2023年最新のLpi 303-200試験問題には60問があります [Q21-Q38]

2023年最新のLpi 303-200試験問題には60問があります

無料で使える303-200別格な問題集をダウンロード2023年02月02日に更新された60問があります

Lpi 303-200 認定試験の出題範囲：

トピック	出題範囲
トピック 1	Configure Apache HTTPD with mod_ssl to authenticate users using certificates Understand common transport layer security threats, for example Man-in-the-Middle
トピック 2	Configure and use AIDE, including rule management Configure Apache HTTPD with mod_ssl to provide HTTPS service, including SNI and HSTS
トピック 3	Understand system and configuration prerequisites for installing FreeIPA Configure SSSD authentication against Active Directory, IPA, LDAP, Kerberos and local domains
トピック 4	Understand trust chains and public key infrastructures Candidates should be able to setup and configure encrypted file systems
トピック 5	Understand block device and file system encryption Generate and manage public and private keys
トピック 6	Understand and configure NFSv4 authentication mechanisms Use dm-crypt with LUKS to encrypt block devices
トピック 7	Enforce password complexity policies and periodic password changes Revoke certificates and certification authorities
トピック 8	Lock accounts automatically after failed login attempts Use TSIG for secure communication with BIND
トピック 9	Use eCryptfs to encrypt file systems, including home directories and PAM integration Configure Apache HTTPD with mod_ssl to provide OCSP stapling
トピック 10	Configure and troubleshoot BIND as an authoritative name server serving DNSSEC secured zones Identify and deal with rogue router advertisements and DHCP messages

質問 21
Which option of the openvpn command should be used to ensure that ephemeral keys are not written to the swap space?

A. --mlock
B. --keys-no-swap
C. --root-swap
D. --no-swap

正解: A

解説:
Explanation/Reference:
https://openvpn.net/index.php/open-source/documentation/manuals/65-openvpn-20x-manpage.html

質問 22
How are SELinux permissions related to standard Linux permissions? (Choose TWO correct answers.)

A. SELinux permissions are verified before standard Linux permissions.
B. SELinux permissions overnde standard Linux permissions.
C. standard Linux permissions override SELinux permissions.
D. SELinux permissions are verified after standard Linux permissions.

正解: C,D

質問 23
Which of the following commands makes the contents of the eCryptfs encrypted directory /Private available to the user?

A. ecryptfsclient
B. ecryptfs-mount-private
C. ecryptfs-manage-di rectory
D. decryptfs
E. ecryptfs.mount

正解: B

質問 24
Which of the following types can be specified within the Linux Audit system? (Choose THREE correct answers.)

A. Control rules
B. Network connection rules
C. File system rules
D. Console rules
E. System call rules

正解: A,C,E

解説:
Explanation/Reference:
https://www.digitalocean.com/community/tutorials/how-to-write-custom-system-audit-rules-on-centos-7

質問 25
Which of the following statements is true regarding eCryptfs?

A. For every file in an eCryptfs directory there exists a corresponding file that contains the encrypted content.
B. The content of all files in an eCryptfs directory is stored in an archive file similar to a tar file with an additional index to improve performance.
C. When a user changes his login password, the contents of his eCryptfs home directory has to be re- encrypted using his new login password.
D. After unmounting an eCryptfs directory, the directory hierarchy and the original file names are still visible, although, it is not possible to view the contents of the files.
E. eCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux user.

正解: E

解説:
Explanation/Reference:
https://help.ubuntu.com/lts/serverguide/ecryptfs.html

質問 26
Which of the following lines in an OpenSSL configuration adds an X 509v3 Subject Alternative Name extension for the host names example.org and www.example.org to a certificate'?

A. subjectAltName = DNS: www example.org, DNS:example.org
B. subject= CN= www.example.org, CN=example.org
C. commonName = subjectAltName= www.example.org, subjectAltName = example.org
D. subjectAltName: www.example.org, subjectAltName: example.org
E. extension= SAN: www.example.org, SAN:example.org

正解: A

質問 27
CORRECT TEXT
What option of mount.cifs specifies the user that appears as the local owner of the files of a mounted CIFS share when the server does not provide ownership information? (Specify ONLY the option name without any values or parameters.)

正解:

解説:
uld=arg
http://linux.die.net/man/8/mount.cifs

質問 28
Which of the following commands adds users using SSSD's local service?

A. sss_local_adduser
B. sss_adduser
C. sss_useradd
D. sss-addlocaluser
E. sss_add

正解: C

解説:
Explanation/Reference:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/System- Level_Authentication_Guide/managing-sssd.html

質問 29
Which of the following commands disables the automatic password expiry for the user usera?

A. chage --maxdays none usera
B. chage -maxdays 99 usera
C. chage --lastday none usera
D. chage --lastday 0 usera
E. chage --maxdays -1 usera

正解: E

質問 30
CORRECT TEXT
Which command is used to run a new shell for a user changing the SELinux context? (Specify ONLY the command without any path or parameters.)

正解:

解説:
newrole
https://www.centos.ofg/docs/5/html/DeployrnenLGuide-en-US/sec-sel-admincontrol.html

質問 31
Which of the following statements are true regarding the certificate of a Root CA? (Choose TWO correct answers.)

A. It must contain an X509v3 Authority extension.
B. It is a self-signed certificate.
C. It must contain a host name as the common name.
D. It does not include the private key of the CA.
E. It has an infinite lifetime and never expires.

正解: A,B,D

解説:
Explanation/Reference:
https://en.wikipedia.org/wiki/Root_certificate

質問 32
Which of the following DNS record types can the command dnssec-signzone add to a zone? (Choose THREE correct answers.)

A. NSEC3
B. NSEC
C. ASIG
D. NSSIG
E. RRSIG

正解: A,B,E

質問 33
Which of the following command lines sets the administrator password for ntop to testing 123?

A. ntop --set-admin-password=testing123
B. ntop --reset-password=testing 123
C. ntop --set-new-password=testing123
D. ntop --set-password-testing123

正解: A

質問 34
Which of the following database names can be used within a Name Service Switch (NSS) configuration file? (Choose THREE correct answers).

A. shadow
B. service
C. host
D. passwd
E. group

正解: B,C,E

質問 35
Which of the following authentication methods was added to NFS in version 4?

A. SSH hostkey authentication
B. SSL certificate authentication
C. Kerberos authentication
D. Winbind authentication

正解: C

解説:
Explanation/Reference:
https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-nfs-security.html

質問 36
What is the purpose of IP sets?

A. They group together IP addresses and user names that can be referenced from /etc/hosts.allow and / etc/hosts.deny
B. They group together IP and MAC addresses used by the neighbors on the local network.
C. They group together IP addresses that are assigned to the same network interfaces.
D. They group together IP addresses and networks that can be referenced by the network routing table.
E. They group together IP addresses that can be referenced by netfilter rules.

正解: E

解説:
Explanation/Reference:
http://ipset.netfilter.org/

質問 37
Which of the following command lines sets the administrator password for ntop to testing 123?