Free LPIC-3 Exam 303: Security 303-200 Exam Practice Test

Which of the following commands changes the source IP address to 192.0.2.11 for all IPv4 packets which go through the network interface eth0?

• iptables ~t nat -A POSTROUTING ~o eth0 -j SNAT -to-source 192.0.2.11
  
• iptables ~t nat -A PREROUT1NG -\ eth0 -j SNAT -to-source 192.0.2.11
  
• iptables -t nat -A POSTROUTING H eth0 -j DNAT -to-source 192.0.2.11
  
• iptables -t mangle -A POSTROUTING -i eth0 -j SNAT -to-source 192.0.2.11
  
• iptables -t mangle -A POSTROUTING -0 eth0 -j SNAT -to-source 192.0.2.11
  

Which of the following commands adds a new user usera to FreelPA?

• useradd usera --directory ipa --gecos *User A'
  
• idap- useradd --H ldaps://ipa-server CN=UserA --attribs 'Firstname: User: Lastname: A'
  
• ipa-admin create user --account usera -_fname User --iname A
  
• ipa user-add usera --first User --last A
  
• ipa-user- add usera --name 'User A'
  

Which of the following commands disables the automatic password expiry for the user usera?

• chage --maxdays none usera
  
• chage --maxdays 99 usera
  
• chage --maxdays -1 usera
  
• chage --lastday none usera
  
• chage --lastday 0 usera
  

Which of the following commands makes the contents of the eCryptfs encrypted directory -/Private available to the user?

• ecryptfsclient
  
• ecryptfs.mount
  
• ecryptfs-mount-private
  
• decryptfs
  
• ecryptfs-manage-di rectory
  

What happens when the command getfattr afile is run while the file afile has no extended attributes set?

• getfattr prints a warning and exits with a values of 0.
  
• getfattr prints a warning and exits with a value of 1.
  
• No output is produced and getfattr exits with a value of 0.
  
• No outputs is produced and getfattr exits with a value of 1
  

Which command, included in BIND, generates DNSSEC keys? (Specify ONLY the command without any path or parameters.)

Which of the following information, within a DNSSEC- signed zone, is signed by the key signing key?

• The non-DNSSEC records like A, AAAA or MX
  
• The zone signing key of the zone.
  
• The RRSIG records of the zone.
  
• The NSEC or NSEC3 records of the zone.
  
• The DS records pointing to the zone
  

Linux Extended File Attributes are organized in namespaces. Which of the following names correspond to existing attribute namespaces? (Choose THREE correct answers.)

• default
  
• system
  
• owner
  
• trusted
  
• user
  

Which of the following statements is true about chroot environments?

• Symbolic links to data outside the chroot path are followed, making files and directories accessible
  
• Hard links to files outside the chroot path are not followed, to increase security
  
• The chroot path needs to contain all data required by the programs running in the chroot environment
  
• Programs are not able to set a chroot path by using a function call, they have to use the command chroot
  
• When using the command chroot, the started command is running in its own namespace and cannot communicate with other processes
  

What effect does the following command have on TCP packets?iptables- A INPUT -d 10 142 232.1 -p tcp -dport 20:21 -j ACCEPT

• Forward all TCP traffic not on port 20 or 21 to the IP address 10.142 232.1
  
• Drop all TCP traffic coming from 10 142 232.1 destined for port 20 or 21.
  
• Accept only TCP traffic from 10.142 232.1 destined for port 20 or 21.
  
• Accept all TCP traffic on port 20 and 21 for the IP address 10.142.232.1