Free Lpi 117-303 Exam Dumps Questions & Answers


Exam Code/Number:	117-303Join the discussion
Exam Name:	LPI Level 3 Exam (LPI 303: Security)
Certification:	Lpi
Free Question Number:	101
Publish Date:	Sep 05, 2026
# of views:	4741
Rating 100%

Page: 1 / 21
Total 101 questions

Question 1

SELinux has just been installed on a Linux system and the administrator wants to use SELinux in permissive mode in order to audit the various services on the system. What command will switch SELinux into permissive mode?

A.setenforce 0
B./etc/init.d/selinux stop
C./etc/init.d/selinux startpassive
D.selinux passive

Question 2

An administrator has just configured vsftp and notices that she cannot follow symbolic links when connected to the FTP server. What is the most likely reason for this?

A.This installation of vsftpd was not compiled with support for symbolic links.
B.The user account she is connecting with is not listed in /etc/security/ftpusers.
C.vsftpd is running in a chroot environment.
D.The follow_symlinks=no option has been set in vsftpd.conf.

Question 3

Which of the following can be done to secure a BIND server? (Select THREE correct answers)

A.Encrypt DNS traffic using SSL/TLS.
B.Require clients to authenticate with a password before querying the server.
C.Run the BIND daemon in a chroot jail
D.Run the BIND daemon as a nonroot user.
E.Configure ACLs.

Question 4

How does AppArmor configure its access control settings?

A.A profile is assigned per application that specifies the system resources available to the application.
B.AppArmor does not require any configuration.
C.AppArmor relies on precompiled policies. These policies are updated with new releases or can be downloaded periodically.
D.AppArmor inspects the Linux system to determine which applications are installed and configures itself. This configuration can then be modified manually.

Question 5

CORRECT TEXT
An administrator has successfully configured a cryptographic volume for dmcrypt, and has added the following line to /etc/fstab:
/dev/mapper/cryptvol /media/crypt auto defaults 0 0
Upon booting the system, the error message "mount: special device /dev/mapper/cryptvol does not exist" is displayed. What configuration file has the administrator forgotten to edit? (Provide the full path and filename)