Lpi 303-300 Practice Exams
Last updated on Oct 22,2026- Exam Code: 303-300
- Exam Name: LPIC-3 Security
- Certification Provider: Lpi
- Latest update: Oct 22,2026
What is the purpose of the Linux Audit system?
- A . To manage system log files
- B . To automate host scans
- C . To detect intrusions and system changes
- D . To manage installed packages
Which directive is used in an OpenVPN server configuration in order to send network configuration information to the client?
(Specify ONLY the option name without any values or parameters.)
Solution: push
Determine whether the given solution is correct?
- A . Correct
- B . Incorrect
What is phishing?
- A . A type of virus
- B . A type of malware that disguises itself as legitimate software
- C . A type of denial-of-service attack
- D . A type of social engineering attack
What type of activity does HID monitor for?
- A . Malware infections
- B . Unauthorized access attempts
- C . Network traffic
- D . File and folder changes
Which PAM module checks new passwords against dictionary words and enforces complexity?
(Specially the module name only without any path.)
Solution: pam_cracklib
Determine whether the given solution is correct?
- A . Correct
- B . Incorrect
How can host scans be automated on a Linux system?
- A . Using OpenSCAP
- B . Using chkrootkit
- C . Using Linux Audit system
- D . Using cron
Which command is used to run a new shell for a user changing the SELinux context?
(Specify ONLY the command without any path or parameters.)
Solution: newrole
Determine whether the given solution is correct?
- A . Correct
- B . Incorrect
What is the purpose of an extended attribute in Linux?
- A . To store additional metadata about a file
- B . To encrypt a file for secure transmission
- C . To compress a file to save disk space
- D . To mark a file as executable
Which of the following methods can be used to deactivate a rule in Snort?
(Choose TWO correct answers.)
- A . By placing a # in front of the rule and restarting Snort.
- B . By placing a pass rule in local.rules and restarting Snort.
- C . By deleting the rule and waiting for Snort to reload its rules files automatically.
- D . By adding a pass rule to /etc/snort/rules.deactivated and waiting for Snort to reload its rules files automatically.
Which of the following prefixes could be present in the output of getcifsacl?
(Choose THREE correct answers.)
- A . ACL
- B . GRANT
- C . GROUP
- D . OWNER
- E . SID