303-300 Dumps Questions Increase Your Chance of Success

Passing the 303-300 certification exam can be challenging, which is why practicing with 303-300 questions can greatly increase your chances of success. Lpi 303-300 dumps questions help you become familiar with the exam format. The 303-300 questions are designed to mimic the actual exam, which means that you'll get a feel for the types of questions you'll encounter, the difficulty level, and the time limit. All the 303-300 exam dumps questions are the latest version for you to study. Test free 303-300 exam questions below.

Page 1 of 4

1. What is a buffer overflow?

A type of virus

A type of malware that disguises itself as legitimate software

A type of denial-of-service attack

A type of software vulnerability

 Loading...

2. Given a proper network and name resolution setup, which of the following commands establishes a trust between a FreeIPA domain and an Active Directory domain?

ipa trust-add --type ad addom --admin Administrator --password

ipa-ad Cadd-trust --account ADDOMAdministrator--query-password

net ad ipajoin addom CU Administrator -p

trustmanager add C-domain ad: //addom --user Administrator Cw

ipa ad join addom -U Administrator -w

 Loading...

3. What is the purpose of AIDE?

To manage system log files

To detect intrusions and system changes

To manage installed packages

To automate host scans

 Loading...

4. Which of the following command lines sets the administrator password for ntop to testing 123?

ntop --set-admin-password=testing123

ntop --set-password=testing123

ntop --reset-password=testing123

ntop --set-new-password=testing123

 Loading...

5. What is Cryptography?

The art of sending secret messages

The art of sending public messages

The art of sending anonymous messages

The art of decoding messages

 Loading...

6. Which protocol is commonly used to transmit X.509 certificates?

HTTPS

FTPS

SMTPS

LDAP

 Loading...

7. What is a symmetric key?

A key used for encryption and decryption that is the same

A key used for encryption that is different from the key used for decryption

A key used for decryption that is different from the key used for encryption

A key used for both encryption and decryption that is generated randomly

 Loading...

8. When OpenVPN sends a control packet to its peer, it expects an acknowledgement in 2 seconds by default. Which of the following options changes the timeout period to 5 seconds?

-- tls-timeout 5

-- tls- timeout 500

-- tls- timer 5

-- tls- timer 500

 Loading...

9. Which of the following commands adds users using SSSD’s local service?

sss_adduser

sss_useradd

sss_add

sss-addlocaluser

sss_local_adduser

 Loading...

10. Which of the following configuration options makes Apache HTTPD require a client certificate for authentication?

Limit valid-x509

SSLRequestClientCert always

Require valid-x509

SSLVerifyClient require

SSLPolicy valid-client-cert

 Loading...

Page 2 of 4

11. Which command is used to set an extended attribute on a file in Linux?

getfattr

setfattr

getfacl

setfacl

 Loading...

12. What is the purpose of an extended attribute in Linux?

To store additional metadata about a file

To encrypt a file for secure transmission

To compress a file to save disk space

To mark a file as executable

 Loading...

13. Which of the following prefixes could be present in the output of getcifsacl?

(Choose THREE correct answers.)

ACL

GRANT

GROUP

OWNER

SID

 Loading...

14. Which of the following database names can be used within a Name Service Switch (NSS) configuration file?(Choose THREE correct answers).

host

shadow

service

passwd

group

 Loading...

15. Which of the following stanzas is a valid client configuration for FreeRADIUS?

client private-network-1 { ipaddr = 192.0.2.0/24 password = testing123-1 }

client private-network-1 { ip = 192.0.2.0/24 password = testing123-1 }

client private-network-1 { ip = 192.0.2.0/24 passwd = testing123-1 }

client private-network-1 { ip = 192.0.2.0/24 secret = testing123-1 }

client private-network-1 { ipaddr = 192.0.2.0/24 secret = testing123-1 }

 Loading...

16. Which of the following openssl commands generates a certificate signing request (CSR) using the already existing private key contained in the file private/ keypair.pem?

openssl req Ckey private/keypair.pem Cout req/csr.pem

openssl req C new -key private/keypair.pem Cout req/csr.pem

openssl gencsr -key private/keypair.pem Cout req/csr.pem

openssl gencsr Cnew- key private/keypair.pem Cout req/csr.pem

 Loading...

17. Which of the following information, within a DNSSEC- signed zone, is signed by the key signing key?

The non-DNSSEC records like A, AAAA or M

The zone signing key of the zone.

The RRSIG records of the zone.

The NSEC or NSEC3 records of the zone.

The DS records pointing to the zone.

 Loading...

18. Which of the following resources of a shell and its child processes can be controlled by the Bash build-in command ulimit?

(Choose THREE correct answers.)

The maximum size of written files

The maximum number of open file descriptors

The maximum number of newly created files

The maximum number of environment variables

The maximum number of user processes

 Loading...

19. What type of activity does HID monitor for?

Malware infections

Unauthorized access attempts

Network traffic

File and folder changes

 Loading...

20. Which command included in the Linux Audit system provides searching and filtering of the audit log?

(Specify ONLY the command without any path or parameters.)

Solution: ausearch

Determine whether the given solution is correct?

Correct

Incorrect

 Loading...

Page 3 of 4

21. What is a rogue access point?

A legitimate access point that is incorrectly configured

An unauthorized access point that is set up to look like a legitimate one

A type of virus

A type of phishing scam

 Loading...

22. What is a man-in-the-middle attack?

An attack that targets a specific user or organization

An attack that aims to steal sensitive information

An attack that intercepts communications between two parties to steal information

An attack that floods a network or server with traffic to make it unavailable

 Loading...

23. What is a Certificate Revocation List (CRL)?

A list of

509 certificates that have been issued by a particular CA

A list of

509 certificates that have been revoked by a particular CA

A list of public keys that have been compromised

A list of private keys that have been compromised

 Loading...

24. What is an asymmetric key?

A key used for encryption and decryption that is the same

A key used for encryption that is different from the key used for decryption

A key used for decryption that is different from the key used for encryption

A key used for both encryption and decryption that is generated in a pair

 Loading...

25. Which command is used to view the access control list of a file?

ls

chmod

getfacl

setfacl

 Loading...

26. Which of the following access control models is established by using SELinux?

Security Access Control (SAC)

Group Access Control (GAC)

User Access Control (UAC)

Discretionary Access Control (DAC)

Mandatory Access Control (MAC)

 Loading...

27. What is the purpose of the program snort-stat?

It displays statistics from the running Snort process.

It returns the status of all configured network devices.

It reports whether the Snort process is still running and processing packets.

It displays the status of all Snort processes.

It reads syslog files containing Snort information and generates port scan statistics.

 Loading...

28. Which of the following are differences between AppArmor and SELinux?

(Choose TWO correct answers)

AppArmor is implemented in user space only. SELinux is a Linux Kernel Module.

AppArmor is less complex and easier to configure than SELinux.

AppArmor neither requires nor allows any specific configuration. SELinux must always be manually configured.

SELinux stores information in extended file attributes. AppArmor does not maintain file specific information and states.

The SELinux configuration is loaded at boot time and cannot be changed later on. AppArmor provides user space tools to change its behavior.

 Loading...

29. What is the purpose of DNS over TLS and DNS over HTTPS?

To improve DNS performance

To provide secure communication between DNS clients and servers

To reduce DNS query times

To allow DNS servers to communicate securely with each other

 Loading...

30. Which of the following commands makes the contents of the eCryptfs encrypted directory ~/Private available to the user?

ecryptfsclient

ecryptfs.mount

ecryptfs-mount-private

decryptfs

ecryptfs-manage-directory

 Loading...

Page 4 of 4

31. What is a certificate chain?

A chain of digital signatures used to verify the authenticity of a certificate

A sequence of certificates used to verify the authenticity of a digital certificate

A chain of public and private keys used for encryption and decryption

A sequence of public and private keys used for encryption and decryption

 Loading...

32. What is a DoS attack?

An attack that targets a specific user or organization

An attack that aims to steal sensitive information

An attack that floods a network or server with traffic to make it unavailable

An attack that exploits a vulnerability in software

 Loading...

33. Which of the following statements is true regarding eCryptfs?

For every file in an eCryptfs directory there exists a corresponding file that contains the encrypted content.

The content of all files in an eCryptfs directory is stored in an archive file similar to a tar file with an additional index to improve performance.

After unmounting an eCryptfs directory, the directory hierarchy and the original file names are still visible, although, it is not possible to view the contents of the files.

When a user changes his login password, the contents of his eCryptfs home directory has to be re-encrypted using his new login password.

eCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux user.

 Loading...

34. What happens when the command getfattr afile is run while the file afile has no extended attributes set?

getfattr prints a warning and exits with a values of 0.

getfattr prints a warning and exits with a value of 1.

No output is produced and getfattr exits with a value of 0.

No outputs is produced and getfattr exits with a value of 1.

 Loading...

35. Which command is used to run a new shell for a user changing the SELinux context?

(Specify ONLY the command without any path or parameters.)

Solution: newrole

Determine whether the given solution is correct?

Correct

Incorrect

 Loading...

36. What is social engineering?

A type of virus

A type of malware that disguises itself as legitimate software

A type of denial-of-service attack

A type of attack that exploits human psychology to gain access to sensitive information

 Loading...

 Loading...