A file server hosts a mix of sensitive documents and large media files. The administrator needs to encrypt the sensitive documents but wants to avoid the performance overhead of encrypting the large media files. The solution must not require a passphrase at boot, and the encryption must be transparent to users. Which approach best meets these requirements?

Use EncFS on the entire file system

Use eCryptfs on the directory containing the sensitive documents

Encrypt the entire disk with LUKS and enter the passphrase at boot

Create a LUKS partition for the media files and leave the documents unencrypted

Which scenario is a typical use case for eCryptfs?

Encrypting a database that is accessed by multiple users simultaneously

Encrypting an entire disk that contains the operating system

Encrypting a user's home directory on a system where the root file system is not encrypted

A security team is comparing encryption methods for a legacy application that stores data in a directory on a shared file system. The application must be able to read and write files transparently. The team is considering both eCryptfs and EncFS. Which statement correctly describes a key difference that should influence the decision?

eCryptfs does not support multiple users, while EncFS does

eCryptfs requires a separate partition, while EncFS can be used on any directory

eCryptfs stores encryption metadata in file headers, while EncFS stores metadata in a separate directory structure

eCryptfs is a user-space file system, while EncFS operates in the kernel

An administrator is explaining the difference between LUKS and plain dm-crypt to a junior colleague. The administrator states that LUKS provides a standardized on-disk format. What is the primary benefit of this format?

It allows the encryption parameters and key slots to be stored on the device, enabling easy management and portability

It eliminates the need for a passphrase to unlock the device

It allows the device to be mounted without root privileges

It provides faster encryption than plain dm-crypt

Which command is used to create a new LUKS-encrypted device on /dev/sdb1?

cryptsetup luksAddKey /dev/sdb1

cryptsetup create /dev/sdb1 mydevice

cryptsetup open /dev/sdb1 mydevice

cryptsetup luksFormat /dev/sdb1

LPIC-3 Security

Domain 1Objective 3

325.3 Encrypted File Systems (weight: 3) LPIC-3-SECURITY Practice Questions (Page 5)

Part of the Topic 325: Cryptography domain, which makes up ~28% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

6concepts

Questions 21–25

21expert · hard
A file server hosts a mix of sensitive documents and large media files. The administrator needs to encrypt the sensitive documents but wants to avoid the performance overhead of encrypting the large media files. The solution must not require a passphrase at boot, and the encryption must be transparent to users. Which approach best meets these requirements?
Select an answer first
22foundation · easy
Which scenario is a typical use case for eCryptfs?
Select an answer first
23expert · hard
A security team is comparing encryption methods for a legacy application that stores data in a directory on a shared file system. The application must be able to read and write files transparently. The team is considering both eCryptfs and EncFS. Which statement correctly describes a key difference that should influence the decision?
Select an answer first
24application · medium
An administrator is explaining the difference between LUKS and plain dm-crypt to a junior colleague. The administrator states that LUKS provides a standardized on-disk format. What is the primary benefit of this format?
Select an answer first
25foundation · easy
Which command is used to create a new LUKS-encrypted device on /dev/sdb1?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.

325.3 Encrypted File Systems (weight: 3) LPIC-3-SECURITY Practice Questions (Page 5)

Questions 21–25

Which scenario is a typical use case for eCryptfs?

An administrator is explaining the difference between LUKS and plain dm-crypt to a junior colleague. The administrator states that LUKS provides a standardized on-disk format. What is the primary benefit of this format?

Which command is used to create a new LUKS-encrypted device on /dev/sdb1?

Keep studying — Topic 325: Cryptography