This page was exported from Top Exam Collection [ http://blog.topexamcollection.com ] Export date:Sat Apr 5 3:47:56 2025 / +0000 GMT ___________________________________________________ Title: 2023 Free Lpi 303-200 Exam Files Downloaded Instantly [Q34-Q51] --------------------------------------------------- 2023 Free Lpi 303-200 Exam Files Downloaded Instantly Pass Lpi 303-200 exam Dumps 100 Pass Guarantee With Latest Demo The Lpi 303-200 exam is an advanced-level certification exam that focuses on Linux security. It is intended for experienced Linux professionals who already hold LPIC-2 certification and want to demonstrate their expertise in securing Linux-based systems. The exam covers a wide range of topics related to Linux security, and it is recognized globally as a respected certification in the industry.   NEW QUESTION 34CORRECT TEXTWhich command installs and configures a new FreelPA server, including all subcomponents, and creates a new FreelPA domain? (Specially ONLY the command without any path or parameters). ipa-server-installhttps://www.freeipa.org/images/2/2b/lnstallation_and_Deployment.Guidep.pdfNEW QUESTION 35CORRECT TEXTWhat option of mount.cifs specifies the user that appears as the local owner of the files of a mounted CIFS share when the server does not provide ownership information? (Specify ONLY the option name without any values or parameters.) uld=arghttp://linux.die.net/man/8/mount.cifsNEW QUESTION 36Which of the following types can be specified within the Linux Audit system? (Choose THREE correct answers.)  Control rules  File system rules  Network connection rules  Console rules  System call rules Explanation/Reference:https://www.digitalocean.com/community/tutorials/how-to-write-custom-system-audit-rules-on-centos-7NEW QUESTION 37Given a proper network and name resolution setup, which of the following commands establishes a trust between a FreelPA domain and an Active Directory domain?  ipa trust-add –type ad addom –admin Administrator –password  ipa-ad -add-trust –account ADDOMAdministrator–query-password  net ad ipajoin addom -U Administrator -p  trustmanager add -_domain ad: //addom –user Administrator -w  ipa ad join addom -U Administrator -w NEW QUESTION 38SIMULATIONWhich directive is used in an OpenVPN server configuration in order to send network configuration information to the client? (Specify ONLY the option name without any values or parameters.) pushExplanation/Reference:https://community.openvpn.net/openvpn/wiki/RoutedLansNEW QUESTION 39Which of the following statements is true regarding eCryptfs?  For every file in an eCryptfs directory there exists a corresponding file that contains the encrypted content.  The content of all files in an eCryptfs directory is stored in an archive file similar to a tar file with an additional index to improve performance.  After unmounting an eCryptfs directory, the directory hierarchy and the original file names are still visible, although, it is not possible to view the contents of the files.  When a user changes his login password, the contents of his eCryptfs home directory has to be re- encrypted using his new login password.  eCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux user. Explanation/Reference:https://help.ubuntu.com/lts/serverguide/ecryptfs.htmlNEW QUESTION 40Which of the following components are part of FreeIPA? (Choose THREE correct answers.)  DHCP Server  Kerberos KDC  Intrusion Detection System  Public Key Infrastructure  Directory Server NEW QUESTION 41Linux Extended File Attributes are organized in namespaces. Which of the following names correspond to existing attribute namespaces? (Choose THREE correct answers.)  default  system  owner  trusted  user NEW QUESTION 42Which of the following are differences between AppArmor and SELinux? (Choose TWO correct answers).  AppArmor is implemented in user space only. SELinux is a Linux Kernel Module.  AppArmor is less complex and easier to configure than SELinux.  AppArmor neither requires nor allows any specific configuration. SELinux must always be manually configured.  SELinux stores information in extended file attributes. AppArmor does not maintain file specific information and states.  The SELinux configuration is loaded at boot time and cannot be changed later on. AppArmor provides user space tools to change its behavior. Explanation/Reference:http://elinux.org/images/3/39/SecureOS_nakamura.pdfNEW QUESTION 43Which of the following database names can be used within a Name Service Switch (NSS) configuration file? (Choose THREE correct answers).  host  shadow  service  passwd  group Explanation/Reference:https://docs.oracle.com/cd/E26502_01/html/E29002/a12swit-89620.html#a12swit-84565NEW QUESTION 44SIMULATIONWhich option in an Apache HTTPD configuration file enables OCSP stapling? (Specify ONLY the option name without any values or parameters.) httpd-ssl.confExplanation/Reference:https://wiki.apache.org/httpd/OCSPStaplingNEW QUESTION 45How does TSIG authenticate name servers in order to perform secured zone transfers?  Both servers mutually verify their X509 certificates.  Both servers use a secret key that is shared between the servers.  Both servers verify appropriate DANE records for the labels of the NS records used to delegate the transferred zone.  Both servers use DNSSEC to mutually verify that they are authoritative for the transferred zone. NEW QUESTION 46What is the purpose of the program snort-stat?  It displays statistics from the running Snort process.  It returns the status of all configured network devices.  It reports whether the Snort process is still running and processing packets.  It displays the status of all Snort processes.  It reads syslog files containing Snort information and generates port scan statistics. NEW QUESTION 47Given a proper network and name resolution setup, which of the following commands establishes a trust between a FreeIPA domain and an Active Directory domain?  ipa trust-add –type ad addom –admin Administrator –password  ipa-ad -add-trust –account ADDOMAdministrator–query-password  net ad ipajoin addom -U Administrator -p  trustmanager add –domain ad: //addom –user Administrator -w  ipa ad join addom -U Administrator -w Explanation/Reference:https://www.freeipa.org/page/Active_Directory_trust_setupNEW QUESTION 48Which of the following openssl commands generates a certificate signing request (CSR) using the already existing private key contained in the file private/keypair.pem?  openssl req -key private/keypair.pem -out req/csr.pem  openssl req – new -key private/keypair.pem -out req/csr.pem  openssl gencsr -key private/keypair.pem -out req/csr.pem  openssl gencsr -new- key private/keypair.pem -out req/csr.pem Explanation/Reference:https://www.openssl.org/docs/manmaster/apps/req.html#EXAMPLESNEW QUESTION 49Which of the following types can be specified within the Linux Audit system? (Choose THREE correct answers)  Control rules  File system rules  Network connection rules  Console rules  System call rules NEW QUESTION 50Which of the following practices are important for the security of private keys? (Choose TWO correct answers.)  Private keys should be created on the systems where they will be used and should never leave them.  Private keys should be uploaded to public key servers.  Private keys should be included in X509 certificates.  Private keys should have a sufficient length for the algorithm used for key generation.  Private keys should always be stored as plain text files without any encryption. Explanation/Reference:https://www.digitalocean.com/community/tutorials/openssl-essentials-working-with-ssl-certificates-private- keys-and-csrsNEW QUESTION 51Which of the following commands defines an audit rule that monitors read and write operations to the file/ etc/firewall/rules and associates the rule with the name firewall?  auditctl -N firewall -r r: /etc/firewall/rules -r w: etc/firewall/rules  auditctl -A -f /etc/firewall/rules -o r- o w -l firewall  auditctl -w /etc/firewall/rules -p rw -k firewall  auditctl -_read /etc/firewall/rules -_write /etc/firewall/rules –label firewall  echo “n: firewall r:/etc/firewall/rules: w:/ etc/firewall/rules:” | auditctl ~  Loading … Read Online 303-200 Test Practice Test Questions Exam Dumps: https://www.topexamcollection.com/303-200-vce-collection.html --------------------------------------------------- Images: https://blog.topexamcollection.com/wp-content/plugins/watu/loading.gif https://blog.topexamcollection.com/wp-content/plugins/watu/loading.gif --------------------------------------------------- --------------------------------------------------- Post date: 2023-06-07 16:35:18 Post date GMT: 2023-06-07 16:35:18 Post modified date: 2023-06-07 16:35:18 Post modified date GMT: 2023-06-07 16:35:18