LPI 303-200 - LPIC-3 Exam 303: Security, 2.0 Exam
Page: 3 / 12
Total 60 questions
Question #11 (Topic: )
Which of the following openssl commands generates a certificate signing request (CSR)
using the already existing private key contained in the file private/keypair.pem?
using the already existing private key contained in the file private/keypair.pem?
A. openssl req -key private/keypair.pem -out req/csr.pem
B. openssl req - new -key private/keypair.pem -out req/csr.pem
C. openssl gencsr -key private/keypair.pem -out req/csr.pem
D. openssl gencsr -new- key private/keypair.pem -out req/csr.pem
Answer: B
Question #12 (Topic: )
in which path is the data, which can be altered by the sysctl command, accessible?
A. /dev/sys/
B. /sys/
C. /proc/sys/
D. /sysctl/
Answer: C
Question #13 (Topic: )
Which option in an Apache HTTPD configuration file enables OCSP stapling? (Specify
ONLY the option name without any values or parameters.)
ONLY the option name without any values or parameters.)
Answer: httpd-ssl.conf
Question #14 (Topic: )
Which of the following configuration options makes Apache HTTPD require a client
certificate for authentication?
certificate for authentication?
A. Limit valid-x509
B. SSLRequestClientCert always
C. Require valid-x509
D. SSLVerifyClient require
E. SSLPolicy valid-client-cert
Answer: D
Question #15 (Topic: )
Given that this device has three different keys, which of the following commands deletes
only the first key?
only the first key?
A. cryptsetup luksDelKey /dev/sda 1 0
B. cryptsetup luksDelkey /dev/sda 1 1
C. cryptsetup luksDelKey / dev /mapper/crypt- vol 1
D. cryptsetup luksDelKey / dev /mapper/crypt- vol 0
Answer: A
