LPIC-3_Part-Final

Which permission bit allows a user to delete a file?. Read. Write. Execute. SetUID.

Which of the following is an example of an HID tool?. Which of the following is an example of an HID tool?. Firewall. Security information and event management (SIEM) system. Intrusion prevention system (IPS).

What is the primary purpose of Online Certificate Status Protocol (OCSP)?. To encrypt data in transit between a client and server. To allow a client to check the revocation status of a specific X.509 certificate in real time. To generate new X.509 certificates automatically. To distribute the full Certificate Revocation List to all clients.

What is the purpose of a Certificate Authority (CA)?. To issue and sign X.509 certificates. To encrypt X.509 certificates. To decrypt X.509 certificates. To store X.509 certificates.

What is the purpose of DNS over TLS and DNS over HTTPS?. To improve DNS performance. To provide secure communication between DNS clients and servers. To reduce DNS query times. To allow DNS servers to communicate securely with each other.

What is an X.509 Certificate?. A digital document that verifies the identity of a website. A digital document that verifies the identity of a person. A digital document that verifies the identity of a device. A digital document that verifies the identity of a company.

What is the purpose of an access control list in Linux?. To specify fine-grained permissions for users and groups. To encrypt a file for secure transmission. To compress a file to save disk space. To mark a file as executable.

Which of the following statements is used in a parameter file for setkey in order to create a new SPD entry?. spd. addspd. newspd. spdnew. spdadd.

What is privilege escalation?. An attack that targets a specific user or organization. An attack that aims to steal sensitive information. An attack that exploits a vulnerability to gain elevated privileges. An attack that floods a network or server with traffic to make it unavailable.

What is the purpose of NSEC3 in DNSSEC?. To provide information about DNSSEC key signing keys. To prevent zone enumeration. To authenticate a DNS server. To sign a DNS zone.

Which of the following access control models is established by using SELinux?. Security Access Control (SAC). Group Access Control (GAC). User Access Control (UAC). Discretionary Access Control (DAC). Mandatory Access Control (MAC).

Which of the following DNS records is used to map an IP address to a hostname?. PTR. SOA. NS. A.

Which Linux kernel feature restricts a process's access to a subset of system calls, commonly used by container runtimes and sandboxing tools to reduce attack surface?. cgroups. seccomp. namespaces. capabilities.

Which command is used to set the owner and group of a file in Linux?. chown. chmod. chgrp. setfacl.

What effect does the following command have on TCP packets? iptables- A INPUT d 10.142.232.1 p tcp --dport 20:21 j ACCEPT. Forward all TCP traffic not on port 20 or 21 to the IP address 10.142.232.1. Drop all TCP traffic coming from 10.142.232.1 destined for port 20 or 21. Accept only TCP traffic from 10.142.232.1 destined for port 20 or 21. Accept all TCP traffic on port 20 and 21 for the IP address 10.142.232.1.

Which of the following command lines sets the administrator password for ntop to testing 123?. ntop --set-admin-password=testing123. ntop --set-password=testing123. ntop --reset-password=testing123. ntop --set-new-password=testing123.

inux Extended File Attributes are organized in namespaces. Which of the following names correspond to existing attribute namespaces?(Choose THREE correct answers.). default. system. owner. trusted. user.

What is the purpose of the "ausearch" command in relation to the Linux audit framework?. To add new audit rules to the running kernel. To search and filter existing audit log entries based on criteria such as key, user, or time range. To generate summary reports of audit statistics. To restart the auditd service.

Which protocol is commonly used to transmit X.509 certificates?. HTTPS. FTPS. SMTPS. LDAP.

Which command is used to relabel files according to the currently loaded SELinux policy?. chcon. restorecon. semanage. setsebool.

What is the purpose of a DNSKEY record in DNSSEC?. To verify the authenticity of a DNS query. To sign a DNS zone. To provide information about a DNS server. To map an IP address to a hostname.

What is a honeypot?. A type of virus. A network security tool designed to lure attackers into a trap. A type of phishing scam. A type of denial-of-service attack.

Which file is used to configure rkhunter?. /etc/rkhunter.conf. /etc/audit/auditd.conf. /etc/aide/aide.conf. /etc/maldet.conf.

What is the primary function of an Intrusion Detection System (IDS) such as Snort or Suricata operating in network-based mode?. To actively block malicious traffic before it reaches its destination. To passively monitor network traffic and generate alerts based on signature or anomaly-based detection rules. To encrypt network traffic between hosts. To perform DNS resolution for network hosts.

What is host intrusion detection (HID)?. A system that detects malicious traffic on a network. A system that monitors and detects potential security threats on a single computer or server. A system that prevents malware from infecting a network. A system that scans files and folders for viruses.

Which command included in the Linux Audit system provides searching and filtering of the audit log? (Specify ONLY the command without any path or parameters.).

How does TSIG authenticate name servers in order to perform secured zone transfers?. Both servers mutually verify their X509 certificates. Both servers use a secret key that is shared between the servers. Both servers verify appropriate DANE records for the labels of the NS records used to delegate the transferred zone. Both servers use DNSSEC to mutually verify that they are authoritative for the transferred zone.

Which directive is used in an OpenVPN server configuration in order to send network configuration information to the client? (Specify ONLY the option name without any values or parameters.).

Which of the following parameters to openssl s_client specifies the host name to use for TLS Server Name Indication?. -tlsname. -servername. -sniname. -vhost. -host.

In GnuPG's web of trust model, what does it mean when User A signs User B's public key?. User A is granting User B permission to decrypt User A's messages. User A is vouching that they have verified the authenticity of User B's public key and its association with User B's identity. User A's private key is now shared with User B. User B's key is automatically revoked.

Which of the following is used to perform DNSSEC validation on behalf of clients?. Recursive name server. Authoritative name server. Secondary name server. Primary name server.

Which of the following commands adds users using SSSD's local service?. sss_adduser. sss_useradd. sss_add. sss-addlocaluser. sss_local_adduser.

Which command installs and configures a new FreeIPA server, including all subcomponents, and creates a new FreeIPA domain? (Specially ONLY the command without any path or parameters).

Which option of the openvpn command should be used to ensure that ephemeral keys are not written to the swap space?. --mlock. --no-swap. --root-swap. --keys-no-swap.

Given a proper network and name resolution setup, which of the following commands establishes a trust between a FreeIPA domain and an Active Directory domain?. ipa trust-add --type ad addom --admin Administrator --password. ipa-ad -add-trust --account ADDOM\Administrator--query-password. net ad ipajoin addom -U Administrator -p. trustmanager add --domain ad: //addom --user Administrator -w. ipa ad join addom -U Administrator -w.

Which nftables command displays the currently active ruleset, including all tables, chains, and rules?. nft list ruleset. nft show tables. nft dump chains. nft get rules.

Which of the following terms refer to existing scan techniques with nmap? (Choose TWO correct answers.). Xmas Scan. Zero Scan. FIN Scan. IP Scan. UDP SYN Scan.

What is the purpose of AIDE?. To manage system log files. To detect intrusions and system changes. To manage installed packages. To automate host scans.

Which OpenVPN configuration directive specifies that the tunnel should operate at Layer 3, routing IP packets rather than bridging Ethernet frames?. dev tap. dev tun. proto udp. topology subnet.

Which of the following expressions are valid AIDE rules? (Choose TWO correct answers.). !/var/run/.*. append: /var/log/*. /usr=all. #/bin/. /etc p+i+u+g.

What is the purpose of rkhunter?. To manage system log files. To detect rootkits and other security threats. To manage installed packages. To automate host scans.

Which command is used to set the owner and group of a file in Linux?. chown. chgrp. setfacl. chmod.

What is Linux Malware Detect?. A package management tool. A tool to automate host scans. A tool to detect malware on a Linux system. A configuration management tool.

Which of the following resources of a shell and its child processes can be controlled by the Bash build- in command ulimit? (Choose THREE correct answers.). The maximum size of written files. The maximum number of open file descriptors. The maximum number of newly created files. The maximum number of environment variables. The maximum number of user processes.

Which PAM module can be used to restrict login access based on the combination of user, origin, and service?. pam_access. pam_limits. pam_nologin. pam_selinux.

Which command is used to view the access control list of a file?. chmod. getfacl. setfacli.

Which OpenSSL command generates a new RSA private key and a corresponding Certificate Signing Request (CSR) in a single step?. openssl genpkey -algorithm RSA. openssl req -new -newkey rsa:2048 -keyout key.pem -out req.csr. openssl x509 -req -in key.pem. openssl ca -in req.csr.

What is a plaintext?. The original message before encryption. The encrypted message. The key used to encrypt the message. The algorithm used to encrypt the message.

What is the purpose of performing a TCP SYN scan (nmap -sS) rather than a full TCP connect scan (nmap -sT)?. A SYN scan is slower but more accurate than a connect scan. A SYN scan does not complete the full TCP three-way handshake, making it faster and less likely to be logged by the target application. A SYN scan can only be used against UDP services. There is no difference between the two scan types.

In an AppArmor profile, what does the "complain" mode do?. It blocks all restricted actions and terminates the process. It logs policy violations without enforcing restrictions, similar to SELinux permissive mode. It disables AppArmor for that specific profile only. It automatically generates a new profile based on observed behavior.

What is phishing?. A type of social engineering attack. A type of malware that disguises itself as legitimate software. A type of denial-of-service attack. A type of virus.

Which of the following statements are valid wireshark capture filters? (Choose TWO correct answers.). port range 10000:tcp-15000:tcp. port-range tcp 10000-15000. tcp portrange 10000-15000. portrange 10000/tcp-15000/tcp. portrange 10000-15000 and tcp.

Which of the following sections are allowed within the Kerberos configuration file krb5.conf? (Choose THREE correct answers.). [plugins]. [crypto]. [domain]. [capaths]. [realms].