Pass the LPIC Level 3 303-200 Questions and answers with ExamsMirror

AppArmor is implemented in user space only. SELinux is a Linux Kernel Module.

AppArmor is less complex and easier to configure than SELinux.

AppArmor neither requires nor allows any specific configuration. SELinux must always be manually configured.

SELinux stores information in extended file attributes. AppArmor does not maintain file specific information and states.

The SELinux configuration is loaded at boot time and cannot be changed later on AppArmor provides user space tools to change its behavior.

Private keys should be created on the systems where they will be used and should never leave them.

private keys should be uploaded to public key servers.

Private keys should be included in X509 certificates.

Private keys should have a sufficient length for the algorithm used for key generation.

Private keys should always be stored as plain text files without any encryption.

it monitors the network for neighbor discovery messages from new IPv6 hosts and routers

it monitors remote hosts by periodically sending echo requests to them.

it monitors the availability of a network link by querying network interfaces.

It monitors the network for IPv4 nodes that have not yet migrated to IPv6.

It monitors log files for failed login attempts in order to block traffic from offending network nodes

DHCP Server

Kerberos KDC

Intrusion Detection System

Public Key Infrastructure

Directory Server

[plugins]

[crypto]

[domain]

[capaths]

[realms]

By placing a # in front of the rule and restarting Snort

By placing a pass rule in local.rules and restarting Snort.

By deleting the rule and waiting for Snort to reload its rules files automatically.

By adding a pass rule to /etc/snort/rules.deactivated and waiting for Snort to reload its rules files automatically.

Control rules

File system rules

Network connection rules

Console rules

System call rules

It displays statistics from the running Snort process.

It returns the status of all configured network devices.

It reports whether the Snort process is still running and processing packets.

It displays the status of all Snort processes.

It reads syslog files containing Snort information and generates port scan statistics.