2023 Free Lpi 303-200 Exam Files Downloaded Instantly [Q34-Q51] : Top Exam Collection : http://blog.topexamcollection.com

NEW QUESTION 34
CORRECT TEXT
Which command installs and configures a new FreelPA server, including all subcomponents, and creates a new FreelPA domain? (Specially ONLY the command without any path or parameters).

NEW QUESTION 35
CORRECT TEXT
What option of mount.cifs specifies the user that appears as the local owner of the files of a mounted CIFS share when the server does not provide ownership information? (Specify ONLY the option name without any values or parameters.)

NEW QUESTION 36
Which of the following types can be specified within the Linux Audit system? (Choose THREE correct answers.)

Control rules

File system rules

Network connection rules

Console rules

System call rules

NEW QUESTION 37
Given a proper network and name resolution setup, which of the following commands establishes a trust between a FreelPA domain and an Active Directory domain?

ipa trust-add –type ad addom –admin Administrator –password

ipa-ad -add-trust –account ADDOMAdministrator–query-password

net ad ipajoin addom -U Administrator -p

trustmanager add -_domain ad: //addom –user Administrator -w

ipa ad join addom -U Administrator -w

NEW QUESTION 38
SIMULATION
Which directive is used in an OpenVPN server configuration in order to send network configuration information to the client? (Specify ONLY the option name without any values or parameters.)

NEW QUESTION 39
Which of the following statements is true regarding eCryptfs?

For every file in an eCryptfs directory there exists a corresponding file that contains the encrypted content.

The content of all files in an eCryptfs directory is stored in an archive file similar to a tar file with an additional index to improve performance.

After unmounting an eCryptfs directory, the directory hierarchy and the original file names are still visible, although, it is not possible to view the contents of the files.

When a user changes his login password, the contents of his eCryptfs home directory has to be re- encrypted using his new login password.

eCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux user.

NEW QUESTION 40
Which of the following components are part of FreeIPA? (Choose THREE correct answers.)

DHCP Server

Kerberos KDC

Intrusion Detection System

Public Key Infrastructure

Directory Server

NEW QUESTION 41
Linux Extended File Attributes are organized in namespaces. Which of the following names correspond to existing attribute namespaces? (Choose THREE correct answers.)

default

system

owner

trusted

user

NEW QUESTION 42
Which of the following are differences between AppArmor and SELinux? (Choose TWO correct answers).

AppArmor is implemented in user space only. SELinux is a Linux Kernel Module.

AppArmor is less complex and easier to configure than SELinux.

AppArmor neither requires nor allows any specific configuration. SELinux must always be manually configured.

SELinux stores information in extended file attributes. AppArmor does not maintain file specific information and states.

The SELinux configuration is loaded at boot time and cannot be changed later on. AppArmor provides user space tools to change its behavior.

NEW QUESTION 43
Which of the following database names can be used within a Name Service Switch (NSS) configuration file? (Choose THREE correct answers).

host

shadow

service

passwd

group

NEW QUESTION 44
SIMULATION
Which option in an Apache HTTPD configuration file enables OCSP stapling? (Specify ONLY the option name without any values or parameters.)

NEW QUESTION 45
How does TSIG authenticate name servers in order to perform secured zone transfers?

Both servers mutually verify their X509 certificates.

Both servers use a secret key that is shared between the servers.

Both servers verify appropriate DANE records for the labels of the NS records used to delegate the transferred zone.

Both servers use DNSSEC to mutually verify that they are authoritative for the transferred zone.

NEW QUESTION 46
What is the purpose of the program snort-stat?

It displays statistics from the running Snort process.

It returns the status of all configured network devices.

It reports whether the Snort process is still running and processing packets.

It displays the status of all Snort processes.

It reads syslog files containing Snort information and generates port scan statistics.

NEW QUESTION 47
Given a proper network and name resolution setup, which of the following commands establishes a trust between a FreeIPA domain and an Active Directory domain?

ipa trust-add –type ad addom –admin Administrator –password

ipa-ad -add-trust –account ADDOMAdministrator–query-password

net ad ipajoin addom -U Administrator -p

trustmanager add –domain ad: //addom –user Administrator -w

ipa ad join addom -U Administrator -w

NEW QUESTION 48
Which of the following openssl commands generates a certificate signing request (CSR) using the already existing private key contained in the file private/keypair.pem?

openssl req -key private/keypair.pem -out req/csr.pem

openssl req – new -key private/keypair.pem -out req/csr.pem

openssl gencsr -key private/keypair.pem -out req/csr.pem

openssl gencsr -new- key private/keypair.pem -out req/csr.pem

NEW QUESTION 49
Which of the following types can be specified within the Linux Audit system? (Choose THREE correct answers)

Control rules

File system rules

Network connection rules

Console rules

System call rules

NEW QUESTION 50
Which of the following practices are important for the security of private keys? (Choose TWO correct answers.)

Private keys should be created on the systems where they will be used and should never leave them.

Private keys should be uploaded to public key servers.

Private keys should be included in X509 certificates.

Private keys should have a sufficient length for the algorithm used for key generation.

Private keys should always be stored as plain text files without any encryption.

NEW QUESTION 51
Which of the following commands defines an audit rule that monitors read and write operations to the file/ etc/firewall/rules and associates the rule with the name firewall?

auditctl -N firewall -r r: /etc/firewall/rules -r w: etc/firewall/rules

auditctl -A -f /etc/firewall/rules -o r- o w -l firewall

auditctl -w /etc/firewall/rules -p rw -k firewall

auditctl -_read /etc/firewall/rules -_write /etc/firewall/rules –label firewall

echo “n: firewall r:/etc/firewall/rules: w:/ etc/firewall/rules:” | auditctl ~