Pass the LPI LPIC Level 3 303-200 Questions and answers with CertsForce

Symbolic links to data outside the chroot path are followed, making files and directories accessible

Hard links to files outside the chroot path are not followed, to increase security

The chroot path needs to contain all data required by the programs running in the chroot environment

Programs are not able to set a chroot path by using a function call, they have to use the command chroot

When using the command chroot, the started command is running in its own namespace and cannot communicate with other processes

getfattr prints a warning and exits with a values of 0.

getfattr prints a warning and exits with a value of 1.

No output is produced and getfattr exits with a value of 0.

No outputs is produced and getfattr exits with a value of 1

Xmas Scan

Zero Scan

FIN Scan

IP Scan

UDP SYN Scan

Security Access Control (SAC)

Group Access Control (GAC)

User Access Control (UAC)

Discretionary Access Control (DAC)

Mandatory Access Control (MAC)

auditctl -N firewall –r r: /etc/firewall/rules –r w: etc/firewall/rules

auditctl -A –f /etc/firewall/rules –o r– o w –l firewall

auditctl –w /etc/firewall/rules -p rw -k firewall

auditctl -_read /etc/firewall/rules -_write /etc/firewall/rules --label firewall

echo "n: firewall r:/etc/firewall/rules: w:/ etc/firewall/rules:" | auditctl ~

Private keys should be created on the systems where they will be used and should never leave them.

private keys should be uploaded to public key servers.

Private keys should be included in X509 certificates.

Private keys should have a sufficient length for the algorithm used for key generation.

Private keys should always be stored as plain text files without any encryption.

subjectAltName = DNS: www example.org, DNS:example.org

extension= SAN: www.example.org , SAN:example.org

subjectAltName: www.example.org , subjectAltName: example.org

commonName = subjectAltName= www.example.org , subjectAltName = example.org

subject= CN= www.example.org , CN=example.org