Free 303-200: LPIC-3 Exam 303: Security, version 2.0 Exam Questions and Answers

Which of the following access control models is established by using SELinux?

• AA. Security Access Control (SAC)
• BB. Group Access Control (GAC)
• CC. User Access Control (UAC)
• DD. Discretionary Access Control (DAC)
• EE. Mandatory Access Control (MAC)

What happens when the command getfattr afile is run while the file afile has no extended attributes set?

• AA. getfattr prints a warning and exits with a values of 0.
• BB. getfattr prints a warning and exits with a value of 1.
• CC. No output is produced and getfattr exits with a value of 0.
• DD. No outputs is produced and getfattr exits with a value of 1

How are SELinux permissions related to standard Linux permissions? (Choose TWO correct answers.)

Select 2 answers.

• AA. SELinux permissions overnde standard Linux permissions.
• BB. standard Linux permissions override SELinux permissions.
• CC. SELinux permissions are verified before standard Linux permissions.
• DD. SELinux permissions are verified after standard Linux permissions.

Which of the following prefixes could be present in the output of getcifsacl? (Choose THREE correct answers.)

Select 3 answers.

• AA. ACL
• BB. GRANT
• CC. GROUP
• DD. OWNER
• EE. SlD

Which of the following are differences between AppArmor and SELinux? (Choose TWO correct answers).

Select 2 answers.

• AA. AppArmor is implemented in user space only. SELinux is a Linux Kernel Module.
• BB. AppArmor is less complex and easier to configure than SELinux.
• CC. AppArmor neither requires nor allows any specific configuration. SELinux must always be manually configured.
• DD. SELinux stores information in extended file attributes. AppArmor does not maintain file specific information and states.
• EE. The SELinux configuration is loaded at boot time and cannot be changed later on AppArmor provides user space tools to change its behavior.

Linux Extended File Attributes are organized in namespaces. Which of the following names correspond to existing attribute namespaces? (Choose THREE correct answers.)

Select 3 answers.

• AA. default
• BB. system
• CC. owner
• DD. trusted
• EE. user

Which of the following commands defines an audit rule that monitors read and write operations to the file/etc/firewall/rules and associates the rule with the name firewall?

• AA. auditctl -N firewall -r r: /etc/firewall/rules -r w: etc/firewall/rules
• BB. auditctl -A -f /etc/firewall/rules -o r- o w -l firewall
• CC. auditctl -w /etc/firewall/rules -p rw -k firewall
• DD. auditctl -_read /etc/firewall/rules -_write /etc/firewall/rules --label firewall
• EE. echo "n: firewall r:/etc/firewall/rules: w:/ etc/firewall/rules:" I auditctl ~

Which of the following database names can be used within a Name Service Switch (NSS) configuration file? (Choose THREE correct answers).

Select 3 answers.

• AA. host
• BB. shadow
• CC. service
• DD. passwd
• EE. group

Which of the following sections are allowed within the Kerberos configuration file krb5.conf? (Choose THREE correct answers.)

Select 3 answers.

• AA. [plugins]
• BB. [crypto]
• CC. [domain]
• DD. [capaths]
• EE. [realms]

Which of the following components are part of FreelPA? (Choose THREE correct answers.)

Select 3 answers.

• AA. DHCP Server
• BB. Kerberos KDC
• CC. Intrusion Detection System
• DD. Public Key Infrastructure
• EE. Directory Server