Lpi 303-300 Practice Exams
Last updated on Oct 22,2026- Exam Code: 303-300
- Exam Name: LPIC-3 Security
- Certification Provider: Lpi
- Latest update: Oct 22,2026
Which command is used to view the access control list of a file?
- A . ls
- B . chmod
- C . getfacl
- D . setfacl
Which of the following commands adds users using SSSD’s local service?
- A . sss_adduser
- B . sss_useradd
- C . sss_add
- D . sss-addlocaluser
- E . sss_local_adduser
Which protocol is commonly used to transmit X.509 certificates?
- A . HTTPS
- B . FTPS
- C . SMTPS
- D . LDAP
What effect does the configuration SSLStrictSNIVHostCheck on have on an Apache HTTPD virtual host?
- A . The clients connecting to the virtual host must provide a client certificate that was issued by the same CA that issued the server’s certificate.
- B . The virtual host is served only to clients that support SNI.
- C . All of the names of the virtual host must be within the same DNS zone.
- D . The virtual host is used as a fallback default for all clients that do not support SNI.
- E . Despite its configuration, the virtual host is served only on the common name and Subject Alternative
What is OCSP stapling?
- A . A mechanism that allows a server to provide proof of the revocation status of its own SSL/TLS certificate
- B . A mechanism that allows a server to provide proof of the revocation status of all certificates issued by a particular Certificate Authority
- C . A mechanism that allows a server to provide proof of its own identity to clients
- D . A mechanism that allows a server to provide proof of a client’s identity to other servers
Which of the following commands makes the contents of the eCryptfs encrypted directory ~/Private available to the user?
- A . ecryptfsclient
- B . ecryptfs.mount
- C . ecryptfs-mount-private
- D . decryptfs
- E . ecryptfs-manage-directory
Which of the following is an example of a behavioral-based HID technique?
- A . Signature-based detection
- B . Anomaly-based detection
- C . Heuristic-based detection
- D . Rule-based detection
What is Linux Malware Detect?
- A . A package management tool
- B . A tool to automate host scans
- C . A tool to detect malware on a Linux system
- D . A configuration management tool
A LUKS device was mapped using the command: cryptsetup luksOpen/dev/sda1 crypt-vol
Given that this device has three different keys, which of the following commands deletes only the first key?
- A . cryptsetup luksDelKey /dev/sda 1 0
- B . cryptsetup luksDelkey /dev/sda 1 1
- C . cryptsetup luksDelKey / dev /mapper/crypt- vol 1
- D . cryptsetup luksDelKey / dev /mapper/crypt- vol 0
How does TSIG authenticate name servers in order to perform secured zone transfers?
- A . Both servers mutually verify their X509 certificates.
- B . Both servers use a secret key that is shared between the servers.
- C . Both servers verify appropriate DANE records for the labels of the NS records used to delegate the transferred zone.
- D . Both servers use DNSSEC to mutually verify that they are authoritative for the transferred zone.