[May 24, 2022] 303-200 Dumps PDF and Test Engine Exam Questions - PrepAwayPDF [Q24-Q44]

4/5 - (1 vote)

[May 24, 2022] 303-200 Dumps PDF and Test Engine Exam Questions – PrepAwayPDF

Verified 303-200 exam dumps Q&As with Correct 60 Questions and Answers

Career Prospects

With the LPIC-3 certification in enterprise security, one can apply for a wide range of roles. These include system administrator, Linux systems engineer, and cyberspace operations instructor. Also, the positions of vulnerability analyst and cybersecurity analyst become available. However, this diversity is not the only benefit the certification brings. It also allows the professional to earn about $85k per annum, according to the latest survey conducted by PayScale, and this is just an average mark.

NO.24 Which of the following keywords are built-in chairs for the iptables nat table? (Choose THREE correct answers.)

OUTPUT

MASQUERADE

PROCESSING

POSTROUTING

PREROUTING

NO.25 Which of the following resources of a shell and its child processes can be controlled by the Bash build-in command ulimit? (Choose THREE correct answers.)

The maximum size of written files

The maximum number of open file descriptors

The maximum number of newly created files

The maximum number of environment variables

The maximum number of user processes

NO.26 CORRECT TEXT
Which option in an Apache HTTPD configuration file enables OCSP stapling? (Specify ONLY the option name without any values or parameters.)

NO.27 Which of the following commands defines an audit rule that monitors read and write operations to the file/ etc/firewall/rules and associates the rule with the name firewall?

auditctl -N firewall -r r: /etc/firewall/rules -r w:
etc/firewall/rules

auditctl -A -f /etc/firewall/rules -o r -o w -l firewall

auditctl -w /etc/firewall/rules -p rw -k firewall

auditctl –read /etc/firewall/rules –write /etc/firewall/rules
–label firewall

echo “n: firewall r:/etc/firewall/rules: w:/
etc/firewall/rules:” | auditctl ~

NO.28 Which of the following stanzas is a valid client configuration for FreeRADIUS?

client private-network-1 {
ipaddr = 192.0.2.0/24
password = testing123-1
}

client private-network-1 {
ip = 192.0.2.0/24
password = testing123-1
}

client private-network-1 {
ip = 192.0.2.0/24
passwd = testing123-1
}

client private-network-1 {
ip = 192.0.2.0/24
secret = testing123-1
}

client private-network-1 {
ipaddr = 192.0.2.0/24
secret = testing123-1
}

NO.29 Which of the following commands disables the automatic password expiry for the user usera?

chage –maxdays none usera

chage –maxdays 99 usera

chage –maxdays -1 usera

chage –lastday none usera

chage –lastday 0 usera

NO.30 SIMULATION
Which directive is used in an OpenVPN server configuration in order to send network configuration information to the client? (Specify ONLY the option name without any values or parameters.)

NO.31 Which of the following statements is true regarding eCryptfs?

For every file in an eCryptfs directory there exists a corresponding file that contains the encrypted content.

The content of all files in an eCryptfs directory is stored in an archive file similar to a tar file with an additional index to improve performance.

After unmounting an eCryptfs directory, the directory hierarchy and the original file names are still visible, although, it is not possible to view the contents of the files.

When a user changes his login password, the contents of his eCryptfs home directory has to be re- encrypted using his new login password.

eCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux user.

NO.32 Which of the following statements are true regarding the certificate? (Choose THREE correct answers.)

This certificate belongs to a certification authority.

This certificate may be used to sign certificates of subordinate certification authorities.

This certificate may never be used to sign any other certificates

This certificate may be used to sign certificates that are not also a certification authority

This certificate will not be accepted by programs that do not understand the listed extension

NO.33 SIMULATION
Which PAM module checks new passwords against dictionary words and enforces complexity? (Specially the module name only without any path.)

NO.34 Which of the following practices are important for the security of private keys? (Choose TWO correct answers.)

Private keys should be created on the systems where they will be used and should never leave them.

Private keys should be uploaded to public key servers.

Private keys should be included in X509 certificates.

Private keys should have a sufficient length for the algorithm used for key generation.

Private keys should always be stored as plain text files without any encryption.

NO.35 Which of the following authentication methods was added to NFS in version 4?

Kerberos authentication

SSH hostkey authentication

Winbind authentication

SSL certificate authentication

NO.36 Which of the following commands displays all ebtable rules contained in the table filter including their packet and byte counters?

ebtables -t nat -L -v

ebtables-L-t filter -Lv

ebtables-t filter-L-Lc

ebtables -t filter -Ln -L

ebtables-L -Lc-t filter

NO.37 Which of the following commands makes the contents of the eCryptfs encrypted directory /Private available to the user?

ecryptfsclient

ecryptfs.mount

ecryptfs-mount-private

decryptfs

ecryptfs-manage-di rectory

NO.38 Which DNS label points to the DANE information used to secure HTTPS connections to https://www.example.com/?

example.com

dane.www.example.com

soa.example com

www.example.com

_443_tcp.www example.com

NO.39 How are SELinux permissions related to standard Linux permissions? (Choose TWO correct answers.)

SELinux permissions override standard Linux permissions.

Standard Linux permissions override SELinux permissions.

SELinux permissions are verified before standard Linux permissions.

SELinux permissions are verified after standard Linux permissions.

NO.40 Which of the following parameters to openssl s_client specifies the host name to use for TLS Server Name Indication?

-tlsname

-servername

-sniname

-vhost

-host

NO.41 What is the purpose of IP sets?

They group together IP addresses that are assigned to the same network interfaces.

They group together IP addresses and networks that can be referenced by the network routing table.

They group together IP addresses that can be referenced by netfilter rules.

They group together IP and MAC addresses used by the neighbors on the local network.

They group together IP addresses and user names that can be referenced from /etc/hosts allow and /etc/hosts deny

NO.42 SIMULATION
Which command installs and configures a new FreeIPA server, including all sub-components, and creates a new FreeIPA domain? (Specially ONLY the command without any path or parameters).

NO.43 Which of the following practices are important for the security of private keys? (Choose TWO correct answers.)

Private keys should be created on the systems where they will be used and should never leave them.

Private keys should be uploaded to public key servers.

Private keys should be included in X509 certificates.

Private keys should have a sufficient length for the algorithm used for key generation.

Private keys should always be stored as plain text files without any encryption.

NO.44 Which command revokes ACL-based write access for groups and named users on the file afile?

setfacl -x group: * : rx, user:*: rx afile

setfacl -x mask: : rx afile

setfacl ~m mask: : rx afile

setfacl ~m group: * : rx, user :*: rx afile

Does any eligibility for LPI 303-200 Certification Exam

Prerequisites of this Exam is the candidate must have an active LPIC-2 certification to receive the LPIC-3 certification.

Lpi 303-200 Test Engine PDF – All Free Dumps: https://www.prepawaypdf.com/Lpi/303-200-practice-exam-dumps.html

[May 24, 2022] 303-200 Dumps PDF and Test Engine Exam Questions – PrepAwayPDF [Q24-Q44]

Career Prospects

Does any eligibility for LPI 303-200 Certification Exam

admin

Leave a Reply Cancel reply

Career Prospects

Does any eligibility for LPI 303-200 Certification Exam

Related posts:

admin

You might also like

Leave a Reply Cancel reply