LPI 303-200 Exam Questions Instant Access

Question 1

Which of the following methods can be used to deactivate a rule in Snort? (Choose TWO correct answers.)

ABy placing a # in front of the rule and restarting Snort

BBy placing a pass rule in local.rules and restarting Snort.

CBy deleting the rule and waiting for Snort to reload its rules files automatically.

DBy adding a pass rule to /etc/snort/rules.deactivated and waiting for Snort to reload its rules files automatically.

Answer : B, C

Question 2

What effect does the following command have on TCP packets?

iptables- A INPUT -d 10 142 232.1 -p tcp -dport 20:21 -j ACCEPT

AForward all TCP traffic not on port 20 or 21 to the IP address 10.142 232.1

BDrop all TCP traffic coming from 10 142 232.1 destined for port 20 or 21.

CAccept only TCP traffic from 10.142 232.1 destined for port 20 or 21.

DAccept all TCP traffic on port 20 and 21 for the IP address 10.142.232.1

Answer : C

Question 3

What effect does the configuration SSLStrictSNIVHostCheck on have on an Apache HTTPD virtual host?

AThe clients connecting to the virtual host must provide a client certificate that was issued by the same CA that issued the server's certificate.

BThe virtual host is served only to clients that support SNI.

CAll of the names of the virtual host must be within the same DNS zone.

DThe virtual host is used as a fallback default for all clients that do not support SNI.

EDespite its configuration, the virtual host is served only on the common name and Subject Alternative Names of the server certificates.

Answer : B

Question 4

Which of the following commands changes the source IP address to 192.0.2.11 for all IPv4 packets which go through the network interface eth0?

Aiptables ~t nat -A POSTROUTING ~o eth0 -j SNAT -to-source 192.0.2.11

Biptables ~t nat -A PREROUT1NG -\ eth0 -j SNAT -to-source 192.0.2.11

Ciptables -t nat -A POSTROUTING H eth0 -j DNAT -to-source 192.0.2.11

Diptables -t mangle -A POSTROUTING -i eth0 -j SNAT -to-source 192.0.2.11

Eiptables -t mangle -A POSTROUTING -0 eth0 -j SNAT -to-source 192.0.2.11

Answer : A

Question 5

Which command, included in BIND, generates DNSSEC keys? (Specify ONLY the command without any path or parameters.)

See Below Explanation:

http://ripe60.ripe.net/pres entations/Damas-BiND_9.7_-_DNSSE_for_humans.pdf

Answer : A

http://ripe60.ripe.net/pres entations/Damas-BiND_9.7_-_DNSSE_for_humans.pdf

Question 6

Which of the following components are part of FreeIPA? (Choose THREE correct answers.)

ADHCP Server

BKerberos KDC

CIntrusion Detection System

DPublic Key Infrastructure

EDirectory Server

Answer : B, D, E

Question 7

Which of the following types can be specified within the Linux Audit system? (Choose THREE correct answers)

AControl rules

BFile system rules

CNetwork connection rules

DConsole rules

ESystem call rules

Answer : A, B, E

LPIC-3 Exam 303: Security 303-200 Exam Questions