An administrator is setting up eCryptfs for a user's home directory. The administrator has already installed the necessary packages and created the encrypted directory. What must be configured so that the encrypted home directory is automatically mounted when the user logs in via SSH?

Add a line to /etc/fstab to mount the directory at boot

Add a script to /etc/profile.d to mount the directory

Configure pam_ecryptfs in the PAM stack for SSH

Create a systemd user service that runs at boot

A LUKS-encrypted volume is used for nightly backups. The backup script runs as a non-interactive service and must unlock the volume without human intervention. The administrator wants to avoid storing the passphrase in the script itself. Which approach is the most secure among the listed options?

Store the passphrase in a key file with permissions 0400 owned by root, and use cryptsetup open --key-file

Use an empty passphrase for the LUKS volume

Use a plain dm-crypt volume with a fixed key

Embed the passphrase directly in the backup script

What is a key characteristic of EncFS?

It provides full-disk encryption for the root file system.

It stores encryption metadata in a LUKS header.

It is a kernel-level block device encryption framework.

It is a user-space file system that provides encrypted file storage on top of an existing directory.

LPIC-3 Security

Domain 1Objective 3

325.3 Encrypted File Systems (weight: 3) LPIC-3-SECURITY Practice Questions (Page 6)

Part of the Topic 325: Cryptography domain, which makes up ~28% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

6concepts

Questions 26–28

26application · medium
An administrator is setting up eCryptfs for a user's home directory. The administrator has already installed the necessary packages and created the encrypted directory. What must be configured so that the encrypted home directory is automatically mounted when the user logs in via SSH?
Select an answer first
27expert · hard
A LUKS-encrypted volume is used for nightly backups. The backup script runs as a non-interactive service and must unlock the volume without human intervention. The administrator wants to avoid storing the passphrase in the script itself. Which approach is the most secure among the listed options?
Select an answer first
28foundation · easy
What is a key characteristic of EncFS?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.

325.3 Encrypted File Systems (weight: 3) LPIC-3-SECURITY Practice Questions (Page 6)

Questions 26–28

An administrator is setting up eCryptfs for a user's home directory. The administrator has already installed the necessary packages and created the encrypted directory. What must be configured so that the encrypted home directory is automatically mounted when the user logs in via SSH?

A LUKS-encrypted volume is used for nightly backups. The backup script runs as a non-interactive service and must unlock the volume without human intervention. The administrator wants to avoid storing the passphrase in the script itself. Which approach is the most secure among the listed options?

What is a key characteristic of EncFS?

Keep studying — Topic 325: Cryptography