Free LPIC-3 Exam 303: Security 303-200 Exam Practice Test

When OpenVPN sends a control packet to its peer, it expects an acknowledgement in 2 seconds by default. Which of the following options changes the timeout period to 5 seconds?

• -tls-timeout 5
  
• -tls- timeout 500
  
• -tls- timer 5
  
• -tls- timer 500
  

Which of the following statements are valid wireshark capture filters? {Choose TWO correct answers.)

• port range 10000:tcp-15000:tcp
  
• port-range tcp 10000-15000
  
• tcp portrange 10000-15000
  
• portrange 10000/tcp-15000/tcp
  
• portrange 10000-15000 and tcp
  

What effect does the following command have on TCP packets?iptables- A INPUT -d 10 142 232.1 -p tcp -dport 20:21 -j ACCEPT

• Forward all TCP traffic not on port 20 or 21 to the IP address 10.142 232.1
  
• Drop all TCP traffic coming from 10 142 232.1 destined for port 20 or 21.
  
• Accept only TCP traffic from 10.142 232.1 destined for port 20 or 21.
  
• Accept all TCP traffic on port 20 and 21 for the IP address 10.142.232.1
  

Which of the following components are part of FreeIPA? (Choose THREE correct answers.)

• DHCP Server
  
• Kerberos KDC
  
• Intrusion Detection System
  
• Public Key Infrastructure
  
• Directory Server
  

Linux Extended File Attributes are organized in namespaces. Which of the following names correspond to existing attribute namespaces? (Choose THREE correct answers.)

• default
  
• system
  
• owner
  
• trusted
  
• user
  

Which of the following sections are allowed within the Kerberos configuration file krb5.conf? (Choose THREE correct answers.)

• [plugins]
  
• [crypto]
  
• [domain]
  
• [capaths]
  
• [realms]
  

Which command is used to run a new shell for a user changing the SELinux context? (Specify ONLY the command without any path or parameters.)

Which of the following stanzas is a valid client configuration for FreeRADIUS?

• client pnvate-network-1 { ipaddr = 192 0 2.0/24 password = testing123-1 }
  
• client private-network-1 { ip= 192.0.2.0/24 password-testing123-1 }
  
• client private-network-1 { ip = 192 0 2.0/24 passwd = testing123-1 }
  
• client private-network-1 { ip = 192 0.2.0/24 secret = testingl23-1 }
  
• client private-network-1 { ipaddr = 192 0 2.0/24 secret = testing 123-1}
  

Which of the following methods can be used to deactivate a rule in Snort? (Choose TWO correct answers.)

• By placing a # in front of the rule and restarting Snort
  
• By placing a pass rule in local.rules and restarting Snort.
  
• By deleting the rule and waiting for Snort to reload its rules files automatically.
  
• By adding a pass rule to /etc/snort/rules.deactivated and waiting for Snort to reload its rules files automatically.
  

Which of the following statements are true regarding the certificate of a Root CA? (Choose TWO correct answers.)

• It is a self-signed certificate.
  
• It does not include the private key of the CA
  
• It must contain a host name as the common name.
  
• It has an infinite lifetime and never expires.
  
• It must contain an X509v3 Authority extension.