Lpi LPI Level 3 Exam (LPI 303: Security) 認定 117-303 試験問題:

1. What is the purpose of tripwire?

A) To monitor a server for breakin attempts and, if desired, ban the IP address.
B) To identify changes to critical system files and directories.
C) To act as a honeypot and attract attackers.
D) To enforce mandatory access control policies to confine users to the minimum amount of privilege required.

2. An administrator has just configured an OpenVPN client. Upon starting the service, the following message is displayed:
TLS Error: TLS key negotiation failed to occur within 60 seconds
Which of the following statements is true?

A) The client was unable to establish a network connection with the server.
B) The client was able to establish a network connection with the server, however TLS key negotiation failed, resulting in a fallback to SSL.
C) The client was able to establish a network connection with the server, however TLS and SSL security are not enabled.
D) The client was able to establish a network connection with the server, however TLS key negotiation took longer than 60 seconds, indicating that there may be a problem with network performance.

3. SELinux is a Linux feature that:

A) ensures that system files referenced in the Mandatory Access Control policies are not modified and alerts administrators when changes occur.
B) enforces Mandatory Access Control policies that can restrict user space programs and system servers to the minimum amount of privilege required to operate correctly.
C) provides only Mandatory Access Control policies. Additional access control models such as Rolebased access control require additional tools to implement.
D) monitors system file access by unprivileged users and warns them when they are trying to gain access to files beyond their permission levels set in the Mandatory Access Control policies.

4. CORRECT TEXT
Specifying the ___________ parameter in sshd_config will allow the administrator to systematically provide access to certain user accounts by name.

5. How are SELinux permissions related to standard Linux permissions?

A) SELinux permissions override standard Linux permissions.
B) SELinux permissions are verified after standard Linux permissions.
C) Standard Linux permissions override SELinux permissions.
D) SELinux permissions are verified before standard Linux permissions.

質問と回答：