LPI 303-200 Exam Questions Instant Access

Question 1

Which of the following access control models is established by using SELinux?

ASecurity Access Control (SAC)

BGroup Access Control (GAC)

CUser Access Control (UAC)

DDiscretionary Access Control (DAC)

EMandatory Access Control (MAC)

Answer : E

Question 2

Which of the following database names can be used within a Name Service Switch (NSS) configuration file? (Choose THREE correct answers).

Ahost

Bshadow

Cservice

Dpasswd

Egroup

Answer : A, C, E

Question 3

Which of the following information, within a DNSSEC- signed zone, is signed by the key signing key?

AThe non-DNSSEC records like A, AAAA or MX

BThe zone signing key of the zone.

CThe RRSIG records of the zone.

DThe NSEC or NSEC3 records of the zone.

EThe DS records pointing to the zone

Answer : B

Question 4

Which of the following commands adds users using SSSD's local service?

Asss_adduser

Bsss_useradd

Csss_add

Dsss-addlocaluser

Esss_local_adduser

Answer : B

Question 5

Which command revokes ACL-based write access for groups and named users on the file afile?

AsetfacI -x group: * : rx, user:*: rx afile

Bsetfacl -x mask: : rx afile

Csetfacl ~m mask: : rx afile

Dsetfacl ~m group: * : rx, user:*: rx afile

Answer : C

Question 6

Which of the following stanzas is a valid client configuration for FreeRADIUS?

Aclient pnvate-network-1 { ipaddr = 192 0 2.0/24 password = testing123-1 }

Bclient private-network-1 { ip= 192.0.2.0/24 password-testing123-1 }

Cclient private-network-1 { ip = 192 0 2.0/24 passwd = testing123-1 }

Dclient private-network-1 { ip = 192 0.2.0/24 secret = testingl23-1 }

Eclient private-network-1 { ipaddr = 192 0 2.0/24 secret = testing 123-1}

Answer : E

Question 7

What effect does the configuration SSLStrictSNIVHostCheck on have on an Apache HTTPD virtual host?

AThe clients connecting to the virtual host must provide a client certificate that was issued by the same CA that issued the server's certificate.

BThe virtual host is served only to clients that support SNI.

CAll of the names of the virtual host must be within the same DNS zone.

DThe virtual host is used as a fallback default for all clients that do not support SNI.

EDespite its configuration, the virtual host is served only on the common name and Subject Alternative Names of the server certificates.

Answer : B

LPIC-3 Exam 303: Security 303-200 Exam Questions