LPI 303-200 Exam Questions Instant Access

Question 1

Given a proper network and name resolution setup, which of the following commands establishes a trust between a FreelPA domain and an Active Directory domain?

Aipa trust-add --type ad addom --admin Administrator --password

Bipa-ad -add-trust --account ADDOM\Administrator--query-password

Cnet ad ipajoin addom -U Administrator -p

Dtrustmanager add -_domain ad: //addom --user Administrator -w

Eipa ad join addom -U Administrator -w

Answer : A

Question 2

Which of the following statements is used in a parameter file for setkey in order to create a new SPD entry?

Aspd

Baddspd

Cnewspd

Dspdnew

Espdadd

Answer : E

Question 3

Which of the following openssl commands generates a certificate signing request (CSR) using the already existing private key contained in the file private/keypair.pem?

Aopenssl req -key private/keypair.pem -out req/csr.pem

Bopenssl req - new -key private/keypair.pem -out req/csr.pem

Copenssl gencsr -key private/keypair.pem -out req/csr.pem

Dopenssl gencsr -new- key private/keypair.pem -out req/csr.pem

Answer : B

Question 4

Which of the following keywords are built-in chairs for the iptables nat table? (Choose THREE correct answers)

AOUTPUT

BMASQUERADE

CPROCESSING

DPOSTROUTING

EPREROUTING

Answer : A, D, E

Question 5

What command is used to update NVTs from the OpenVAS NVT feed? (Specify ONLY the command without any path or parameters).

See Below Explanation:

http://www.openvas.org/openvas-nvt-feed.html

Answer : A

http://www.openvas.org/openvas-nvt-feed.html

Question 6

What is the purpose of the program snort-stat?

AIt displays statistics from the running Snort process.

BIt returns the status of all configured network devices.

CIt reports whether the Snort process is still running and processing packets.

DIt displays the status of all Snort processes.

EIt reads syslog files containing Snort information and generates port scan statistics.

Answer : E

Question 7

What effect does the configuration SSLStrictSNIVHostCheck on have on an Apache HTTPD virtual host?

AThe clients connecting to the virtual host must provide a client certificate that was issued by the same CA that issued the server's certificate.

BThe virtual host is served only to clients that support SNI.

CAll of the names of the virtual host must be within the same DNS zone.

DThe virtual host is used as a fallback default for all clients that do not support SNI.

EDespite its configuration, the virtual host is served only on the common name and Subject Alternative Names of the server certificates.

Answer : B

LPIC-3 Exam 303: Security 303-200 Exam Questions