303-300 Practice Exams and Training Solutions for Certifications [Q41-Q62]

Rate this post

303-300 Practice Exams and Training Solutions for Certifications

Dumps Free Test Engine Player Verified Answers

Lpi 303-300 exam is designed to test the candidate’s knowledge and skills in securing Linux systems. 303-300 exam covers a wide range of topics, including security concepts, network security, system security, cryptography, and access control. 303-300 exam is designed to test the candidate’s ability to secure Linux systems in a variety of environments, including corporate networks, government networks, and cloud-based environments.

QUESTION 41
Which command revokes ACL-based write access for groups and named users on the file afile?

setfacl -x group: * : rx, user:*: rx afile

setfacl -x mask: : rx afile

setfacl ~m mask: : rx afile

setfacl ~m group: * : rx, user :*: rx afile

QUESTION 42
Which of the following commands adds a new user usera to FreeIPA?

useradd usera –directory ipa –gecos “User A”

idap- useradd -H Idaps://ipa-server CN=UserA –attribs “Firstname: User: Lastname: A”

ipa-admin create user –account usera –fname User –iname A

ipa user-add usera –first User –last A

ipa-user- add usera –name “User A”

QUESTION 43
Which option in an Apache HTTPD configuration file enables OCSP stapling?
(Specify ONLY the option name without any values or parameters.)
Solution: httpd-ssl.conf
Determine whether the given solution is correct?

Correct

Incorrect

QUESTION 44
What command is used to update NVTs from the OpenVAS NVT feed?
(Specify ONLY the command without any path or parameters).
Solution: openvas-nvt-sync
Determine whether the given solution is correct?

Correct

Incorrect

QUESTION 45
Which of the following commands adds users using SSSD’s local service?

sss_adduser

sss_useradd

sss_add

sss-addlocaluser

sss_local_adduser

QUESTION 46
What is the purpose of DNS over TLS and DNS over HTTPS?

To improve DNS performance

To provide secure communication between DNS clients and servers

To reduce DNS query times

To allow DNS servers to communicate securely with each other

QUESTION 47
Which of the following sections are allowed within the Kerberos configuration file krb5.conf?
(Choose THREE correct answers.)

[plugins]

[crypto]

[domain]

[capaths]

[realms]

QUESTION 48
Which file is used to configure AIDE?

/etc/rkhunter.conf

/etc/audit/auditd.conf

/etc/aide/aide.conf

/etc/maldet.conf

QUESTION 49
Which of the following types can be specified within the Linux Audit system?
(Choose THREE correct answers.)

Control rules

File system rules

Network connection rules

Console rules

System call rules

QUESTION 50
What is a rogue access point?

A legitimate access point that is incorrectly configured

An unauthorized access point that is set up to look like a legitimate one

A type of virus

A type of phishing scam

QUESTION 51
What is a rootkit?

A type of virus

A type of malware that disguises itself as legitimate software

A type of denial-of-service attack

A type of phishing scam

QUESTION 52
Which of the following resources of a shell and its child processes can be controlled by the Bash build- in command ulimit?
(Choose THREE correct answers.)

The maximum size of written files

The maximum number of open file descriptors

The maximum number of newly created files

The maximum number of environment variables

The maximum number of user processes

QUESTION 53
Which of the following DNS record types can the command dnssec-signzone add to a zone?
(Choose THREE correct answers.)

ASIG

NSEC

NSEC3

NSSIG

RRSIG

QUESTION 54
What is a symmetric key?

A key used for encryption and decryption that is the same

A key used for encryption that is different from the key used for decryption

A key used for decryption that is different from the key used for encryption

A key used for both encryption and decryption that is generated randomly

QUESTION 55
What is social engineering?

A type of virus

A type of malware that disguises itself as legitimate software

A type of denial-of-service attack

A type of attack that exploits human psychology to gain access to sensitive information

QUESTION 56
What effect does the following command have on TCP packets?
iptables- A INPUT d 10.142.232.1 p tcp –dport 20:21 j ACCEPT

Forward all TCP traffic not on port 20 or 21 to the IP address 10.142.232.1

Drop all TCP traffic coming from 10.142.232.1 destined for port 20 or 21.

Accept only TCP traffic from 10.142.232.1 destined for port 20 or 21.

Accept all TCP traffic on port 20 and 21 for the IP address 10.142.232.1

QUESTION 57
Which of the following stanzas is a valid client configuration for FreeRADIUS?

client private-network-1 {
ipaddr = 192.0.2.0/24
password = testing123-1
}

client private-network-1 {
ip = 192.0.2.0/24
password = testing123-1
}

client private-network-1 {
ip = 192.0.2.0/24
passwd = testing123-1
}

client private-network-1 {
ip = 192.0.2.0/24
secret = testing123-1
}

client private-network-1 {
ipaddr = 192.0.2.0/24
secret = testing123-1
}

QUESTION 58
An X509 certificate contains the following information:
X509v3 Basic Constraints: critical CA:TRUE, pathlen:0
Which of the following statements are true regarding the certificate?
(Choose THREE correct answers.)

This certificate belongs to a certification authority.

This certificate may be used to sign certificates of subordinate certification authorities.

This certificate may never be used to sign any other certificates.

This certificate may be used to sign certificates that are not also a certification authority.

This certificate will not be accepted by programs that do not understand the listed extension.

QUESTION 59
How can host scans be automated on a Linux system?

Using OpenSCAP

Using chkrootkit

Using Linux Audit system

Using cron

QUESTION 60
Which of the following commands displays all ebtable rules contained in the table filter including their packet and byte counters?

ebtables -t nat -L -v

ebtables -L -t filter -Lv

ebtables -t filter -L –Lc

ebtables -t filter -Ln -L

ebtables -L -Lc -t filter

QUESTION 61
Which of the following is an example of an HID tool?

Antivirus software

Firewall

Security information and event management (SIEM) system

Intrusion prevention system (IPS)

QUESTION 62
What is the purpose of the program snort-stat?

It displays statistics from the running Snort process.

It returns the status of all configured network devices.

It reports whether the Snort process is still running and processing packets.

It displays the status of all Snort processes.

It reads syslog files containing Snort information and generates port scan statistics.

Loading …

Q&As with Explanations Verified & Correct Answers: https://www.pdf4test.com/303-300-dump-torrent.html

Free certification test prep

303-300 Practice Exams and Training Solutions for Certifications [Q41-Q62]

Leave a Reply Cancel reply