LPIC-3 Security 303-300 Exam Free Dumps

dumps2024-01-26T09:48:40+08:00

LPIC-3 Security 303-300 exam is designed for the enterprise-level Linux professional and represents the highest level of professional, distribution-neutral Linux certification within the industry. There are 60 multiple-choice and fill-in-the-blank questions in the real 303-300 exam, and you have 90 minutes to answer all the questions. Besides, to take the LPIC-3 Security 303-300 exam, you must have an active LPIC-2 certification. We have cracked the latest LPIC-3 Security 303-300 exam dumps, which are your best choice to study. Free LPIC-3 Security 303-300 exam dumps are below.

Page 1 of 4

1. What option of mount.cifs specifies the user that appears as the local owner of the files of a mounted CIFS share when the server does not provide ownership information?

(Specify ONLY the option name without any values or parameters.)

Solution: uid=arg

Determine whether the given solution is correct?

Correct

Incorrect

2. Which of the following practices are important for the security of private keys?

(Choose TWO correct answers.)

Private keys should be created on the systems where they will be used and should never leave them.

Private keys should be uploaded to public key servers.

Private keys should be included in X509 certificates.

Private keys should have a sufficient length for the algorithm used for key generation.

Private keys should always be stored as plain text files without any encryption.

3. What is the purpose of NSEC3 in DNSSEC?

To provide information about DNSSEC key signing keys

To prevent zone enumeration

To authenticate a DNS server

To sign a DNS zone

4. Which command is used to run a new shell for a user changing the SELinux context?

(Specify ONLY the command without any path or parameters.)

Solution: newrole

Determine whether the given solution is correct?

Correct

Incorrect

5. Which file is used to configure AIDE?

/etc/rkhunter.conf

/etc/audit/auditd.conf

/etc/aide/aide.conf

/etc/maldet.conf

6. Which of the following statements describes the purpose of ndpmon?

It monitors the network for neighbor discovery messages from new IPv6 hosts and routers.

It monitors remote hosts by periodically sending echo requests to them.

It monitors the availability of a network link by querying network interfaces.

It monitors the network for IPv4 nodes that have not yet migrated to IPv6.

It monitors log files for failed login attempts in order to block traffic from offending network nodes.

7. What is an asymmetric key?

A key used for encryption and decryption that is the same

A key used for encryption that is different from the key used for decryption

A key used for decryption that is different from the key used for encryption

A key used for both encryption and decryption that is generated in a pair

8. Which of the following is an example of a behavioral-based HID technique?

Signature-based detection

Anomaly-based detection

Heuristic-based detection

Rule-based detection

9. Which command revokes ACL-based write access for groups and named users on the file afile?

setfacl Cx group: * : rx, user:*: rx afile

setfacl Cx mask: : rx afile

setfacl ~m mask: : rx afile

setfacl ~m group: * : rx, user :*: rx afile

10. Which command is used to set an extended attribute on a file in Linux?

getfattr

setfattr

getfacl

setfacl

Page 2 of 4

11. Which option in an Apache HTTPD configuration file enables OCSP stapling?

(Specify ONLY the option name without any values or parameters.)

Solution: httpd-ssl.conf

Determine whether the given solution is correct?

Correct

Incorrect

12. Which of the following database names can be used within a Name Service Switch (NSS) configuration file?(Choose THREE correct answers).

host

shadow

service

passwd

group

13. Which of the following parameters to openssl s_client specifies the host name to use for TLS Server Name Indication?

-tlsname

-servername

-sniname

-vhost

-host

14. Which of the following lines in an OpenSSL configuration adds an X 509v3 Subject Alternative Name extension for the host names example.org and www.example.org to a certificate?

subjectAltName = DNS: www.example.org, DNS:example.org

extension= SAN: www.example.org, SAN:example.org

subjectAltName: www.example.org, subjectAltName: example.org

commonName = subjectAltName= www.example.org, subjectAltName = example.org

subject= CN= www.example.org, CN=example.org

15. What is a buffer overflow?

A type of virus

A type of malware that disguises itself as legitimate software

A type of denial-of-service attack

A type of software vulnerability

16. Which tool can be used to manage the Linux Audit system?

auditd

rkhunter

chkrootkit

maldet

17. What is the difference between a SetUID and SetGID bit?

SetUID applies to files, while SetGID applies to directories

SetUID allows a file to be executed with the permissions of the file owner, while SetGID allows a file to be executed with the permissions of the group owner

SetUID allows a user to change the owner of a file, while SetGID allows a user to change the group owner of a file

There is no difference between SetUID and SetGID

18. Which of the following expressions are valid AIDE rules?

(Choose TWO correct answers.)

!/var/run/.*

append: /var/log/*

/usr=all

#/bin/

/etc p+i+u+g

19. Which command included in the Linux Audit system provides searching and filtering of the audit log?

(Specify ONLY the command without any path or parameters.)

Solution: ausearch

Determine whether the given solution is correct?

Correct

Incorrect

20. Which package management tools can be used to verify the integrity of installed files on a Linux system?

RPM and DPKG

APT and YUM

dpkg and aptitude

yum and zypper

Page 3 of 4

21. What is a honeypot?

A type of virus

A network security tool designed to lure attackers into a trap

A type of phishing scam

A type of denial-of-service attack

22. Which of the following is used to perform DNSSEC validation on behalf of clients?

Recursive name server

Authoritative name server

Secondary name server

Primary name server

23. Given a proper network and name resolution setup, which of the following commands establishes a trust between a FreeIPA domain and an Active Directory domain?

ipa trust-add --type ad addom --admin Administrator --password

ipa-ad Cadd-trust --account ADDOMAdministrator--query-password

net ad ipajoin addom CU Administrator -p

trustmanager add C-domain ad: //addom --user Administrator Cw

ipa ad join addom -U Administrator -w

24. Which of the following command lines sets the administrator password for ntop to testing 123?

ntop --set-admin-password=testing123

ntop --set-password=testing123

ntop --reset-password=testing123

ntop --set-new-password=testing123

25. What is a symmetric key?

A key used for encryption and decryption that is the same

A key used for encryption that is different from the key used for decryption

A key used for decryption that is different from the key used for encryption

A key used for both encryption and decryption that is generated randomly

26. What is privilege escalation?

An attack that targets a specific user or organization

An attack that aims to steal sensitive information

An attack that exploits a vulnerability to gain elevated privileges

An attack that floods a network or server with traffic to make it unavailable

27. Which PAM module checks new passwords against dictionary words and enforces complexity?

(Specially the module name only without any path.)

Solution: pam_cracklib

Determine whether the given solution is correct?

Correct

Incorrect

28. What is the purpose of TSIG in DNS?

To encrypt DNS queries

To sign DNS messages for secure communication

To provide information about DNS servers

To map a domain name to an IP address

29. What is the purpose of IP sets?

They group together IP addresses that are assigned to the same network interfaces.

They group together IP addresses and networks that can be referenced by the network routing table.

They group together IP addresses that can be referenced by netfilter rules.

They group together IP and MAC addresses used by the neighbors on the local network.

They group together IP addresses and user names that can be referenced from /etc/hosts.allow and /etc/hosts.deny

30. What is the purpose of an extended attribute in Linux?

To store additional metadata about a file

To encrypt a file for secure transmission

To compress a file to save disk space

To mark a file as executable

Page 4 of 4

31. Which file is used to configure rkhunter?

/etc/rkhunter.conf

/etc/audit/auditd.conf

/etc/aide/aide.conf

/etc/maldet.conf

32. What effect does the following command have on TCP packets?

iptables- A INPUT d 10.142.232.1 p tcp --dport 20:21 j ACCEPT

Forward all TCP traffic not on port 20 or 21 to the IP address 10.142.232.1

Drop all TCP traffic coming from 10.142.232.1 destined for port 20 or 21.

Accept only TCP traffic from 10.142.232.1 destined for port 20 or 21.

Accept all TCP traffic on port 20 and 21 for the IP address 10.142.232.1

33. Which of the following access control models is established by using SELinux?

Security Access Control (SAC)

Group Access Control (GAC)

User Access Control (UAC)

Discretionary Access Control (DAC)

Mandatory Access Control (MAC)

34. Which option of the openvpn command should be used to ensure that ephemeral keys are not written to the swap space?

--mlock

--no-swap

--root-swap

--keys-no-swap

35. Linux Extended File Attributes are organized in namespaces. Which of the following names correspond to existing attribute namespaces?(Choose THREE correct answers.)

default

system

owner

trusted

user

36. Which of the following terms refer to existing scan techniques with nmap?

(Choose TWO correct answers.)

Xmas Scan

Zero Scan

FIN Scan

IP Scan

UDP SYN Scan

LPIC-3 Security 303-300 Exam Free Dumps

LPIC-3 Security 303-300 Exam Free Dumps

Share this post

Leave a Reply Cancel reply

Related Posts

Linux Professional Institute LPIC-1 101-500 Study Material

Linux Professional Institute LPIC-2 202-450 Study Guides

Linux Professional Institute LPIC-2 201-450 Practice Questions

702-100 Linux Professional Institute BSD Specialist Exam Dumps

LPI Level 1 102-500 Exam Dumps

010-160 Linux Essentials Certificate Exam, version 1.6 Training Material

305-300 LPIC-3: Virtualization and Containerization Exam Dumps