LPI 303-200 LPIC-3 Exam 303: Security, 2.0 Exam Practice Test

The maximum size of written files

The maximum number of open file descriptors

The maximum number of newly created files

The maximum number of environment variables

The maximum number of user processes

Kerberos authentication

SSH hostkey authentication

Winbind authentication

SSL certificate authentication

subjectAltName = DNS: www example.org, DNS:example.org

extension= SAN: www.example.org , SAN:example.org

subjectAltName: www.example.org , subjectAltName: example.org

commonName = subjectAltName= www.example.org , subjectAltName = example.org

subject= CN= www.example.org , CN=example.org

[plugins]

[crypto]

[domain]

[capaths]

[realms]

By placing a # in front of the rule and restarting Snort

By placing a pass rule in local.rules and restarting Snort.

By deleting the rule and waiting for Snort to reload its rules files automatically.

By adding a pass rule to /etc/snort/rules.deactivated and waiting for Snort to reload its rules files automatically.

!/var/run/.*

append: /var/log/*

/usr=all

#/bin/

/etc p+i+u+g

AppArmor is implemented in user space only. SELinux is a Linux Kernel Module.

AppArmor is less complex and easier to configure than SELinux.

AppArmor neither requires nor allows any specific configuration. SELinux must always be manually configured.

SELinux stores information in extended file attributes. AppArmor does not maintain file specific information and states.

The SELinux configuration is loaded at boot time and cannot be changed later on AppArmor provides user space tools to change its behavior.

The clients connecting to the virtual host must provide a client certificate that was issued by the same CA that issued the server's certificate.

The virtual host is served only to clients that support SNI.

All of the names of the virtual host must be within the same DNS zone.

The virtual host is used as a fallback default for all clients that do not support SNI.

Despite its configuration, the virtual host is served only on the common name and Subject Alternative Names of the server certificates.