Lpi 303-300 問題集

質問 1：
Which of the following information, within a DNSSEC- signed zone, is signed by the key signing key?
A. The non-DNSSEC records like A, AAAA or MX.
B. The RRSIG records of the zone.
C. The zone signing key of the zone.
D. The NSEC or NSEC3 records of the zone.
E. The DS records pointing to the zone.
正解：C

質問 2：
In an AppArmor profile, what does the "complain" mode do?
A. It logs policy violations without enforcing restrictions, similar to SELinux permissive mode.
B. It blocks all restricted actions and terminates the process.
C. It automatically generates a new profile based on observed behavior.
D. It disables AppArmor for that specific profile only.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
What is the primary purpose of Online Certificate Status Protocol (OCSP)?
A. To distribute the full Certificate Revocation List to all clients.
B. To allow a client to check the revocation status of a specific X.509 certificate in real time.
C. To encrypt data in transit between a client and server.
D. To generate new X.509 certificates automatically.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
What is the purpose of Linux capabilities, as introduced to divide the traditional all-or-nothing root privilege model?
A. They are used only within containerized environments.
B. They allow specific, granular privileges (such as binding to low-numbered ports) to be granted to a process without granting full root access.
C. They control network bandwidth allocation per process.
D. They replace the need for the setuid bit entirely on all binaries.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Which of the following lines in an OpenSSL configuration adds an X 509v3 Subject Alternative Name extension for the host names example.org and www.example.org to a certificate?
A. subjectAltName: www.example.org, subjectAltName: example.org
B. extension= SAN: www.example.org, SAN:example.org
C. commonName = subjectAltName= www.example.org, subjectAltName = example.org
D. subject= CN= www.example.org, CN=example.org
E. subjectAltName = DNS: www.example.org, DNS:example.org
正解：E

質問 6：
What is the difference between a SetUID and SetGID bit?
A. SetUID applies to files, while SetGID applies to directories
B. SetUID allows a file to be executed with the permissions of the file owner, while SetGID allows a file to be executed with the permissions of the group owner
C. There is no difference between SetUID and SetGID
D. SetUID allows a user to change the owner of a file, while SetGID allows a user to change the group owner of a file
正解：B

質問 7：
When OpenVPN sends a control packet to its peer, it expects an acknowledgement in 2 seconds by default. Which of the following options changes the timeout period to 5 seconds?
A. -- tls- timer 5
B. -- tls- timeout 500
C. -- tls-timeout 5
D. -- tls- timer 500
正解：C

質問 8：
What is the purpose of an access control list in Linux?
A. To specify fine-grained permissions for users and groups
B. To mark a file as executable
C. To compress a file to save disk space
D. To encrypt a file for secure transmission
正解：A

質問 9：
Which mount option prevents the execution of binaries located on the mounted filesystem?
A. noexec
B. nodev
C. ro
D. nosuid
正解：A