163 Exam Questions for 303-300 Updated Versions With Test Engine
Pass 303-300 Exam with Updated 303-300 Exam Dumps PDF 2026
The LPIC Exam 303: Security, version 3.0 is a vendor-neutral certification exam, which means that it is not tied to any specific Linux distribution or vendor. This makes it a valuable certification for IT professionals who work with different Linux distributions or who want to demonstrate their Linux security skills to potential employers.
Achieving the Lpi 303-300 certification is an excellent way for candidates to demonstrate their proficiency and knowledge in securing Linux-based systems. LPIC Exam 303: Security, version 3.0 certification is recognized globally and validates their expertise, increasing their marketability to potential employers. Obtaining this certification can also lead to other certifications, such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), and CompTIA Security+.
NEW QUESTION # 26
Which of the following database names can be used within a Name Service Switch (NSS) configuration file?(Choose THREE correct answers).
- A. passwd
- B. group
- C. service
- D. shadow
- E. host
Answer: A,B,D
NEW QUESTION # 27
Which of the following statements are valid wireshark capture filters?
(Choose TWO correct answers.)
- A. portrange 10000-15000 and tcp
- B. port-range tcp 10000-15000
- C. port range 10000:tcp-15000:tcp
- D. tcp portrange 10000-15000
- E. portrange 10000/tcp-15000/tcp
Answer: A,D
NEW QUESTION # 28
Which command is used to add a temporary audit rule that monitors write access to the
/etc/passwd file?
- A. aureport -f /etc/passwd
- B. ausearch -f /etc/passwd
- C. auditctl -w /etc/passwd -p wa -k passwd_changes
- D. auditd -w /etc/passwd
Answer: C
Explanation:
The command "auditctl -w /etc/passwd -p wa -k passwd_changes" adds a watch on the
/etc/passwd file, monitoring for write and attribute change (wa) events, and tags any matching events with the key "passwd_changes" to make them easier to search for later. Rules added directly with auditctl are not persistent across a reboot unless also added to a rules file under
/etc/audit/rules.d/. ausearch and aureport are used to search and summarize existing audit log entries, not to create new rules.
NEW QUESTION # 29
In GnuPG's web of trust model, what does it mean when User A signs User B's public key?
- A. User A's private key is now shared with User B.
- B. User A is vouching that they have verified the authenticity of User B's public key and its association with User B's identity.
- C. User A is granting User B permission to decrypt User A's messages.
- D. User B's key is automatically revoked.
Answer: B
Explanation:
When one GnuPG user signs another user's public key, they are asserting, based on some level of verification (such as checking a passport or comparing key fingerprints in person), that they believe the key genuinely belongs to the claimed identity. This signature becomes part of the web of trust, allowing other users who trust User A to extend a degree of trust to User B's key as well, without needing to independently verify it themselves, forming a decentralized alternative to the hierarchical X.509 CA trust model.
NEW QUESTION # 30
Which of the following types can be specified within the Linux Audit system?
(Choose THREE correct answers.)
- A. Console rules
- B. System call rules
- C. Control rules
- D. File system rules
- E. Network connection rules
Answer: B,C,D
NEW QUESTION # 31
Which of the following is used to perform DNSSEC validation on behalf of clients?
- A. Primary name server
- B. Authoritative name server
- C. Recursive name server
- D. Secondary name server
Answer: C
NEW QUESTION # 32
Which command is used to set the permissions of a file in Linux?
- A. chmod
- B. setfacl
- C. chown
- D. chgrp
Answer: A
NEW QUESTION # 33
Which command is used to relabel files according to the currently loaded SELinux policy?
- A. chcon
- B. setsebool
- C. restorecon
- D. semanage
Answer: C
Explanation:
The restorecon command restores the default SELinux security context of one or more files based on the rules defined in the currently loaded policy's file contexts database. This is useful after files have been moved, copied, or had their context manually altered. chcon changes a file's context to an arbitrary value, but does not use policy-defined defaults and does not persist across a full relabel. semanage manages various aspects of SELinux policy, such as port and user mappings, while setsebool toggles SELinux boolean values.
NEW QUESTION # 34
Which of the following commands displays all ebtable rules contained in the table filter including their packet and byte counters?
- A. ebtables -L -t filter -Lv
- B. ebtables -t nat -L -v
- C. ebtables -t filter -Ln -L
- D. ebtables -t filter -L --Lc
- E. ebtables -L -Lc -t filter
Answer: D
NEW QUESTION # 35
How are SELinux permissions related to standard Linux permissions?
(Choose TWO correct answers.)
- A. SELinux permissions override standard Linux permissions.
- B. Standard Linux permissions override SELinux permissions.
- C. SELinux permissions are verified before standard Linux permissions.
- D. SELinux permissions are verified after standard Linux permissions.
Answer: B,D
NEW QUESTION # 36
Which SELinux mode logs policy violations without actually enforcing the policy?
- A. Disabled
- B. Enforcing
- C. Targeted
- D. Permissive
Answer: D
Explanation:
In Permissive mode, SELinux evaluates access requests against the loaded policy and logs any actions that would have been denied, but it does not actually block them. This mode is useful for troubleshooting and policy development, allowing an administrator to review the audit log for potential AVC denials before switching to Enforcing mode, in which violations are actively blocked. Disabled mode turns SELinux off entirely, and Targeted is not a mode but rather a type of policy that only confines specific processes.
NEW QUESTION # 37
When OpenVPN sends a control packet to its peer, it expects an acknowledgement in 2 seconds by default. Which of the following options changes the timeout period to 5 seconds?
- A. -- tls- timer 5
- B. -- tls-timeout 5
- C. -- tls- timeout 500
- D. -- tls- timer 500
Answer: B
NEW QUESTION # 38
Which command, included in BIND, generates DNSSEC keys?
(Specify ONLY the command without any path or parameters.)
Solution: dnssec-keygen
Determine whether the given solution is correct?
- A. Incorrect
- B. Correct
Answer: B
NEW QUESTION # 39
What is a man-in-the-middle attack?
- A. An attack that intercepts communications between two parties to steal information
- B. An attack that targets a specific user or organization
- C. An attack that aims to steal sensitive information
- D. An attack that floods a network or server with traffic to make it unavailable
Answer: A
NEW QUESTION # 40
Which option of the openvpn command should be used to ensure that ephemeral keys are not written to the swap space?
- A. --mlock
- B. --no-swap
- C. --keys-no-swap
- D. --root-swap
Answer: A
NEW QUESTION # 41
What is the purpose of the pam_tally2 or pam_faillock module?
- A. To restrict resource usage per user session.
- B. To require multi-factor authentication.
- C. To track failed login attempts and lock an account after a specified number of failures.
- D. To enforce password expiration policies.
Answer: C
Explanation:
The pam_faillock module (and its older counterpart, pam_tally2) tracks the number of consecutive failed authentication attempts for a user account and can automatically lock the account after a configured threshold is reached, helping to mitigate brute-force password guessing attacks.
Administrators can configure the number of allowed attempts, the lockout duration, and whether the lockout applies even to the root account. This differs from password expiration, which is handled by fields in /etc/shadow and related PAM modules.
NEW QUESTION # 42
Which of the following access control models is established by using SELinux?
- A. Security Access Control (SAC)
- B. User Access Control (UAC)
- C. Discretionary Access Control (DAC)
- D. Mandatory Access Control (MAC)
- E. Group Access Control (GAC)
Answer: D
NEW QUESTION # 43
What is the purpose of a Certificate Revocation List (CRL)?
- A. It lists all valid certificates currently trusted by a client.
- B. It lists certificates that have not yet been issued.
- C. It lists certificates that have been revoked by the issuing CA before their expiration date.
- D. It replaces the need for certificate expiration dates.
Answer: C
Explanation:
A Certificate Revocation List (CRL) is a signed list published by a Certificate Authority that identifies certificates which have been revoked before their scheduled expiration date, for reasons such as key compromise or the certificate no longer being needed. Clients can download and check a CRL to determine whether a certificate they are relying on is still valid, though this approach has largely been supplemented or replaced in many contexts by the more efficient real- time OCSP protocol.
NEW QUESTION # 44
Which file is used to configure AIDE?
- A. /etc/maldet.conf
- B. /etc/aide/aide.conf
- C. /etc/audit/auditd.conf
- D. /etc/rkhunter.conf
Answer: B
NEW QUESTION # 45
What option of mount.cifs specifies the user that appears as the local owner of the files of a mounted CIFS share when the server does not provide ownership information?
(Specify ONLY the option name without any values or parameters.)
Solution: uid=arg
Determine whether the given solution is correct?
- A. Incorrect
- B. Correct
Answer: B
NEW QUESTION # 46
Which of the following statements describes the purpose of ndpmon?
- A. It monitors the network for neighbor discovery messages from new IPv6 hosts and routers.
- B. It monitors the network for IPv4 nodes that have not yet migrated to IPv6.
- C. It monitors remote hosts by periodically sending echo requests to them.
- D. It monitors log files for failed login attempts in order to block traffic from offending network nodes.
- E. It monitors the availability of a network link by querying network interfaces.
Answer: A
NEW QUESTION # 47
Which of the following sections are allowed within the Kerberos configuration file krb5.conf?
(Choose THREE correct answers.)
- A. [crypto]
- B. [plugins]
- C. [capaths]
- D. [domain]
- E. [realms]
Answer: B,C,E
NEW QUESTION # 48
What command is used to update NVTs from the OpenVAS NVT feed? (Specify ONLY the command without any path or parameters).
Solution: openvas-nvt-sync
Determine whether the given solution is correct?
- A. Incorrect
- B. Correct
Answer: B
NEW QUESTION # 49
What is the purpose of the GnuPG "trust level" assigned to a key, as opposed to a signature on that key?
- A. It indicates how strongly the key's authenticity has been verified.
- B. It indicates how much the owner trusts that key's holder to properly verify and sign other people's keys.
- C. It is identical in meaning to a key signature and is redundant.
- D. It determines the key's expiration date.
Answer: B
Explanation:
A trust level in GnuPG is a personal, local judgment about how much a user trusts a particular key's owner to carefully and correctly verify the identity of others before signing their keys. This is distinct from a signature, which asserts that a specific key's authenticity has been verified. Trust levels (such as none, marginal, full, and ultimate) affect how GnuPG calculates the validity of other keys in the web of trust based on the chain of signatures connecting them back to the user's own key.
NEW QUESTION # 50
Which of the following command lines sets the administrator password for ntop to testing 123?
- A. ntop --set-new-password=testing123
- B. ntop --set-admin-password=testing123
- C. ntop --reset-password=testing123
- D. ntop --set-password=testing123
Answer: B
NEW QUESTION # 51
......
303-300 Exam Dumps - Free Demo & 365 Day Updates: https://prepaway.testinsides.top/303-300-dumps-review.html