LFCS Exam Questions

Which statements are true of object classes in an LDAP directory? (Choose TWO correct answers)

What is true of any created custom attribute or object class?

Which of the following is correct about this excerpt from an LDIF file? dn: cn=PrintOperators,ou=Groups,ou=IT,o=BR

When logged in to a workstation which retrieves most of its user information from NIS, which command can be used to list ALL the users?

An administrator has manually migrated local accounts to LDAP, instead of using the migration tools. When trying to authenticate as a user, an error is returned about invalid crede...

What strategy is used to initialize NIS maps?

An administrator has created a mapping with the following command: cryptsetup luksOpen /dev/sda1 cryptvol and has set three different keys. Which command below will delete the firs...

Which of the following are valid dmcrypt modes? (Choose THREE correct answers)

You are certain that your kernel has been compiled with ACL support, however, when you try to set an ACL on a file, you get the following output: % setfacl m user:hugh:r afile.txt...

Which of the following are valid OpenVPN authentication modes? (Choose TWO correct answers)

What is true about the permissions for the file afile given the following output from getfacl? (Select TWO correct answers) % getfacl afile # file: afile # owner: matt # group: sup...

You wish to revoke write access for all groups and named users on a file. Which command will make the correct ACL changes?

When adding additional users to a file's extended ACLs, what is true about the default behaviour of the ACL mask for the file?

In which of the following scenarios MUST an administrator use ethernet bridging instead of routing when configuring an OpenVPN site? (Select TWO correct answers)

Linux Extended Attributes include attribute classes. Which of the following are included in the defined attribute classes? (Select THREE correct answers)

Which of the following statements are true about Linux Extended Attributes on files? (Select TWO correct answers)

Which command will set the user.author attribute on the file afile.txt?

Which of the following lines in the OpenVPN server.conf file will supply a DNS server for DHCP clients to use?

Which command will list all of the extended attributes on the file afile.txt along with the values?

Which of the following statements is true when querying the extended attributes of a file that has no extended attributes set?

What is the purpose of the Safe Checks option in a Nessus configuration?

An administrator is capturing traffic with Wireshark and is only seeing ARP traffic. What is the most likely cause of this?

Which statements are true of the following Wireshark capture filter: (tcp[2:2] > 1500 and tcp[2:2] < 1550) or (tcp[4:2] > 1500 and tcp[4:2] < 1550) (Select TWO correct answers)

The command 'nmap sS O 10.142.232.10' produces the following output: PORT STATE SERVICE 631/tcp open ipp 3306/tcp open mysql Which of these statements are true? (Select TWO correct...

Which of the following can be done to secure a BIND server? (Select THREE correct answers)

DNS servers are vulnerable to which of the following attacks? (Select THREE correct answers)

The apache administrator has added the following lines to the configuration files: <Directory /> AllowOverride None </Directory> What is the purpose of this directive?

SELinux is a Linux feature that:

Which of the following statements are advantages that Mandatory Access Control has over Discretionary? Access Control models? (Select TWO correct answers)

What are the steps which must be followed to enable serverwide zone transfers between two BIND 9 servers securely using TSIG?

Under which path is the selinux pseudofilesystem found?

An unprivileged user issued a command which produced the following log message: avc: denied { getattr } for pid=984 exe=/usr/bin/vim path=/etc/shadow dev=03:01 ino=134343 scontext=...

When a user logs into a system using SSH, what is the format of SELinux security context which will assign the user_r role and the user_t domain to their login sessions?

How are SELinux permissions related to standard Linux permissions?

What is the difference between an SELinux domain and an SELinux type?

An SELinux security context is required to ensure that all files in /opt have the default context of system_u:object_r:usr_t. How should the corresponding configuration entry be fo...

An administrator can prevent dictionary based attacks against an OpenSSH server by forcing keybased authentication with which TWO parameters in sshd_config?

A user is attempting to connect to a remote server via SSH and receives the following message: The authenticity of host 'mail.example.com (208.77.188.166)' can't be established. RS...

A user is attempting to connect to a remote host via SSH and following message is displayed: Host key verification failed. Which of the following options could resolve the problem?...

Which of the following are valid NFSv4 security types?

Which GPG command is used to sign a public key? (Select TWO correct answers)

Which GPG command will publish a public key to a public key server?

Which GPG command is used to create a revocation certificate in case a GPG key ever needs to be cancelled?

Which command is used to add an additional name, email address and comment to an existing private key?

Someone who wishes to receive an encrypted file has provided a key UID and a key fingerprint for verification to the data sender. Assuming that this key is on a public keyserver, w...

You have downloaded a file named file.tgz along with a signature file named file.tgz.asc. Which commands can be used to verify that file.tgz has not been tampered with since the fi...

By default, when verifying a signed file or a file with a detached signature, which keyring is used to search for public keys?

An administrator has just configured vsftp and notices that she cannot follow symbolic links when connected to the FTP server. What is the most likely reason for this?

What is one of the primary claimed benefits of Smack over SELinux?

How does AppArmor configure its access control settings?