2023 Free Lpi 303-200 Exam Files Downloaded Instantly [Q34-Q51]

2023 免费下载 Lpi 303-200 考试文件 [Q34-Q51]

6 月 7, 2023 管理 0 条评论

4.5/5 - (4 选票)

2023 Free Lpi 303-200 Exam Files Downloaded Instantly

Pass Lpi 303-200 exam Dumps 100 Pass Guarantee With Latest Demo

The Lpi 303-200 exam is an advanced-level certification exam that focuses on Linux security. It is intended for experienced Linux professionals who already hold LPIC-2 certification and want to demonstrate their expertise in securing Linux-based systems. The exam covers a wide range of topics related to Linux security, and it is recognized globally as a respected certification in the industry.

新问题 34
正确文本
Which command installs and configures a new FreelPA server, including all subcomponents, and creates a new FreelPA domain? (Specially ONLY the command without any path or parameters).

ipa-server-install
https://www.freeipa.org/images/2/2b/lnstallation_and_Deployment.Guidep.pdf

新问题 35
正确文本
What option of mount.cifs specifies the user that appears as the local owner of the files of a mounted CIFS share when the server does not provide ownership information? (Specify ONLY the option name without any values or parameters.)

uld=arg
http://linux.die.net/man/8/mount.cifs

新问题 36
Which of the following types can be specified within the Linux Audit system? (Choose THREE correct answers.)

Control rules

File system rules

Network connection rules

Console rules

System call rules

说明/参考：
https://www.digitalocean.com/community/tutorials/how-to-write-custom-system-audit-rules-on-centos-7

新问题 37
Given a proper network and name resolution setup, which of the following commands establishes a trust between a FreelPA domain and an Active Directory domain?

ipa trust-add –type ad addom –admin Administrator –password

ipa-ad -add-trust –account ADDOMAdministrator–query-password

net ad ipajoin addom -U Administrator -p

trustmanager add -_domain ad: //addom –user Administrator -w

ipa ad join addom -U Administrator -w

新问题 38
SIMULATION
Which directive is used in an OpenVPN server configuration in order to send network configuration information to the client? (Specify ONLY the option name without any values or parameters.)

push
说明/参考：
https://community.openvpn.net/openvpn/wiki/RoutedLans

新问题 39
Which of the following statements is true regarding eCryptfs?

For every file in an eCryptfs directory there exists a corresponding file that contains the encrypted content.

The content of all files in an eCryptfs directory is stored in an archive file similar to a tar file with an additional index to improve performance.

After unmounting an eCryptfs directory, the directory hierarchy and the original file names are still visible, although, it is not possible to view the contents of the files.

When a user changes his login password, the contents of his eCryptfs home directory has to be re- encrypted using his new login password.

eCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux user.

说明/参考：
https://help.ubuntu.com/lts/serverguide/ecryptfs.html

新问题 40
Which of the following components are part of FreeIPA? (Choose THREE correct answers.)

DHCP Server

Kerberos KDC

Intrusion Detection System

Public Key Infrastructure

Directory Server

新问题 41
Linux Extended File Attributes are organized in namespaces. Which of the following names correspond to existing attribute namespaces? (Choose THREE correct answers.)

default

系统

owner

trusted

user

新问题 42
Which of the following are differences between AppArmor and SELinux? (Choose TWO correct answers).

AppArmor is implemented in user space only. SELinux is a Linux Kernel Module.

AppArmor is less complex and easier to configure than SELinux.

AppArmor neither requires nor allows any specific configuration. SELinux must always be manually configured.

SELinux stores information in extended file attributes. AppArmor does not maintain file specific information and states.

The SELinux configuration is loaded at boot time and cannot be changed later on. AppArmor provides user space tools to change its behavior.

说明/参考：
http://elinux.org/images/3/39/SecureOS_nakamura.pdf

新问题 43
Which of the following database names can be used within a Name Service Switch (NSS) configuration file? (Choose THREE correct answers).

东道主

shadow

服务

passwd

group

说明/参考：
https://docs.oracle.com/cd/E26502_01/html/E29002/a12swit-89620.html#a12swit-84565

新问题 44
SIMULATION
Which option in an Apache HTTPD configuration file enables OCSP stapling? (Specify ONLY the option name without any values or parameters.)

httpd-ssl.conf
说明/参考：
https://wiki.apache.org/httpd/OCSPStapling

新问题 45
How does TSIG authenticate name servers in order to perform secured zone transfers?

Both servers mutually verify their X509 certificates.

Both servers use a secret key that is shared between the servers.

Both servers verify appropriate DANE records for the labels of the NS records used to delegate the transferred zone.

Both servers use DNSSEC to mutually verify that they are authoritative for the transferred zone.

新问题 46
What is the purpose of the program snort-stat?

It displays statistics from the running Snort process.

It returns the status of all configured network devices.

It reports whether the Snort process is still running and processing packets.

It displays the status of all Snort processes.

It reads syslog files containing Snort information and generates port scan statistics.

新问题 47
Given a proper network and name resolution setup, which of the following commands establishes a trust between a FreeIPA domain and an Active Directory domain?

ipa trust-add –type ad addom –admin Administrator –password

ipa-ad -add-trust –account ADDOMAdministrator–query-password

net ad ipajoin addom -U Administrator -p

trustmanager add –domain ad: //addom –user Administrator -w

ipa ad join addom -U Administrator -w

说明/参考：
https://www.freeipa.org/page/Active_Directory_trust_setup

新问题 48
Which of the following openssl commands generates a certificate signing request (CSR) using the already existing private key contained in the file private/keypair.pem?

openssl req -key private/keypair.pem -out req/csr.pem

openssl req – new -key private/keypair.pem -out req/csr.pem

openssl gencsr -key private/keypair.pem -out req/csr.pem

openssl gencsr -new- key private/keypair.pem -out req/csr.pem

说明/参考：
https://www.openssl.org/docs/manmaster/apps/req.html#EXAMPLES

新问题 49
Which of the following types can be specified within the Linux Audit system? (Choose THREE correct answers)

Control rules

File system rules

Network connection rules

Console rules

System call rules

新问题 50
Which of the following practices are important for the security of private keys? (Choose TWO correct answers.)

Private keys should be created on the systems where they will be used and should never leave them.

Private keys should be uploaded to public key servers.

Private keys should be included in X509 certificates.

Private keys should have a sufficient length for the algorithm used for key generation.

Private keys should always be stored as plain text files without any encryption.

说明/参考：
https://www.digitalocean.com/community/tutorials/openssl-essentials-working-with-ssl-certificates-private- keys-and-csrs

新问题 51
Which of the following commands defines an audit rule that monitors read and write operations to the file/ etc/firewall/rules and associates the rule with the name firewall?

auditctl -N firewall -r r: /etc/firewall/rules -r w: etc/firewall/rules

auditctl -A -f /etc/firewall/rules -o r- o w -l firewall

auditctl -w /etc/firewall/rules -p rw -k firewall

auditctl -_read /etc/firewall/rules -_write /etc/firewall/rules –label firewall

echo “n: firewall r:/etc/firewall/rules: w:/ etc/firewall/rules:” | auditctl ~

加载中 …