Lpi LPIC Exam 303: Security, version 3.0 - 303-300 Exam Questions [2026]

QUESTION NO: 1
What is Cryptography?

A. The art of decoding messages B. The art of sending anonymous messages C. The art of sending public messages D. The art of sending secret messages

Correct Answer: D

QUESTION NO: 2
Which auditd configuration file is used to define audit rules that control which system calls and files are monitored?

A. /etc/audisp/audispd.conf B. /var/log/audit/audit.log C. /etc/audit/auditd.conf D. /etc/audit/rules.d/audit.rules

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
Linux Extended File Attributes are organized in namespaces. Which of the following names correspond to existing attribute namespaces?(Choose THREE correct answers.)

A. owner B. trusted C. default D. user E. system

Correct Answer: B,D,E

QUESTION NO: 4
Which PAM module is used to enforce password complexity requirements, such as minimum length and character class requirements?

A. pam_unix B. pam_access C. pam_limits D. pam_cracklib or pam_pwquality

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
What is the purpose of performing a TCP SYN scan (nmap -sS) rather than a full TCP connect scan (nmap -sT)?

A. There is no difference between the two scan types. B. A SYN scan can only be used against UDP services. C. A SYN scan does not complete the full TCP three-way handshake, making it faster and less likely to be logged by the target application. D. A SYN scan is slower but more accurate than a connect scan.

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 6
Which of the following parameters to openssl s_client specifies the host name to use for TLS Server Name Indication?

A. -servername B. -vhost C. -sniname D. -tlsname E. -host

Correct Answer: A

QUESTION NO: 7
What is the purpose of a Certificate Authority (CA)?

A. To issue and sign X.509 certificates B. To store X.509 certificates C. To decrypt X.509 certificates D. To encrypt X.509 certificates

Correct Answer: A

QUESTION NO: 8
What is the purpose of an access control list in Linux?

A. To compress a file to save disk space B. To specify fine-grained permissions for users and groups C. To encrypt a file for secure transmission D. To mark a file as executable

Correct Answer: B

QUESTION NO: 9
Which of the following commands defines an audit rule that monitors read and write operations to the file/ etc/firewall/rules and associates the rule with the name firewall?

A. auditctl -N firewall -r r: /etc/firewall/rules -r w: etc/firewall/rules B. auditctl -w /etc/firewall/rules -p rw -k firewall C. auditctl -A -f /etc/firewall/rules -o r -o w -l firewall D. echo "n: firewall r:/etc/firewall/rules: w:/etc/firewall/rules:" | auditctl ~ E. auditctl --read /etc/firewall/rules --write /etc/firewall/rules --label firewall

Correct Answer: B

QUESTION NO: 10
Which of the following commands adds a new user usera to FreeIPA?

A. useradd usera --directory ipa --gecos "User A" B. ipa-user- add usera --name "User A" C. idap- useradd -H Idaps://ipa-server CN=UserA --attribs "Firstname: User: Lastname: A" D. ipa-admin create user --account usera --fname User --iname A E. ipa user-add usera --first User --last A

Correct Answer: E

QUESTION NO: 11
What is a rootkit?

A. A type of virus B. A type of phishing scam C. A type of malware that disguises itself as legitimate software D. A type of denial-of-service attack

Correct Answer: C