Free 303-200: LPIC-3 Exam 303: Security, version 2.0 Exam Questions and Answers

Last updated: September 19, 2026

Exam code

303-200

Provider

LPI

Questions in our bank

1000+

Free to read

First 10, with answers

Our test mode duration & pass mark

130 mins · 70%

Verified answers

Reviewed weekly

Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.

1. Question #1

   Which of the following access control models is established by using SELinux?

   • A. Security Access Control (SAC)
   • B. Group Access Control (GAC)
   • C. User Access Control (UAC)
   • D. Discretionary Access Control (DAC)
   • E. Mandatory Access Control (MAC)
   Reveal Answer

2. Question #2

   What happens when the command getfattr afile is run while the file afile has no extended attributes set?

   • A. getfattr prints a warning and exits with a values of 0.
   • B. getfattr prints a warning and exits with a value of 1.
   • C. No output is produced and getfattr exits with a value of 0.
   • D. No outputs is produced and getfattr exits with a value of 1
   Reveal Answer

3. Question #3

   How are SELinux permissions related to standard Linux permissions? (Choose TWO correct answers.)

   Select 2 answers.

   • A. SELinux permissions overnde standard Linux permissions.
   • B. standard Linux permissions override SELinux permissions.
   • C. SELinux permissions are verified before standard Linux permissions.
   • D. SELinux permissions are verified after standard Linux permissions.
   Reveal Answer

4. Question #4

   Which of the following prefixes could be present in the output of getcifsacl? (Choose THREE correct answers.)

   Select 3 answers.

   • A. ACL
   • B. GRANT
   • C. GROUP
   • D. OWNER
   • E. SlD
   Reveal Answer

5. Question #5

   Which of the following are differences between AppArmor and SELinux? (Choose TWO correct answers).

   Select 2 answers.

   • A. AppArmor is implemented in user space only. SELinux is a Linux Kernel Module.
   • B. AppArmor is less complex and easier to configure than SELinux.
   • C. AppArmor neither requires nor allows any specific configuration. SELinux must always be manually configured.
   • D. SELinux stores information in extended file attributes. AppArmor does not maintain file specific information and states.
   • E. The SELinux configuration is loaded at boot time and cannot be changed later on AppArmor provides user space tools to change its behavior.
   Reveal Answer

6. Question #6

   Linux Extended File Attributes are organized in namespaces. Which of the following names correspond to existing attribute namespaces? (Choose THREE correct answers.)

   Select 3 answers.

   • A. default
   • B. system
   • C. owner
   • D. trusted
   • E. user
   Reveal Answer

7. Question #7

   Which of the following commands defines an audit rule that monitors read and write operations to the file/etc/firewall/rules and associates the rule with the name firewall?

   • A. auditctl -N firewall -r r: /etc/firewall/rules -r w: etc/firewall/rules
   • B. auditctl -A -f /etc/firewall/rules -o r- o w -l firewall
   • C. auditctl -w /etc/firewall/rules -p rw -k firewall
   • D. auditctl -_read /etc/firewall/rules -_write /etc/firewall/rules --label firewall
   • E. echo "n: firewall r:/etc/firewall/rules: w:/ etc/firewall/rules:" I auditctl ~
   Reveal Answer

8. Question #8

   Which of the following database names can be used within a Name Service Switch (NSS) configuration file? (Choose THREE correct answers).

   Select 3 answers.

   • A. host
   • B. shadow
   • C. service
   • D. passwd
   • E. group
   Reveal Answer

9. Question #9

   Which of the following sections are allowed within the Kerberos configuration file krb5.conf? (Choose THREE correct answers.)

   Select 3 answers.

   • A. [plugins]
   • B. [crypto]
   • C. [domain]
   • D. [capaths]
   • E. [realms]
   Reveal Answer

10. Question #10

    Which of the following components are part of FreelPA? (Choose THREE correct answers.)

    Select 3 answers.

    • A. DHCP Server
    • B. Kerberos KDC
    • C. Intrusion Detection System
    • D. Public Key Infrastructure
    • E. Directory Server
    Reveal Answer