To obtain the LPIC-3 Security certification, it is required that you have already obtained the LPIC-2 certification and successfully pass the 303 exam. We are pleased to announce the recent release of Passcert LPIC-3 Security Exam 303-300 Dumps, which have been designed to assist you in gaining familiarity with the various question topics and formats that you are likely to encounter in the actual LPIC-3 Security exam. By utilizing these comprehensive LPIC-3 Security Exam 303-300 Dumps, you can enhance your preparation and increase your chances of passing the LPI 303-300 exam with the utmost confidence and success.

The LPIC-3 certification is the culmination of the multi-level professional certification program of the Linux Professional Institute (LPI). LPIC-3 is designed for the enterprise-level Linux professional and represents the highest level of professional, distribution-neutral Linux certification within the industry. Four separate LPIC-3 specialty certifications are available. Passing any one of the four exams will grant the LPIC-3 certification for that specialty. The LPIC-3 Security certification covers the administration of Linux systems enterprise-wide with an emphasis on security. 

 

Current Version: 3.0 (Exam code 303-300)

Prerequisites: The candidate must have an active LPIC-2 certification to receive LPIC-3 certification, but the LPIC-2 and LPIC-3 exams may be taken in any order

Requirements: Pass the 303 exam. The 90-minute exam is 60 multiple-choice and fill in the blank questions.

Validity Period: 5 years

Languages for exam available in VUE test centers: English, Japanese

 

331.1 X.509 Certificates and Public Key Infrastructures

331.2 X.509 Certificates for Encryption, Signing and Authentication

331.3 Encrypted File Systems

331.4 DNS and Cryptography

 

332.1 Host Hardening

332.2 Host Intrusion Detection

332.3 Resource Control

 

333.1 Discretionary Access Control

333.2 Mandatory Access Control

 

334.1 Network Hardening

334.2 Network Intrusion Detection

334.3 Packet Filtering

334.4 Virtual Private Networks

 

335.1 Common Security Vulnerabilities and Threats

335.2 Penetration Testing

 

1. A LUKS device was mapped using the command: cryptsetup luksOpen/dev/sda1 crypt-vol

Given that this device has three different keys, which of the following commands deletes only the first key?

A. cryptsetup luksDelKey /dev/sda 1 0

B. cryptsetup luksDelkey /dev/sda 1 1

C. cryptsetup luksDelKey / dev /mapper/crypt- vol 1

D. cryptsetup luksDelKey / dev /mapper/crypt- vol 0

Answer: B

 

2. In which path is the data, which can be altered by the sysctl command, accessible?

A. /dev/sys/

B. /sys/

C. /proc/sys/

D. /sysctl/

Answer: C

 

3. What is the purpose of the program snort-stat?

A. It displays statistics from the running Snort process.

B. It returns the status of all configured network devices.

C. It reports whether the Snort process is still running and processing packets.

D. It displays the status of all Snort processes.

E. It reads syslog files containing Snort information and generates port scan statistics.

Answer: E

 

4. Linux Extended File Attributes are organized in namespaces. Which of the following names correspond to existing attribute namespaces? (Choose THREE correct answers.)

A. default

B. system

C. owner

D. trusted

E. user

Answer: B, D, E

 

5. How are SELinux permissions related to standard Linux permissions? (Choose TWO correct answers.)

A. SELinux permissions override standard Linux permissions.

B. Standard Linux permissions override SELinux permissions.

C. SELinux permissions are verified before standard Linux permissions.

D. SELinux permissions are verified after standard Linux permissions.

Answer: B, D

 

6. Which of the following commands makes the contents of the eCryptfs encrypted directory ~/Private available to the user?

A. ecryptfsclient

B. ecryptfs.mount

C. ecryptfs-mount-private

D. decryptfs

E. ecryptfs-manage-directory

Answer: C

 

7. What effect does the following command have on TCP packets?

iptables- A INPUT d 10.142.232.1 p tcp --dport 20:21 j ACCEPT

A. Forward all TCP traffic not on port 20 or 21 to the IP address 10.142.232.1

B. Drop all TCP traffic coming from 10.142.232.1 destined for port 20 or 21.

C. Accept only TCP traffic from 10.142.232.1 destined for port 20 or 21.

D. Accept all TCP traffic on port 20 and 21 for the IP address 10.142.232.1

Answer: D

 

8. Which of the following resources of a shell and its child processes can be controlled by the Bash build-in command ulimit? (Choose THREE correct answers.)

A. The maximum size of written files

B. The maximum number of open file descriptors

C. The maximum number of newly created files

D. The maximum number of environment variables

E. The maximum number of user processes

Answer: A, B, E