LPI Level 3 Exam 303
科目の受験時間は90分あります。多くの受験者にヒアリングした限り、117-303試験で時間が不足した方はたくさんいるようです。今KILLTESTは解決策を出して、117-303
問題集の最新版をリリースしました。117-303を取るのは企業にとって有能な者の手に委ねることで、投資を保護できます。企業にとって有能な者の手に委ねることで、投資を保護できます。これから117-303無料
問題集を提供します
1. An administrator has just configured an OpenVPN client. Upon starting the service, the following
message is displayed:
TLS Error: TLS key negotiation failed to occur within 60 seconds
Which of the following statements is true?
A. The client was unable to establish a network connection with the server.
B. The client was able to establish a network connection with the server, however TLS key negotiation
failed, resulting in a fallback to SSL.
C. The client was able to establish a network connection with the server, however TLS and SSL security
are not enabled.
D. The client was able to establish a network connection with the server, however TLS key negotiation
took longer than 60 seconds, indicating that there may be a problem with network performance.
Answer: A
2. SELinux has just been installed on a Linux system and the administrator wants to use SELinux in
permissive mode in order to audit the various services on the system. What command will switch
SELinux into permissive mode?
A. setenforce 0
B. /etc/init.d/selinux stop
C. selinux passive
D. /etc/init.d/selinux startpassive
Answer: A
3. Which of the following export options, when specified in /etc/exports, will tell the server to use the
NFSv4 Pseudofilesystem?
A. fsid=2
B. fsid=0
C. fsid=3
D. fsid=1
Answer: B
4. Which of the following are common techniques for securing a sendmail server? (Select THREE correct
answers)
A. Maintain user accounts in an LDAP directory.
B. Enable TLS.
C. Disable VRFY.
D. Run sendmail in a chroot'd environment.
E. Disable USRLKUP.
Answer: BCD
5. What does ntop use for data collection?
A. Network packets
B. Log files
C. Frame relay
D. SNMP
Answer: A
6. An administrator has successfully configured a cryptographic volume for dmcrypt, and has added the
following line to /etc/fstab:
/dev/mapper/cryptvol /media/crypt auto defaults 0 0
Upon booting the system, the error message "mount: special device /dev/mapper/cryptvol does not exist"
is displayed. What configuration file has the administrator forgotten to edit? (Provide the full path and
filename)
Answer: /etc/crypttab
7. What command will remove the dmcrypt mapping named cryptvol? (Provide the command with any
options and parameters)
Answer: /sbin/cryptsetup remove crypt-vol cryptsetup remove crypt-vol
8. Which LUKS action, when supplied to the cryptsetup command, will initialize a LUKS partition and set
the initial key? (Provide only the action name)
Answer: luksFormat
1. An administrator has just configured an OpenVPN client. Upon starting the service, the following
message is displayed:
TLS Error: TLS key negotiation failed to occur within 60 seconds
Which of the following statements is true?
A. The client was unable to establish a network connection with the server.
B. The client was able to establish a network connection with the server, however TLS key negotiation
failed, resulting in a fallback to SSL.
C. The client was able to establish a network connection with the server, however TLS and SSL security
are not enabled.
D. The client was able to establish a network connection with the server, however TLS key negotiation
took longer than 60 seconds, indicating that there may be a problem with network performance.
Answer: A
2. SELinux has just been installed on a Linux system and the administrator wants to use SELinux in
permissive mode in order to audit the various services on the system. What command will switch
SELinux into permissive mode?
A. setenforce 0
B. /etc/init.d/selinux stop
C. selinux passive
D. /etc/init.d/selinux startpassive
Answer: A
3. Which of the following export options, when specified in /etc/exports, will tell the server to use the
NFSv4 Pseudofilesystem?
A. fsid=2
B. fsid=0
C. fsid=3
D. fsid=1
Answer: B
4. Which of the following are common techniques for securing a sendmail server? (Select THREE correct
answers)
A. Maintain user accounts in an LDAP directory.
B. Enable TLS.
C. Disable VRFY.
D. Run sendmail in a chroot'd environment.
E. Disable USRLKUP.
Answer: BCD
5. What does ntop use for data collection?
A. Network packets
B. Log files
C. Frame relay
D. SNMP
Answer: A
6. An administrator has successfully configured a cryptographic volume for dmcrypt, and has added the
following line to /etc/fstab:
/dev/mapper/cryptvol /media/crypt auto defaults 0 0
Upon booting the system, the error message "mount: special device /dev/mapper/cryptvol does not exist"
is displayed. What configuration file has the administrator forgotten to edit? (Provide the full path and
filename)
Answer: /etc/crypttab
7. What command will remove the dmcrypt mapping named cryptvol? (Provide the command with any
options and parameters)
Answer: /sbin/cryptsetup remove crypt-vol cryptsetup remove crypt-vol
8. Which LUKS action, when supplied to the cryptsetup command, will initialize a LUKS partition and set
the initial key? (Provide only the action name)
Answer: luksFormat