LPI Level 3 Exam (LPI 303: Security) (117-303) Free Practice Test

Question 1

Which of the following is NOT included in a Snort rule header?

A. source port

B. action

C. protocol

D. source IP address

E. packet byte offset

Correct Answer: E

Question 2

In which of the following scenarios MUST an administrator use ethernet bridging instead of routing when configuring an OpenVPN site? (Select TWO correct answers)

A. It will be necessary to use an MTU setting other than the default.

B. The IPX protocol is required.

C. The IPv4 protocol is required.

D. Some OpenVPN clients will be installed on laptops and must be able to connect from different locations.

E. NetBIOS traffic must be able to traverse the VPN without implementing a WINS server.

Correct Answer: B,E

Question 3

CORRECT TEXT
What is the default UDP port for OpenVPN traffic?

Correct Answer:

1194

Question 4

Which option is required to syslogd in order for it to accept remote log messages?

A. r

B. s

C. l

D. remote

Correct Answer: A

Question 5

What is the purpose of snort inline?

A. To have iptables use snort rules to filter packets.

B. To run the snort daemon as a nonroot user.

C. To run the snort daemon without forking child processes.

D. To have snort log suspicious activity only, without performing any actions

Correct Answer: A

Question 6

The local system administrator has created a configuration entry for apache version 2 that isn't working. What is wrong with the following configuration?
<Location /members>
AuthName Members
AuthType Basic
AuthUserFile /www/passwd
</Location>

A. The AuthUserFile must be in the apache configuration directory.

B. The directive require validuser is missing.

C. Basic Authentication has been removed from Apache 2.x.

D. The format of the password file is not specified.

Correct Answer: B

Question 7

What does the following iptables rule accomplish:
iptables A INPUT s !127.0.0.0/8 p tcp dport 111 j DROP

A. Drops all packets destined for port 111 unless they are from the local machine.

B. Drops all packets originating from the local machine unless they are destined for port 111.

C. Drops all packets from the LAN destined for port 111.

D. Drops all packets destined for port 111 which originate from the local machine.

Correct Answer: A

Question 8

Under which path is the selinux pseudofilesystem found?

A. /proc/selinux

B. /sys/selinux

C. /selinux

D. /dev/selinux

E. /var/selinux

Correct Answer: C

Welcome to TestSimulate

Lpi LPI Level 3 Exam (LPI 303: Security) (117-303) Free Practice Test