Lpi 303-200 Dumps – The Sure Way To Pass Exam [Q30-Q54]

ExamBoosts September 25, 2022 303-200 > Lpi 0

Rate this post

Lpi 303-200 Dumps – The Sure Way To Pass Exam

303-200 Exam Questions (Updated 2022) 100% Real Question Answers

NEW QUESTION 30
Which of the following statements are true regarding the certificate of a Root CA? (Choose TWO correct answers.)

It is a self-signed certificate.

It does not include the private key of the CA

It must contain a host name as the common name.

It has an infinite lifetime and never expires.

It must contain an X509v3 Authority extension.

NEW QUESTION 31
SIMULATION
What option of mount.cifs specifies the user that appears as the local owner of the files of a mounted CIFS share when the server does not provide ownership information? (Specify ONLY the option name without any values or parameters.)

uid=arg
Explanation/Reference:
http://linux.die.net/man/8/mount.cifs

NEW QUESTION 32
Which option of the openvpn command should be used to ensure that ephemeral keys are not written to the swap space?

–mlock

–no-swap

–root-swap

–keys-no-swap

Explanation/Reference:
https://openvpn.net/index.php/open-source/documentation/manuals/65-openvpn-20x-manpage.html

NEW QUESTION 33
An X509 certificate contains the following information:
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
Which of the following statements are true regarding the certificate? (Choose THREE correct answers.)

This certificate belongs to a certification authority.

This certificate may be used to sign certificates of subordinate certification authorities.

This certificate may never be used to sign any other certificates.

This certificate may be used to sign certificates that are not also a certification authority.

This certificate will not be accepted by programs that do not understand the listed extension.

Explanation/Reference:
https://en.wikipedia.org/wiki/X.509

NEW QUESTION 34
Which of the following database names can be used within a Name Service Switch (NSS) configuration file? (Choose THREE correct answers).

host

shadow

service

passwd

group

Explanation/Reference:
https://docs.oracle.com/cd/E26502_01/html/E29002/a12swit-89620.html#a12swit-84565

NEW QUESTION 35
Which of the following statements are true regarding the certificate of a Root CA? (Choose TWO correct answers.)

It is a self-signed certificate.

It does not include the private key of the CA.

It must contain a host name as the common name.

It has an infinite lifetime and never expires.

It must contain an X509v3 Authority extension.

Explanation/Reference:
https://en.wikipedia.org/wiki/Root_certificate

NEW QUESTION 36
SIMULATION
Which directive is used in an OpenVPN server configuration in order to send network configuration information to the client? (Specify ONLY the option name without any values or parameters.)

push
Explanation/Reference:
https://community.openvpn.net/openvpn/wiki/RoutedLans

NEW QUESTION 37
SIMULATION
What command is used to update NVTs from the OpenVAS NVT feed? (Specify ONLY the command without any path or parameters).

openvas-nvt-sync
Explanation/Reference:
http://www.openvas.org/openvas-nvt-feed.html

NEW QUESTION 38
What effect does the following command have on TCP packets?
iptables- A INPUT -d 10.142.232.1 -p tcp –dport 20:21 -j ACCEPT

Forward all TCP traffic not on port 20 or 21 to the IP address 10.142.232.1

Drop all TCP traffic coming from 10.142.232.1 destined for port 20 or 21.

Accept only TCP traffic from 10.142.232.1 destined for port 20 or 21.

Accept all TCP traffic on port 20 and 21 for the IP address 10.142.232.1

Explanation/Reference:
https://help.ubuntu.com/community/IptablesHowTo

NEW QUESTION 39
Which of the following commands displays all ebtable rules contained in the table filter including their packet and byte counters?

ebtables -t nat -L -v

ebtables -L -t filter -Lv

ebtables -t filter -L –Lc

ebtables -t filter -Ln -L

ebtables -L -Lc -t filter

Explanation/Reference:
http://www.microhowto.info/troubleshooting/troubleshooting_ethernet_bridging_on_linux.html

NEW QUESTION 40
Which DNS label points to the DANE information used to secure HTTPS connections to https://www.example.com/?

example.com

dane.www.example.com

soa.example com

www.example.com

_443_tcp.www example.com

NEW QUESTION 41
Which of the following statements are valid wireshark capture filters? (Choose TWO correct answers.)

port range 10000:tcp-15000:tcp

port-range tcp 10000-15000

tcp portrange 10000-15000

portrange 10000/tcp-15000/tcp

portrange 10000-15000 and tcp

Explanation/Reference:
https://wiki.wireshark.org/CaptureFilters

NEW QUESTION 42
What effect does the following command have on TCP packets?
iptables- A INPUT -d 10 142 232.1 -p tcp -dport 20:21 -j ACCEPT

Forward all TCP traffic not on port 20 or 21 to the IP address 10.142 232.1

Drop all TCP traffic coming from 10 142 232.1 destined for port 20 or 21.

Accept only TCP traffic from 10.142 232.1 destined for port 20 or 21.

Accept all TCP traffic on port 20 and 21 for the IP address 10.142.232.1

LPI 303-200 : Practice Test

NEW QUESTION 43
Which of the following commands adds a new user usera to FreelPA?

useradd usera –directory ipa –gecos *User A”

idap- useradd –H ldaps://ipa-server CN=UserA –attribs “Firstname: User: Lastname: A”

ipa-admin create user –account usera -_fname User –iname A

ipa user-add usera –first User –last A

ipa-user- add usera –name “User A”

NEW QUESTION 44
Which of the following openssl commands generates a certificate signing request (CSR) using the already existing private key contained in the file private/keypair.pem?

openssl req -key private/keypair.pem -out req/csr.pem

openssl req – new -key private/keypair.pem -out req/csr.pem

openssl gencsr -key private/keypair.pem -out req/csr.pem

openssl gencsr -new- key private/keypair.pem -out req/csr.pem

Explanation/Reference:
https://www.openssl.org/docs/manmaster/apps/req.html#EXAMPLES

NEW QUESTION 45
How does TSIG authenticate name servers in order to perform secured zone transfers?

Both servers mutually verify their X509 certificates.

Both servers use a secret key that is shared between the servers.

Both servers verify appropriate DANE records for the labels of the NS records used to delegate the transferred zone.

Both servers use DNSSEC to mutually verify that they are authoritative for the transferred zone.

Explanation/Reference:
http://www.cyberciti.biz/faq/unix-linux-bind-named-configuring-tsig/

NEW QUESTION 46
Which of the following statements is used in a parameter file for setkey in order to create a new SPD entry?

spd

addspd

newspd

spdnew

spdadd

NEW QUESTION 47
CORRECT TEXT
What command is used to update NVTs from the OpenVAS NVT feed? (Specify ONLY the command without any path or parameters).

openvas-nvt-sync
http://www.openvas.org/openvas-nvt-feed.html

NEW QUESTION 48
Which of the following sections are allowed within the Kerberos configuration file krb5.conf? (Choose THREE correct answers.)

[plugins]

[crypto]

[domain]

[capaths]

[realms]

Explanation/Reference:
http://linux.die.net/man/5/krb5.conf

NEW QUESTION 49
in which path is the data, which can be altered by the sysctl command, accessible?

/dev/sys/

/sys/

/proc/sys/

/sysctl/

NEW QUESTION 50
When OpenVPN sends a control packet to its peer, it expects an acknowledgement in 2 seconds by default. Which of the following options changes the timeout period to 5 seconds?

-tls-timeout 5

-tls- timeout 500

-tls- timer 5

-tls- timer 500

NEW QUESTION 51
Which of the following DNS record types can the command dnssec-signzone add to a zone? (Choose THREE correct answers.)

ASIG

NSEC

NSEC3

NSSIG

RRSIG

NEW QUESTION 52
Which of the following keywords are built-in chairs for the iptables nat table? (Choose THREE correct answers)

OUTPUT

MASQUERADE

PROCESSING

POSTROUTING

PREROUTING

NEW QUESTION 53
Which of the following commands adds a new user usera to FreeIPA?

useradd usera –directory ipa –gecos “User A”

idap- useradd -H Idaps://ipa-server CN=UserA –attribs
“Firstname: User: Lastname: A”

ipa-admin create user –account usera –fname User –iname A

ipa user-add usera –first User –last A

ipa-user- add usera –name “User A”

Explanation/Reference:
https://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/adding-users.html

NEW QUESTION 54
CORRECT TEXT
Which command installs and configures a new FreelPA server, including all subcomponents, and creates a new FreelPA domain? (Specially ONLY the command without any path or parameters).

ipa-server-install
https://www.freeipa.org/images/2/2b/lnstallation_and_Deployment.Guidep.pdf

Loading …