We're so confident of our products that we provide no hassle product exchange.
Lpi 117-303 Exam Overview:
| Certification Vendor: | Linux Professional Institute (LPI) |
|---|---|
| Exam Name: | LPI Level 3 Exam (LPIC-3 Security) |
| Exam Number: | 117-303 / LPI 303 |
| Exam Price: | USD 200-250 |
| Real Exam Qty: | 40-60 |
| Exam Duration: | 90 minutes |
| Passing Score: | 500 (on a scale of 200-800) |
| Certificate Validity Period: | 5 years |
| Available Languages: | Japanese, English |
| Related Certifications: | LPIC-1 Linux Administrator LPIC-3 Security LPIC-2 Linux Engineer |
| Exam Format: | Fill in the blanks, Multiple choice |
| Sample Questions: | Lpi 117-303 Sample Questions |
| Exam Way: | Computer-based exam delivered via Pearson VUE testing centers or online proctored delivery (availability may vary by region) |
| Pre Condition: | Recommended to have LPIC-2 certification or equivalent Linux administration experience. |
| Official Syllabus URL: | https://www.lpi.org/our-certifications/lpic-3-303-security/ |
Lpi 117-303 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| System Hardening and Monitoring | - Security monitoring and auditing
|
| Access Control and Authentication | - Authorization mechanisms
|
| Cryptography and Data Security | - Encryption technologies
|
| Incident Response and Troubleshooting | - Security incident handling
|
| Network Security | - Secure network services
|
Lpi LPI Level 3 Exam (LPI 303: Security) Sample Questions:
Question #1
You have downloaded a file named file.tgz along with a signature file named file.tgz.asc. Which commands can be used to verify that file.tgz has not been tampered with since the file creator created the signature?
Assume that you have already retrieved the public key of the file creator. (Select THREE correct answers)
- A. gpg verify file.tgz.asc
- B. gpg verify file.tgz
- C. gpgv verify file.tgz.asc
- D. gpg verify file.tgz.asc file.tgz
- E. gpgv file.tgz.asc
Answer: A,D,E
Question #2
Which statements are true of the following Wireshark capture filter:
(tcp[2:2] > 1500 and tcp[2:2] < 1550) or (tcp[4:2] > 1500 and tcp[4:2] < 1550)
(Select TWO correct answers)
- A. Every packet being checked has a 2 byte offset.
- B. Only two bytes are being checked in each packet.
- C. Traffic on ports 15001550 is being captured.
- D. Traffic on ports 15011549 is being captured.
- E. Up to four bytes are being check in each packet.
Answer: D,E
Question #3
Which of the following statements are advantages that Mandatory Access Control has over Discretionary Access Control models? (Select TWO correct answers)
- A. MAC policies are easier to configure than use of DAC.
- B. Trust is placed in the administrators and not in individual users.
- C. MAC adds the concept of privileged remote users which is not available with simple DAC.
- D. MAC lets the kernel help decide if an object, such as a device or process, can access another object.
- E. MAC policies increase the ability of the root user to correct errors.
Answer: B,D
Question #4
What can proxymap be used for in a Postfix installation? (Select TWO correct answers)
- A. Creating and querying Postfix lookup tables.
- B. Consolidating the number of open lookup tables.
- C. Overcoming chroot restrictions.
- D. Creating and querying Postfix alias databases.
- E. Mapping mail user IDs to system accounts.
Answer: B,C
Question #5
Which of the following are common techniques for securing a sendmail server? (Select THREE correct answers)
- A. Disable USRLKUP.
- B. Disable VRFY.
- C. Enable TLS.
- D. Run sendmail in a chroot'd environment.
- E. Maintain user accounts in an LDAP directory.
Answer: B,C,D
By Goddard
