? (Choose TWO correct answers.)

A!/var/run/.*

Bappend: /var/log/*

C/usr=all

D#/bin/

E/etc p+i+u+g

Answer : A, E

Question 7

What effect does the configuration SSLStrictSNIVHostCheck on have on an Apache HTTPD virtual host?

AThe clients connecting to the virtual host must provide a client certificate that was issued by the same CA that issued the server's certificate.

BThe virtual host is served only to clients that support SNI.

CAll of the names of the virtual host must be within the same DNS zone.

DThe virtual host is used as a fallback default for all clients that do not support SNI.

EDespite its configuration, the virtual host is served only on the common name and Subject Alternative Names of the server certificates.

Answer : B

LPIC-3 Exam 303: Security 303-200 Exam Questions