[2026] Lpi LPIC Exam 303: Security, version 3.0

문제1

Which of the following configuration options makes Apache HTTPD require a client certificate for authentication?

A. SSLRequestClientCert always

B. Require valid-x509

C. Limit valid-x509

D. SSLVerifyClient require

E. SSLPolicy valid-client-cert

정답: D

문제2

Which option in an Apache HTTPD configuration file enables OCSP stapling? (Specify ONLY the option name without any values or parameters.) Solution: httpd-ssl.conf Determine whether the given solution is correct?

A. Correct

B. Incorrect

정답: B

문제3

Which OpenVPN configuration directive specifies that the tunnel should operate at Layer 3, routing IP packets rather than bridging Ethernet frames?

A. topology subnet

B. proto udp

C. dev tun

D. dev tap

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제4

What is OCSP stapling?

A. A mechanism that allows a server to provide proof of the revocation status of all certificates issued by a particular Certificate Authority

B. A mechanism that allows a server to provide proof of its own identity to clients

C. A mechanism that allows a server to provide proof of the revocation status of its own SSL/TLS certificate

D. A mechanism that allows a server to provide proof of a client's identity to other servers

정답: C

문제5

An X509 certificate contains the following information:
X509v3 Basic Constraints: critical CA:TRUE, pathlen:0
Which of the following statements are true regarding the certificate? (Choose THREE correct answers.)

A. This certificate belongs to a certification authority.

B. This certificate may never be used to sign any other certificates.

C. This certificate will not be accepted by programs that do not understand the listed extension.

D. This certificate may be used to sign certificates of subordinate certification authorities.

E. This certificate may be used to sign certificates that are not also a certification authority.

정답: A,D,E

문제6

Which of the following access control models is established by using SELinux?

A. Discretionary Access Control (DAC)

B. Group Access Control (GAC)

C. User Access Control (UAC)

D. Mandatory Access Control (MAC)

E. Security Access Control (SAC)

정답: D

문제7

Which PAM module is used to enforce password complexity requirements, such as minimum length and character class requirements?

A. pam_access

B. pam_limits

C. pam_cracklib or pam_pwquality

D. pam_unix

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제8

What is a trust anchor?

A. A key pair that is generated by a particular CA

B. A list of private keys that are trusted by a particular CA

C. A list of public keys that are trusted by a particular CA

D. A root certificate that is trusted by a particular CA

정답: D

문제9

Which of the following statements are true regarding the certificate of a Root CA? (Choose THREE correct answers.)

A. It must contain an X509v3 Authority extension.

B. It is a self-signed certificate.

C. It does not include the private key of the CA.

D. It has an infinite lifetime and never expires.

E. It must contain a host name as the common name.

정답: A,B,C

문제10

Which mount option prevents the execution of binaries located on the mounted filesystem?

A. ro

B. noexec

C. nodev

D. nosuid

정답: B

문제11

Which tool is commonly used to perform a comprehensive network port scan, including service and OS fingerprinting, as part of a security assessment?

A. tcpdump

B. nmap

C. netstat

D. Wireshark

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제12

Which of the following statements is true regarding eCryptfs?

A. eCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux user.

B. For every file in an eCryptfs directory there exists a corresponding file that contains the encrypted content.

C. When a user changes his login password, the contents of his eCryptfs home directory has to be re- encrypted using his new login password.

D. After unmounting an eCryptfs directory, the directory hierarchy and the original file names are still visible, although, it is not possible to view the contents of the files.

E. The content of all files in an eCryptfs directory is stored in an archive file similar to a tar file with an additional index to improve performance.

정답: A

문제13

Given a proper network and name resolution setup, which of the following commands establishes a trust between a FreeIPA domain and an Active Directory domain?

A. ipa-ad -add-trust --account ADDOM\Administrator--query-password

B. ipa ad join addom -U Administrator -w

C. trustmanager add --domain ad: //addom --user Administrator -w

D. net ad ipajoin addom -U Administrator -p

E. ipa trust-add --type ad addom --admin Administrator --password

정답: E

문제14

A LUKS device was mapped using the command: cryptsetup luksOpen/dev/sda1 crypt-vol Given that this device has three different keys, which of the following commands deletes only the first key?

A. cryptsetup luksDelKey / dev /mapper/crypt- vol 0

B. cryptsetup luksDelKey /dev/sda 1 0

C. cryptsetup luksDelKey / dev /mapper/crypt- vol 1

D. cryptsetup luksDelkey /dev/sda 1 1

정답: D

Lpi LPIC Exam 303: Security, version 3.0 - 303-300무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트