303-200: LPIC-3 Exam 303: Security, version 2.0 (303-200) Free Practice Test

Question 1

Which of the following practices are important for the security of private keys? (Choose TWO correct answers.)

A. Private keys should be included in X509 certificates.

B. Private keys should have a sufficient length for the algorithm used for key generation.

C. Private keys should be created on the systems where they will be used and should never leave them.

D. Private keys should always be stored as plain text files without any encryption.

E. private keys should be uploaded to public key servers.

Correct Answer: A,B

Question 2

Which of the following resources of a shell and its child processes can be controlled by the Bash build-in command ulimit? (Choose THREE correct answers.)

A. The maximum number of newly created files

B. The maximum size of written files

C. The maximum number of open file descriptors

D. The maximum number of user processes

E. The maximum number of environment variables

Correct Answer: B,C,D

Question 3

Which of the following sections are allowed within the Kerberos configuration file krb5.conf? (Choose THREE correct answers.)

A. [capaths]

B. [crypto]

C. [domain]

D. [realms]

E. [plugins]

Correct Answer: A,D,E

Question 4

Linux Extended File Attributes are organized in namespaces. Which of the following names correspond to existing attribute namespaces? (Choose THREE correct answers.)

A. trusted

B. owner

C. user

D. system

E. default

Correct Answer: A,C,D

Question 5

Which of the following commands changes the source IP address to 192.0.2.11 for all IPv4 packets which go through the network interface eth0?

A. iptables ~t nat -A PREROUT1NG -\ eth0 -j SNAT -to-source 192.0.2.11

B. iptables -t mangle -A POSTROUTING -0 eth0 -j SNAT -to-source 192.0.2.11

C. iptables ~t nat -A POSTROUTING ~o eth0 -j SNAT -to-source 192.0.2.11

D. iptables -t nat -A POSTROUTING H eth0 -j DNAT -to-source 192.0.2.11

E. iptables -t mangle -A POSTROUTING -i eth0 -j SNAT -to-source 192.0.2.11

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

CORRECT TEXT
Which PAM module checks new passwords against dictionary words and enforces complexity? (Specially the module name only without any path.)

Correct Answer:

pam_cracklib
http;//www-deer-run.com/~hal/sysadmin/pam_cracklib.html

Welcome to TestSimulate

Lpi 303-200: LPIC-3 Exam 303: Security, version 2.0 (303-200) Free Practice Test