[2026] Lpi LPI Level 3 Exam (LPI 303: Security)

문제1

Which of the following parameters should be set in main.cf to enable TLS in Postfix?

A. smtpd_tls_cert_file, smtpd_tls_key_file, smtpd_tls_CAfile, smtpd_use_tls

B. smtpd_tls_key_file, smtpd_tls_CAfile, smtpd_use_tls, smtpd_tls_pem_file

C. smtpd_tls_CAfile, smtpd_use_tls, smtpd_tls_pem_file, smtpd_tls_cert_file

D. smtpd_use_tls, smtpd_tls_pem_file, smtpd_tls_cert_file, smtpd_tls_key_file

정답: A

문제2

A user is attempting to connect to a remote host via SSH and following message is displayed: Host key verification failed. Which of the following options could resolve the problem? (Select TWO correct answers)

A. Generate a new private key which is compatible with the server's host key.

B. Generate new SSH host keys on the remote host.

C. Add the o StrictHostKeyChecking=no option to the command.

D. Update the remote host's SSH host key in the list of know hosts.

E. Enable the PasswordAuthentication parameter on the remote host.

정답: C,D

문제3

On a new Linux system, the root user is being asked to provide the root user password before being able to use the su command. What line in the /etc/pam.d/su file will allow root to use su without supplying passwords?

A. auth sufficient pam_norootpw.so

B. auth required pam_norootpw.so

C. auth required pam_rootok.so

D. auth sufficient pam_rootok.so

정답: D

문제4

What openssl command will generate a certificate signing request (CSR) using the private key file privkey.pem?

A. openssl gencsr key privkey.pem out cert.csr

B. openssl req new key privkey.pem out cert.csr

C. openssl req key privkey.pem out cert.csr

D. openssl gencsr new key privkey.pem out cert.csr

정답: B

문제5

Which command will set the user.author attribute on the file afile.txt?

A. setfattr a user.author="A. Author" afile.txt

B. setfattr user.author:" Author" afile.txt

C. setfattr n user.author v "A. Author" afile.txt

D. setfattr user.author="A. Author" afile.txt

정답: C

문제6

CORRECT TEXT
What command will list basic information about all targets available to cryptmount? (Provide the command with any options or parameters)

정답:

cryptmount --list /usr/bin/cryptmount /usr/bin/cryptmount --list cryptmount -l

문제7

An administrator is capturing traffic with Wireshark and is only seeing ARP traffic. What is the most likely cause of this?

A. The machine is on a switched network and is therefore only seeing local and broadcast/multicast packets.

B. The administrator did not enable the TCP and UDP options when starting the scan.

C. The network interface on which the scan is running is not in promiscuous mode.

D. The network interface on which the scan is running has the ARP_ONLY flag set.

정답: A

문제8

CORRECT TEXT
Which tool, distributed with BIND 9, will check the syntax of a named configuration file? (Supply only the program name, without any options or parameters)

정답:

namedcheckconf /usr/sbin/namedcheckconf

문제9

Which of the following commands will create a new, signed tw.pol file?

A. twadmin createpolfile e S mykey.key /etc/tripwire/twpol.txt

B. twadmin createcfgfile e S mykey.key /etc/tripwire/twpol.txt

C. twadmin createcfgfile S mykey.key /etc/tripwire/twpol.txt

D. twadmin createpolfile S mykey.key /etc/tripwire/twpol.txt

정답: D

문제10

When adding additional users to a file's extended ACLs, what is true about the default behaviour of the ACL mask for the file?

A. The mask is left unchanged.

B. The mask is modified to be the union of all permissions of the file owner, owning group and all named users and groups.

C. The mask is modified to be the union of all permissions of the owning group and all named users and groups.

D. If required, a warning is printed indicating that the mask is too restrictive for the permissions being granted.

정답: C

Lpi LPI Level 3 Exam (LPI 303: Security) - 117-303무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트