303-200 LPI Exam Questions and Free Practice Test

Question 13

Which option of the openvpn command should be used to ensure that ephemeral keys are not written to the swap space?

A. --mlock

B. --no-swap

C. --root-swap

D. --keys-no-swap

Correct Answer:A

Question 14

What happens when the command getfattr afile is run while the file afile has no extended attributes set?

A. getfattr prints a warning and exits with a values of 0.

B. getfattr prints a warning and exits with a value of 1.

C. No output is produced and getfattr exits with a value of 0.

D. No outputs is produced and getfattr exits with a value of 1

Correct Answer:C

Question 15

What is the purpose of lP sets?

A. They group together lP addresses that are assigned to the same network interfaces.

B. They group together lP addresses and networks that can be referenced by the network routing table.

C. They group together lP addresses that can be referenced by netfilter rules.

D. They group together lP and MAC addresses used by the neighbors on the local network.

E. They group together lP addresses and user names that can be referenced from /etc/hosts allow and /etc/hosts deny

Correct Answer:C

Question 16

Which of the following commands defines an audit rule that monitors read and write operations to the file/etc/firewall/rules and associates the rule with the name firewall?

A. auditctl -N firewall -r r: /etc/firewall/rules -r w: etc/firewall/rules

B. auditctl -A -f /etc/firewall/rules -o r- o w -l firewall

C. auditctl -w /etc/firewall/rules -p rw -k firewall

D. auditctl -_read /etc/firewall/rules -_write /etc/firewall/rules --label firewall

E. echo "n: firewall r:/etc/firewall/rules: w:/ etc/firewall/rules:" I auditctl ~

Correct Answer:C

Question 17

Which of the following statements are true regarding the certificate? (Choose THREE correct answers.)

A. This certificate belongs to a certification authority.

B. This certificate may be used to sign certificates of subordinate certification authorities.

C. This certificate may never be used to sign any other certificates

D. This certificate may be used to sign certificates that are not also a certification authority

E. This certificate will not be accepted by programs that do not understand the listed extension

Correct Answer:ABD

Question 18

How does TSlG authenticate name servers in order to perform secured zone transfers?

A. Both servers mutually verify their X509 certificates.

B. Both servers use a secret key that is shared between the servers.

C. Both servers verify appropriate DANE records for the labels of the NS records used to delegate the transferred zone.

D. Both servers use DNSSEC to mutually verify that they are authoritative for the transferred zone.

Correct Answer:B

START 303-200 EXAM