最新版を今すぐ試そう！[2023年04月] 試験準備には欠かさない！303-200問題集 [Q24-Q39]

最新版を今すぐ試そう！[2023年04月] 試験準備には欠かさない！303-200問題集

有能な受験者がシミュレーション済みの303-200試験PDF問題を試そう

Lpi 303-200 認定試験の出題範囲：

トピック	出題範囲
トピック 1	Understand and configure NFSv4 authentication mechanisms Use dm-crypt with LUKS to encrypt block devices
トピック 2	Understand block device and file system encryption Generate and manage public and private keys
トピック 3	Use eCryptfs to encrypt file systems, including home directories and PAM integration Configure Apache HTTPD with mod_ssl to provide OCSP stapling
トピック 4	Understand and manage mapping and handling of CIFS ACLs and SIDs in a Linux system Key generation, key storage, key management and key rollover
トピック 5	Configure and troubleshoot BIND as an authoritative name server serving DNSSEC secured zones Identify and deal with rogue router advertisements and DHCP messages
トピック 6	Lock accounts automatically after failed login attempts Use TSIG for secure communication with BIND
トピック 7	Configure and use AIDE, including rule management Configure Apache HTTPD with mod_ssl to provide HTTPS service, including SNI and HSTS

 

質問 24
Which of the following components are part of FreeIPA? (Choose THREE correct answers.)

• A. Kerberos KDC
• B. Intrusion Detection System
• C. Public Key Infrastructure
• D. Directory Server
• E. DHCP Server

正解: A,C,D

解説:
Explanation/Reference:
https://www.freeipa.org/page/Documentation

 

質問 25
Which of the following statements is true regarding eCryptfs?

• A. When a user changes his login password, the contents of his eCryptfs home directory has to be re- encrypted using his new login password.
• B. eCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux user.
• C. For every file in an eCryptfs directory there exists a corresponding file that contains the encrypted content.
• D. After unmounting an eCryptfs directory, the directory hierarchy and the original file names are still visible, although, it is not possible to view the contents of the files.
• E. The content of all files in an eCryptfs directory is stored in an archive file similar to a tar file with an additional index to improve performance.

正解: B

解説:
Explanation/Reference:
https://help.ubuntu.com/lts/serverguide/ecryptfs.html

 

質問 26
Which of the following access control models is established by using SELinux?

• A. Group Access Control (GAC)
• B. User Access Control (UAC)
• C. Mandatory Access Control (MAC)
• D. Security Access Control (SAC)
• E. Discretionary Access Control (DAC)

正解: C

 

質問 27
CORRECT TEXT
Which command installs and configures a new FreelPA server, including all subcomponents, and creates a new FreelPA domain? (Specially ONLY the command without any path or parameters).

正解:

解説:
ipa-server-install
https://www.freeipa.org/images/2/2b/lnstallation_and_Deployment.Guidep.pdf

 

質問 28
SIMULATION
Which command, included in BIND, generates DNSSEC keys? (Specify ONLY the command without any path or parameters.)

正解:

解説:
dnssec-keygen
Explanation/Reference:
http://ripe60.ripe.net/presentations/Damas-BIND_9.7_-_DNSSE_for_humans.pdf

 

質問 29
Which of the following statements are true regarding the certificate? (Choose THREE correct answers.)

• A. This certificate will not be accepted by programs that do not understand the listed extension
• B. This certificate may be used to sign certificates that are not also a certification authority
• C. This certificate may never be used to sign any other certificates
• D. This certificate belongs to a certification authority.
• E. This certificate may be used to sign certificates of subordinate certification authorities.

正解: B,D,E

 

質問 30
Which of the following terms refer to existing scan techniques with nmap? (Choose TWO correct answers.)

• A. IP Scan
• B. UDP SYN Scan
• C. Xmas Scan
• D. FIN Scan
• E. Zero Scan

正解: C,D

解説:
Explanation/Reference:
https://nmap.org/book/man-port-scanning-techniques.html

 

質問 31
CORRECT TEXT
Which option in an Apache HTTPD configuration file enables OCSP stapling? (Specify ONLY the option name without any values or parameters.)

正解:

解説:
httpd-ssl.conf

 

質問 32
Which of the following terms refer to existing scan techniques with nmap? (Choose TWO correct answers.)

• A. IP Scan
• B. UDP SYN Scan
• C. Xmas Scan
• D. FIN Scan
• E. Zero Scan

正解: C,D

 

質問 33
CORRECT TEXT
Which PAM module checks new passwords against dictionary words and enforces complexity? (Specially the module name only without any path.)

正解:

解説:
pam_cracklib
http;//www-deer-run.com/~hal/sysadmin/pam_cracklib.html

 

質問 34
SIMULATION
What option of mount.cifs specifies the user that appears as the local owner of the files of a mounted CIFS share when the server does not provide ownership information? (Specify ONLY the option name without any values or parameters.)

正解:

解説:
uid=arg
Explanation/Reference:
http://linux.die.net/man/8/mount.cifs

 

質問 35
SIMULATION
Which command included in the Linux Audit system provides searching and filtering of the audit log?
(Specify ONLY the command without any path or parameters.)

正解:

解説:
ausearch
Explanation/Reference:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security- Enhanced_Linux/sect-Security-Enhanced_Linux-Fixing_Problems-
Searching_For_and_Viewing_Denials.html

 

質問 36
When OpenVPN sends a control packet to its peer, it expects an acknowledgement in 2 seconds by default. Which of the following options changes the timeout period to 5 seconds?

• A. -tls- timer 5
• B. -tls- timeout 500
• C. -tls-timeout 5
• D. -tls- timer 500

正解: C

 

質問 37
Which of the following statements is true regarding eCryptfs?

• A. eCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux user.
• B. For every file in an eCryptfs directory there exists a corresponding file that contains the encrypted content.
• C. When a user changes his login password, the contents of his eCryptfs home directory has to be re-encrypted using his new login password.
• D. After unmounting an eCryptfs directory, the directory hierarchy and the original file names are still visible, although, it is not possible to view the contents of the files.
• E. The content of all files in an eCryptfs directory is stored in an archive file similar to a tar file with an additional index to improve performance.

正解: A

 

質問 38
Which of the following keywords are built-in chairs for the iptables nat table? (Choose THREE correct answers.)

• A. PREROUTING
• B. PROCESSING
• C. POSTROUTING
• D. MASQUERADE
• E. OUTPUT

正解: A,C,E

解説:
Explanation/Reference:
http://linux.die.net/man/8/ebtables

 

質問 39
......

検証済み材料を使うならまず303-200テストエンジンを試そう：https://jp.fast2test.com/303-200-premium-file.html