Lpi LPIC Exam 303: Security, version 3.0 - 303-300 Free Exam Questions

A. By placing a # in front of the rule and restarting Snort.

B. By placing a pass rule in local.rules and restarting Snort.

C. By deleting the rule and waiting for Snort to reload its rules files automatically.

D. By adding a pass rule to /etc/snort/rules.deactivated and waiting for Snort to reload its rules files automatically.

A. [domain]

B. [realms]

C. [plugins]

D. [capaths]

E. [crypto]

A. ls

B. getfacl

C. chmod

D. setfacl

A. It stores a copy of the encrypted data for redundancy.

B. It stores the device's UUID.

C. It stores an encrypted copy of the master key, protected by a specific passphrase or keyfile, allowing multiple independent unlock methods.

D. It defines the filesystem type used on the encrypted volume.

A. rpm

B. AIDE

C. chkrootkit

D. OpenSCAP

A. To restart the auditd service.

B. To search and filter existing audit log entries based on criteria such as key, user, or time range.

C. To add new audit rules to the running kernel.

D. To generate summary reports of audit statistics.

A. dpkg and aptitude

B. RPM and DPKG

C. yum and zypper

D. APT and YUM

A. When a user changes his login password, the contents of his eCryptfs home directory has to be re- encrypted using his new login password.

B. The content of all files in an eCryptfs directory is stored in an archive file similar to a tar file with an additional index to improve performance.

C. For every file in an eCryptfs directory there exists a corresponding file that contains the encrypted content.

D. After unmounting an eCryptfs directory, the directory hierarchy and the original file names are still visible, although, it is not possible to view the contents of the files.

E. eCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux user.

A. chmod +cap /path/to/binary

B. getcap /path/to/binary

C. setcap /path/to/binary

D. capsh --print