最新的LPIC-3認證 303-300考試題庫

問題1

What happens when the command getfattr afile is run while the file afile has no extended attributes set?

A. No outputs is produced and getfattr exits with a value of 1.

B. getfattr prints a warning and exits with a value of 1.

C. getfattr prints a warning and exits with a values of 0.

D. No output is produced and getfattr exits with a value of 0.

正確答案: D

問題2

Which nftables command displays the currently active ruleset, including all tables, chains, and rules?

A. nft dump chains

B. nft show tables

C. nft list ruleset

D. nft get rules

正確答案: C

說明：（僅 VCESoft 成員可見）

問題3

What is the purpose of rkhunter?

A. To manage system log files

B. To detect rootkits and other security threats

C. To automate host scans

D. To manage installed packages

正確答案: B

問題4

Which of the following lines in an OpenSSL configuration adds an X 509v3 Subject Alternative Name extension for the host names example.org and www.example.org to a certificate?

A. subjectAltName = DNS: www.example.org, DNS:example.org

B. commonName = subjectAltName= www.example.org, subjectAltName = example.org

C. subject= CN= www.example.org, CN=example.org

D. extension= SAN: www.example.org, SAN:example.org

E. subjectAltName: www.example.org, subjectAltName: example.org

正確答案: A

問題5

Which of the following commands adds users using SSSD's local service?

A. sss_adduser

B. sss-addlocaluser

C. sss_useradd

D. sss_local_adduser

E. sss_add

正確答案: C

問題6

Linux Extended File Attributes are organized in namespaces. Which of the following names correspond to existing attribute namespaces?(Choose THREE correct answers.)

A. system

B. user

C. default

D. owner

E. trusted

正確答案: A,B,E

問題7

Which Linux kernel feature restricts a process's access to a subset of system calls, commonly used by container runtimes and sandboxing tools to reduce attack surface?

A. capabilities

B. namespaces

C. cgroups

D. seccomp

正確答案: D

說明：（僅 VCESoft 成員可見）

問題8

When OpenVPN sends a control packet to its peer, it expects an acknowledgement in 2 seconds by default. Which of the following options changes the timeout period to 5 seconds?

A. -- tls-timeout 5

B. -- tls- timer 5

C. -- tls- timeout 500

D. -- tls- timer 500

正確答案: A

問題9

A LUKS device was mapped using the command: cryptsetup luksOpen/dev/sda1 crypt-vol Given that this device has three different keys, which of the following commands deletes only the first key?

A. cryptsetup luksDelkey /dev/sda 1 1

B. cryptsetup luksDelKey / dev /mapper/crypt- vol 1

C. cryptsetup luksDelKey / dev /mapper/crypt- vol 0

D. cryptsetup luksDelKey /dev/sda 1 0

正確答案: A

問題10

Which command revokes ACL-based write access for groups and named users on the file afile?

A. setfacl ~m group: * : rx, user :*: rx afile

B. setfacl ~m mask: : rx afile

C. setfacl -x mask: : rx afile

D. setfacl -x group: * : rx, user:*: rx afile

正確答案: B

問題11

What is the purpose of TSIG in DNS?

A. To sign DNS messages for secure communication

B. To provide information about DNS servers

C. To map a domain name to an IP address

D. To encrypt DNS queries

正確答案: A

問題12

Which command installs and configures a new FreeIPA server, including all sub-components, and creates a new FreeIPA domain? (Specially ONLY the command without any path or parameters).
Solution: ipa-server-install
Determine whether the given solution is correct?

A. Correct

B. Incorrect

正確答案: A

問題13

Which command-line tool is commonly used to test and verify TLS/SSL configuration and certificate details of a remote server?

A. nmap -sV

B. openssl s_client

C. ss -tlnp

D. tcpdump

正確答案: B

說明：（僅 VCESoft 成員可見）

最新的Lpi LPIC Exam 303: Security, version 3.0 - 303-300免費考試真題

最新更新

站內鏈接

聯系我們