Security — page 3
Objective 110 of LPIC-1 Exam 102-500, worth 16.67% of the exam. This is page 3 of 3 of its question list; page one carries the full objective summary.
- Share of the exam
- 16.67%
- Questions in a real sitting
- roughly 10 of 60
- Questions in this bank
- 50
- Signed for by a person
- 0
- Machine-checked only
- 50
Partly checked. None of the 50 questions here has been read against the cited source by a person. 50 questions have been checked against their cited clause by an automated pass — which is not the same thing, and is not a signature.
Only questions a person has signed for are used in mock exams here. That is the whole difference between the two kinds of checking above.
How these questions are written — where each question comes from, what the verification ledger records, and what happens when one is found wrong.
What this objective covers
The 50 questions written for this objective cite 3 LPI exam objectives (110.1, 110.2, 110.3) and 19 manual pages (chage(1), fuser(1), gpg(1), gpg-agent(1), hosts_access(5), inittab(5), nmap(1), nologin(8), pwconv(8), shadow(5), ss(8), ssh(1), ssh-keygen(1), ssh_config(5), sshd(8), sudoers(5), systemctl(1), systemd.socket(5), xinetd.conf(5)).
They break down as 35 single-answer questions, 8 type-the-answer questions and 7 choose-several questions.
Drill this objective
The trainer can run a short practice set drawn from this objective alone, which is what the weight column above is for: revise the heavy objectives first.
Questions on this objective (page 3 of 3)
- A web application on your laptop listens on 127.0.0.1:3000. Your laptop can reach the shared host halof, but a colleague can only reach halof and not your laptop. halof's sshd is configured with GatewayPorts yes. You want the colleague to open the application as halof:8585. Which command, run from your laptop, sets that up? machine-checked
- You log into a remote server over SSH and start the graphical tool xterm, which fails because the DISPLAY variable is not set. Which client option lets the remote program draw on your local X server? machine-checked
- You connect from your workstation to bastion, and from there onward to db01, which trusts the same public key. The private key must not be copied onto bastion. Which option on the first connection makes the onward login work? machine-checked
- You want typing ssh web01 on its own to connect to 198.51.100.20 on port 2222 as the user deploy, and you want the shortcut to apply to your account only. Which file takes those settings? machine-checked
- You still have ~/.ssh/id_rsa but the matching id_rsa.pub was deleted by accident, and you need the public key text to add to a new server's authorized_keys. Which command reconstructs it? machine-checked
- Which THREE of the following GnuPG operations require your own private key to be present in ~/.gnupg? (Choose three.) machine-checked
- You want to check which correspondents' keys you already hold before encrypting anything. Type the gpg command, using its long option and no key arguments, that lists the public keys in your keyring. machine-checked
- A colleague asks for your GnuPG public key as text she can paste into an email. Which command produces exactly that on standard output? machine-checked
- You publish release.tar.gz and want users to be able to check its authenticity from a second, separate file, with the tarball itself left byte for byte unchanged. Which command produces that signature? machine-checked
- Signing several files one after another, you are asked for your GnuPG passphrase only the first time. Which component caches it, and takes default-cache-ttl in ~/.gnupg/gpg-agent.conf? machine-checked
The other objectives in LPIC-1 Exam 102-500
- 105. Shells and shell scripting — 15% of the exam
- 106. User interfaces and desktops — 6.67% of the exam
- 107. Administrative tasks — 20% of the exam
- 108. Essential system services — 18.33% of the exam
- 109. Networking fundamentals — 23.33% of the exam