LPIC Exam 303: Security, version 3.0 (303-300) Free Practice Test

Question 1

What is a ciphertext?

A. The algorithm used to encrypt the message

B. The original message before encryption

C. The encrypted message

D. The key used to encrypt the message

Correct Answer: C

Question 2

What is OCSP stapling?

A. A mechanism that allows a server to provide proof of the revocation status of all certificates issued by a particular Certificate Authority

B. A mechanism that allows a server to provide proof of its own identity to clients

C. A mechanism that allows a server to provide proof of a client's identity to other servers

D. A mechanism that allows a server to provide proof of the revocation status of its own SSL/TLS certificate

Correct Answer: D

Question 3

Which file defines the default set of resource limits, such as maximum open files or processes, applied to users via PAM?

A. /etc/login.defs

B. /etc/security/limits.conf

C. /etc/sysctl.conf

D. /etc/pam.d/common-session

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

In an IPsec implementation using strongSwan, what is the purpose of the Internet Key Exchange (IKE) protocol?

A. To route IPsec packets across the internet.

B. To compress IPsec traffic before encryption.

C. To negotiate and establish the Security Associations (SAs) and cryptographic keys used by IPsec.

D. To encrypt the actual data payload of IPsec traffic.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

What is the purpose of the pam_tally2 or pam_faillock module?

A. To enforce password expiration policies.

B. To require multi-factor authentication.

C. To track failed login attempts and lock an account after a specified number of failures.

D. To restrict resource usage per user session.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Which of the following statements is used in a parameter file for setkey in order to create a new SPD entry?

A. spdadd

B. newspd

C. addspd

D. spd

E. spdnew

Correct Answer: A

Question 7

Which command installs and configures a new FreeIPA server, including all sub-components, and creates a new FreeIPA domain? (Specially ONLY the command without any path or parameters).
Solution: ipa-server-install
Determine whether the given solution is correct?

A. Correct

B. Incorrect

Correct Answer: A

Question 8

How are SELinux permissions related to standard Linux permissions? (Choose TWO correct answers.)

A. SELinux permissions are verified before standard Linux permissions.

B. SELinux permissions override standard Linux permissions.

C. Standard Linux permissions override SELinux permissions.

D. SELinux permissions are verified after standard Linux permissions.

Correct Answer: C,D

Question 9

Which command is used to relabel files according to the currently loaded SELinux policy?

A. chcon

B. restorecon

C. semanage

D. setsebool

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

Which of the following commands adds a new user usera to FreeIPA?

A. useradd usera --directory ipa --gecos "User A"

B. idap- useradd -H Idaps://ipa-server CN=UserA --attribs "Firstname: User: Lastname: A"

C. ipa user-add usera --first User --last A

D. ipa-user- add usera --name "User A"

E. ipa-admin create user --account usera --fname User --iname A

Correct Answer: C

Question 11

Which mount option prevents the execution of binaries located on the mounted filesystem?

A. nosuid

B. nodev

C. ro

D. noexec

Correct Answer: D

Question 12

What is the purpose of an access control list in Linux?

A. To compress a file to save disk space

B. To encrypt a file for secure transmission

C. To specify fine-grained permissions for users and groups

D. To mark a file as executable

Correct Answer: C

Question 13

Which Linux kernel feature restricts a process's access to a subset of system calls, commonly used by container runtimes and sandboxing tools to reduce attack surface?

A. seccomp

B. cgroups

C. namespaces

D. capabilities

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 14

A LUKS device was mapped using the command: cryptsetup luksOpen/dev/sda1 crypt-vol Given that this device has three different keys, which of the following commands deletes only the first key?

A. cryptsetup luksDelKey / dev /mapper/crypt- vol 0

B. cryptsetup luksDelKey / dev /mapper/crypt- vol 1

C. cryptsetup luksDelkey /dev/sda 1 1

D. cryptsetup luksDelKey /dev/sda 1 0

Correct Answer: C

Welcome to TestSimulate

Lpi LPIC Exam 303: Security, version 3.0 (303-300) Free Practice Test