• ホーム
  • ブログ
  • [2022年05月] ベストな問題集を使おう LPIC-3 303-200 専門試験問題 [Q21-Q44]

[2022年05月] ベストな問題集を使おう LPIC-3 303-200 専門試験問題 [Q21-Q44]

Share

[2022年05月] ベストな問題集を使おうLPIC-3 303-200専門試験問題

100%の合格率を試そう！更新されたのは303-200試験問題 [2022]


Lpi 303-200 認定試験の出題範囲：

トピック出題範囲
トピック 1
  • Understand and configure NFSv4 authentication mechanisms
  • Use dm-crypt with LUKS to encrypt block devices
トピック 2
  • Understand trust chains and public key infrastructures
  • Candidates should be able to setup and configure encrypted file systems
トピック 3
  • Lock accounts automatically after failed login attempts
  • Use TSIG for secure communication with BIND
トピック 4
  • Understand block device and file system encryption
  • Generate and manage public and private keys
トピック 5
  • Configure Apache HTTPD with mod_ssl to authenticate users using certificates
  • Understand common transport layer security threats, for example Man-in-the-Middle
トピック 6
  • Enforce password complexity policies and periodic password changes
  • Revoke certificates and certification authorities
トピック 7
  • Use eCryptfs to encrypt file systems, including home directories and PAM integration
  • Configure Apache HTTPD with mod_ssl to provide OCSP stapling
トピック 8
  • Understand system and configuration prerequisites for installing FreeIPA
  • Configure SSSD authentication against Active Directory, IPA, LDAP, Kerberos and local domains
トピック 9
  • Configure and use AIDE, including rule management
  • Configure Apache HTTPD with mod_ssl to provide HTTPS service, including SNI and HSTS
トピック 10
  • Understand and manage mapping and handling of CIFS ACLs and SIDs in a Linux system
  • Key generation, key storage, key management and key rollover

 

質問 21
Which of the following access control models is established by using SELinux?

  • A. Security Access Control (SAC)
  • B. Mandatory Access Control (MAC)
  • C. Discretionary Access Control (DAC)
  • D. Group Access Control (GAC)
  • E. User Access Control (UAC)

正解: B

 

質問 22
CORRECT TEXT
What command is used to update NVTs from the OpenVAS NVT feed? (Specify ONLY the command without any path or parameters).

正解:

解説:
openvas-nvt-sync
http://www.openvas.org/openvas-nvt-feed.html

 

質問 23
SIMULATION
Which command included in the Linux Audit system provides searching and filtering of the audit log?
(Specify ONLY the command without any path or parameters.)

正解:

解説:
ausearch
Explanation/Reference:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security- Enhanced_Linux/sect-Security-Enhanced_Linux-Fixing_Problems-
Searching_For_and_Viewing_Denials.html

 

質問 24
Which of the following database names can be used within a Name Service Switch (NSS) configuration file? (Choose THREE correct answers).

  • A. service
  • B. group
  • C. host
  • D. passwd
  • E. shadow

正解: A,B,C

 

質問 25
Which of the following commands disables the automatic password expiry for the user usera?

  • A. chage --maxdays 99 usera
  • B. chage --maxdays -1 usera
  • C. chage --lastday 0 usera
  • D. chage --maxdays none usera
  • E. chage --lastday none usera

正解: B

解説:
Explanation/Reference:
http://www.tutorialspoint.com/unix_commands/chage.htm

 

質問 26
CORRECT TEXT
Which option in an Apache HTTPD configuration file enables OCSP stapling? (Specify ONLY the option name without any values or parameters.)

正解:

解説:
httpd-ssl.conf

 

質問 27
What effect does the configuration SSLStrictSNIVHostCheck on have on an Apache HTTPD virtual host?

  • A. All of the names of the virtual host must be within the same DNS zone.
  • B. Despite its configuration, the virtual host is served only on the common name and Subject Alternative Names of the server certificates.
  • C. The virtual host is served only to clients that support SNI.
  • D. The virtual host is used as a fallback default for all clients that do not support SNI.
  • E. The clients connecting to the virtual host must provide a client certificate that was issued by the same CA that issued the server's certificate.

正解: C

 

質問 28
Which of the following lines in an OpenSSL configuration adds an X 509v3 Subject Alternative Name extension for the host names example.org and www.example.org to a certificate?

  • A. subjectAltName: www.example.org, subjectAltName: example.org
  • B. extension= SAN: www.example.org, SAN:example.org
  • C. subjectAltName = DNS: www.example.org, DNS:example.org
  • D. commonName = subjectAltName= www.example.org,
    subjectAltName = example.org
  • E. subject= CN= www.example.org, CN=example.org

正解: C

解説:
Explanation/Reference:
https://www.openssl.org/docs/manmaster/apps/x509v3_config.html

 

質問 29
SIMULATION
Which command is used to run a new shell for a user changing the SELinux context? (Specify ONLY the command without any path or parameters.)

正解:

解説:
newrole
Explanation/Reference:
https://www.centos.org/docs/5/html/Deployment_Guide-en-US/sec-sel-admincontrol.html

 

質問 30
Which of the following information, within a DNSSEC- signed zone, is signed by the key signing key?

  • A. The NSEC or NSEC3 records of the zone.
  • B. The DS records pointing to the zone.
  • C. The zone signing key of the zone.
  • D. The RRSIG records of the zone.
  • E. The non-DNSSEC records like A, AAAA or MX.

正解: C

解説:
Explanation/Reference:
https://grepular.com/Understanding_DNSSEC

 

質問 31
Which of the following statements is used in a parameter file for setkey in order to create a new SPD entry?

  • A. spd
  • B. newspd
  • C. spdnew
  • D. spdadd
  • E. addspd

正解: D

解説:
Explanation/Reference:
https://www.freebsd.org/cgi/man.cgi?query=setkey&sektion=8

 

質問 32
Which of the following commands adds a new user usera to FreelPA?

  • A. ipa user-add usera --first User --last A
  • B. ipa-admin create user --account usera -_fname User --iname A
  • C. idap- useradd --H ldaps://ipa-server CN=UserA --attribs "Firstname: User: Lastname: A"
  • D. useradd usera --directory ipa --gecos *User A"
  • E. ipa-user- add usera --name "User A"

正解: A

 

質問 33
Which of the following statements are true regarding the certificate of a Root CA? (Choose TWO correct answers.)

  • A. It must contain an X509v3 Authority extension.
  • B. It has an infinite lifetime and never expires.
  • C. It is a self-signed certificate.
  • D. It does not include the private key of the CA.
  • E. It must contain a host name as the common name.

正解: A,C,D

解説:
Explanation/Reference:
https://en.wikipedia.org/wiki/Root_certificate

 

質問 34
SIMULATION
Which option in an Apache HTTPD configuration file enables OCSP stapling? (Specify ONLY the option name without any values or parameters.)

正解:

解説:
httpd-ssl.conf
Explanation/Reference:
https://wiki.apache.org/httpd/OCSPStapling

 

質問 35
What effect does the following command have on TCP packets?
iptables- A INPUT -d 10 142 232.1 -p tcp -dport 20:21 -j ACCEPT

  • A. Accept only TCP traffic from 10.142 232.1 destined for port 20 or 21.
  • B. Accept all TCP traffic on port 20 and 21 for the IP address 10.142.232.1
  • C. Forward all TCP traffic not on port 20 or 21 to the IP address 10.142 232.1
  • D. Drop all TCP traffic coming from 10 142 232.1 destined for port 20 or 21.

正解: A

解説:
LPI 303-200 : Practice Test

 

質問 36
Which of the following commands changes the source IP address to 192.0.2.11 for all IPv4 packets which go through the network interface eth0?

  • A. iptables -t mangle -A POSTROUTING -i eth0 -j SNAT -to-source 192.0.2.11
  • B. iptables ~t nat -A PREROUT1NG -\ eth0 -j SNAT -to-source 192.0.2.11
  • C. iptables -t mangle -A POSTROUTING -0 eth0 -j SNAT -to-source 192.0.2.11
  • D. iptables -t nat -A POSTROUTING H eth0 -j DNAT -to-source 192.0.2.11
  • E. iptables ~t nat -A POSTROUTING ~o eth0 -j SNAT -to-source 192.0.2.11

正解: E

解説:
LPI 303-200 : Practice Test

 

質問 37
Which of the following statements are true regarding the certificate? (Choose THREE correct answers.)

  • A. This certificate may be used to sign certificates that are not also a certification authority
  • B. This certificate belongs to a certification authority.
  • C. This certificate may be used to sign certificates of subordinate certification authorities.
  • D. This certificate may never be used to sign any other certificates
  • E. This certificate will not be accepted by programs that do not understand the listed extension

正解: A,B,C

 

質問 38
What happens when the command getfattr afile is run while the file afile has no extended attributes set?

  • A. No output is produced and getfattr exits with a value of 0.
  • B. getfattr prints a warning and exits with a values of 0.
  • C. getfattr prints a warning and exits with a value of 1.
  • D. No outputs is produced and getfattr exits with a value of 1.

正解: A

 

質問 39
Which of the following methods can be used to deactivate a rule in Snort? (Choose TWO correct answers.)

  • A. By adding a pass rule to /etc/snort/rules.deactivated and waiting for Snort to reload its rules files automatically.
  • B. By placing a pass rule in local.rules and restarting Snort.
  • C. By placing a # in front of the rule and restarting Snort
  • D. By deleting the rule and waiting for Snort to reload its rules files automatically.

正解: B,D

解説:
LPI 303-200 : Practice Test

 

質問 40
Which of the following types can be specified within the Linux Audit system? (Choose THREE correct answers.)

  • A. System call rules
  • B. Network connection rules
  • C. Control rules
  • D. File system rules
  • E. Console rules

正解: A,C,D

解説:
Explanation/Reference:
https://www.digitalocean.com/community/tutorials/how-to-write-custom-system-audit-rules-on-centos-7

 

質問 41
Which of the following configuration options makes Apache HTTPD require a client certificate for authentication?

  • A. SSLRequestClientCert always
  • B. Limit valid-x509
  • C. Require valid-x509
  • D. SSLVerifyClient require
  • E. SSLPolicy valid-client-cert

正解: D

解説:
Explanation/Reference:
https://linuxconfig.org/apache-web-server-ssl-authentication

 

質問 42
How are SELinux permissions related to standard Linux permissions? (Choose TWO correct answers.)

  • A. standard Linux permissions override SELinux permissions.
  • B. SELinux permissions are verified after standard Linux permissions.
  • C. SELinux permissions overnde standard Linux permissions.
  • D. SELinux permissions are verified before standard Linux permissions.

正解: A,B

 

質問 43
Which of the following practices are important for the security of private keys? (Choose TWO correct answers.)

  • A. Private keys should be uploaded to public key servers.
  • B. Private keys should always be stored as plain text files without any encryption.
  • C. Private keys should be created on the systems where they will be used and should never leave them.
  • D. Private keys should have a sufficient length for the algorithm used for key generation.
  • E. Private keys should be included in X509 certificates.

正解: D,E

解説:
Explanation
Explanation/Reference:
https://www.digitalocean.com/community/tutorials/openssl-essentials-working-with-ssl-certificates-private-keys- and-csrs

 

質問 44
......

303-200試験問題を今すぐ試そう！最新の[2022年最新] 正解回答付き：https://www.passtest.jp/Lpi/303-200-shiken.html

合格させる303-200試験にはリアル問題解答：https://drive.google.com/open?id=1lTeLGopEZy9y3xrvSju7ziMDdpOaxtrb

関するブログ

もっと
303-200 無料問題集