[May 08, 2023] 303-200 Test Engine files, 303-200 Dumps PDF

Latest Lpi 303-200 PDF and Dumps (2023) Free Exam Questions Answers

NEW QUESTION 13
Which of the following parameters to openssl s_client specifies the host name to use for TLS Server Name Indication?

• A. -sniname
• B. -host
• C. -servername
• D. -tlsname
• E. -vhost

Answer: C

Explanation:
Explanation/Reference:
https://www.openssl.org/docs/manmaster/apps/s_client.html

 

NEW QUESTION 14
Which of the following are differences between AppArmor and SELinux? (Choose TWO correct answers).

• A. SELinux stores information in extended file attributes. AppArmor does not maintain file specific information and states.
• B. The SELinux configuration is loaded at boot time and cannot be changed later on AppArmor provides user space tools to change its behavior.
• C. AppArmor neither requires nor allows any specific configuration. SELinux must always be manually configured.
• D. AppArmor is implemented in user space only. SELinux is a Linux Kernel Module.
• E. AppArmor is less complex and easier to configure than SELinux.

Answer: A,E

 

NEW QUESTION 15
Which of the following stanzas is a valid client configuration for FreeRADIUS?

• A. client private-network-1 {
  ipaddr = 192.0.2.0/24
  password = testing123-1
  }
• B. client private-network-1 {
  ip = 192.0.2.0/24
  secret = testing123-1
  }
• C. client private-network-1 {
  ipaddr = 192.0.2.0/24
  secret = testing123-1
  }
• D. client private-network-1 {
  ip = 192.0.2.0/24
  password = testing123-1
  }
• E. client private-network-1 {
  ip = 192.0.2.0/24
  passwd = testing123-1
  }

Answer: C

Explanation:
Explanation/Reference:
http://linux.die.net/man/5/clients.conf

 

NEW QUESTION 16
Which of the following configuration options makes Apache HTTPD require a client certificate for authentication?

• A. Limit valid-x509
• B. SSLVerifyClient require
• C. SSLRequestClientCert always
• D. Require valid-x509
• E. SSLPolicy valid-client-cert

Answer: B

Explanation:
Explanation/Reference:
https://linuxconfig.org/apache-web-server-ssl-authentication

 

NEW QUESTION 17
Which of the following commands adds a new user usera to FreelPA?

• A. ipa-admin create user --account usera -_fname User --iname A
• B. useradd usera --directory ipa --gecos *User A"
• C. ipa user-add usera --first User --last A
• D. ipa-user- add usera --name "User A"
• E. idap- useradd --H ldaps://ipa-server CN=UserA --attribs "Firstname: User: Lastname: A"

Answer: C

 

NEW QUESTION 18
Which of the following components are part of FreeIPA? (Choose THREE correct answers.)

• A. Public Key Infrastructure
• B. DHCP Server
• C. Intrusion Detection System
• D. Kerberos KDC
• E. Directory Server

Answer: A,D,E

 

NEW QUESTION 19
Which of the following statements describes the purpose of ndpmon?

• A. It monitors the network for neighbor discovery messages from new IPv6 hosts and routers.
• B. It monitors the network for IPv4 nodes that have not yet migrated to IPv6.
• C. It monitors log files for failed login attempts in order to block traffic from offending network nodes.
• D. It monitors the availability of a network link by querying network interfaces.
• E. It monitors remote hosts by periodically sending echo requests to them.

Answer: A

Explanation:
Explanation/Reference:
https://en.wikipedia.org/wiki/NDPMon

 

NEW QUESTION 20
Which of the following keywords are built-in chairs for the iptables nat table? (Choose THREE correct answers.)

• A. PROCESSING
• B. OUTPUT
• C. MASQUERADE
• D. PREROUTING
• E. POSTROUTING

Answer: B,D,E

Explanation:
Explanation/Reference:
http://linux.die.net/man/8/ebtables

 

NEW QUESTION 21
SIMULATION
Which command included in the Linux Audit system provides searching and filtering of the audit log? (Specify ONLY the command without any path or parameters.)

Answer:

Explanation:
ausearch
Explanation/Reference:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security-Enhanced_Linux/ sect-Security-Enhanced_Linux-Fixing_Problems-Searching_For_and_Viewing_Denials.html

 

NEW QUESTION 22
Which of the following command lines sets the administrator password for ntop to testing 123?

• A. ntop --set-new-password=testing123
• B. ntop --set-password-testing123
• C. ntop --reset-password=testing 123
• D. ntop --set-admin-password=testing123

Answer: D

 

NEW QUESTION 23
Which of the following DNS record types can the command dnssec-signzone add to a zone? (Choose THREE correct answers.)

• A. RRSIG
• B. NSSIG
• C. NSEC3
• D. ASIG
• E. NSEC

Answer: A,C,E

 

NEW QUESTION 24
An X509 certificate contains the following information:
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
Which of the following statements are true regarding the certificate? (Choose THREE correct answers.)

• A. This certificate may be used to sign certificates that are not also a certification authority.
• B. This certificate may never be used to sign any other certificates.
• C. This certificate may be used to sign certificates of subordinate certification authorities.
• D. This certificate will not be accepted by programs that do not understand the listed extension.
• E. This certificate belongs to a certification authority.

Answer: A,C,E

Explanation:
Explanation/Reference:
https://en.wikipedia.org/wiki/X.509

 

NEW QUESTION 25
What is the purpose of the program snort-stat?

• A. It reads syslog files containing Snort information and generates port scan statistics.
• B. It reports whether the Snort process is still running and processing packets.
• C. It displays the status of all Snort processes.
• D. It displays statistics from the running Snort process.
• E. It returns the status of all configured network devices.

Answer: A

 

NEW QUESTION 26
Which of the following methods can be used to deactivate a rule in Snort? (Choose TWO correct answers.)

• A. By placing a # in front of the rule and restarting Snort
• B. By deleting the rule and waiting for Snort to reload its rules files automatically.
• C. By placing a pass rule in local.rules and restarting Snort.
• D. By adding a pass rule to /etc/snort/rules.deactivated and waiting for Snort to reload its rules files automatically.

Answer: B,C

Explanation:
LPI 303-200 : Practice Test

 

NEW QUESTION 27
Which of the following commands displays all ebtable rules contained in the table filter including their packet and byte counters?

• A. ebtables -t filter -Ln -L
• B. ebtables -t filter -L --Lc
• C. ebtables -L -Lc -t filter
• D. ebtables -L -t filter -Lv
• E. ebtables -t nat -L -v

Answer: B

Explanation:
Explanation/Reference:
http://www.microhowto.info/troubleshooting/troubleshooting_ethernet_bridging_on_linux.html

 

NEW QUESTION 28
Which of the following statements are valid wireshark capture filters? (Choose TWO correct answers.)

• A. tcp portrange 10000-15000
• B. port range 10000:tcp-15000:tcp
• C. portrange 10000-15000 and tcp
• D. port-range tcp 10000-15000
• E. portrange 10000/tcp-15000/tcp

Answer: A,C

Explanation:
Explanation/Reference:
https://wiki.wireshark.org/CaptureFilters

 

NEW QUESTION 29
......

Pass Your LPIC-3 303-200 Exam on May 08, 2023 with 60 Questions: https://www.dumptorrent.com/303-200-braindumps-torrent.html