최신 303-200 무료덤프 - Lpi 303-200: LPIC-3 Exam 303: Security, version 2.0

A. ipa user-add usera --first User --last A

B. ipa-user- add usera --name "User A"

C. useradd usera --directory ipa --gecos *User A"

D. ipa-admin create user --account usera -_fname User --iname A

E. idap- useradd --H ldaps://ipa-server CN=UserA --attribs "Firstname: User: Lastname: A"

A. ipa ad join addom -U Administrator -w

B. net ad ipajoin addom -U Administrator -p

C. trustmanager add -_domain ad: //addom --user Administrator -w

D. ipa trust-add --type ad addom --admin Administrator --password

E. ipa-ad -add-trust --account ADDOM\Administrator--query-password

A. When a user changes his login password, the contents of his eCryptfs home directory has to be re-encrypted using his new login password.

B. For every file in an eCryptfs directory there exists a corresponding file that contains the encrypted content.

C. eCryptfs cannot be used to encrypt only directories that are the home directory of a regular Linux user.

D. After unmounting an eCryptfs directory, the directory hierarchy and the original file names are still visible, although, it is not possible to view the contents of the files.

E. The content of all files in an eCryptfs directory is stored in an archive file similar to a tar file with an additional index to improve performance.

A. When using the command chroot, the started command is running in its own namespace and cannot communicate with other processes

B. Symbolic links to data outside the chroot path are followed, making files and directories accessible

C. Programs are not able to set a chroot path by using a function call, they have to use the command chroot

D. The chroot path needs to contain all data required by the programs running in the chroot environment

E. Hard links to files outside the chroot path are not followed, to increase security

A. This certificate will not be accepted by programs that do not understand the listed extension

B. This certificate may never be used to sign any other certificates

C. This certificate may be used to sign certificates that are not also a certification authority

D. This certificate belongs to a certification authority.

E. This certificate may be used to sign certificates of subordinate certification authorities.

A. Private keys should always be stored as plain text files without any encryption.

B. Private keys should be included in X509 certificates.

C. Private keys should have a sufficient length for the algorithm used for key generation.

D. Private keys should be created on the systems where they will be used and should never leave them.

E. private keys should be uploaded to public key servers.