325.3 Encrypted File Systems (weight: 3) LPIC-3-SECURITY Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security auditor is reviewing the encryption methods used on a set of Linux servers. One server uses a block device encryption method that does not store any metadata on the disk, so the cipher, key size, and hash must be supplied manually each time the device is opened. Which method is the auditor observing?

   • APlain dm-crypt
   • BLUKS
   • CeCryptfs
   • DEncFS
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is a key characteristic of eCryptfs?

   • AIt is a network file system that encrypts data in transit.
   • BIt encrypts entire block devices using the device mapper.
   • CIt is a kernel module that provides hardware-accelerated encryption.
   • DIt is a stacked file system that encrypts individual files and directories on top of an existing file system.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the purpose of the LUKS on-disk format in conjunction with dm-crypt?

   • AIt is a network protocol for remote disk encryption.
   • BIt provides a user-space API for encrypting individual files.
   • CIt replaces dm-crypt as the kernel-level encryption engine.
   • DIt provides a standardized way to store encryption metadata, such as cipher, key slots, and passphrase hashes, on the device.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company wants to encrypt the home directories of its users. The solution must allow users to access their files transparently after logging in, and it must work with the existing PAM-based authentication. Which file system encryption approach should be chosen?

   • AeCryptfs with pam_ecryptfs
   • BEncFS with a systemd service
   • CLUKS on a separate partition for each user
   • DPlain dm-crypt on the home partition
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An administrator is evaluating encryption options for a new database server. The requirement is that the entire data partition must be encrypted, and the encryption must be transparent to the database application. The administrator also wants to use a key management approach that supports multiple passphrases and is the standard on Linux. Which technology should be used?

   • AEncFS on the data directory
   • BeCryptfs on the data directory
   • CPlain dm-crypt without LUKS
   • DLUKS with dm-crypt
   Reveal Solution Discussion Select an answer first