最新なLpi 117-303問題集（101題）、真実試験の問題を全部にカバー！

質問 1：
SELinux is a Linux feature that:
A. enforces Mandatory Access Control policies that can restrict user space programs and system servers to the minimum amount of privilege required to operate correctly.
B. provides only Mandatory Access Control policies. Additional access control models such as Rolebased access control require additional tools to implement.
C. monitors system file access by unprivileged users and warns them when they are trying to gain access to files beyond their permission levels set in the Mandatory Access Control policies.
D. ensures that system files referenced in the Mandatory Access Control policies are not modified and alerts administrators when changes occur.
正解：A

質問 2：
What is the difference between an SELinux domain and an SELinux type?
A. A domain is a group of SELinux types.
B. A domain is an alternative keyword for type.
C. A domain defines the range of access that an object has. A type is used to define an access level.
D. A domain is assigned to processes while a type is assigned to objects such as files and directories.
正解：D

質問 3：
Which of the following is NOT included in a Snort rule header?
A. protocol
B. source IP address
C. source port
D. packet byte offset
E. action
正解：D

質問 4：
What does ntop use for data collection?
A. Frame relay
B. Log files
C. SNMP
D. Network packets
正解：D

質問 5：
What is the purpose of snort inline?
A. To have snort log suspicious activity only, without performing any actions
B. To have iptables use snort rules to filter packets.
C. To run the snort daemon without forking child processes.
D. To run the snort daemon as a nonroot user.
正解：B