LPIC-3 Security
Domain 2Objective 4
326.4 FreeIPA Installation and Samba Integration (weight: 4) LPIC-3-SECURITY Practice Questions (Page 1)
Part of the Topic 326: Host Security domain, which makes up ~26% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)
23questions here
5free pages
9concepts
Questions 1–5
- 1
After installing a FreeIPA server, which command can be used to verify that the installation was successful?
Select an answer first - 2
A company has a FreeIPA domain and an Active Directory domain with a two-way trust. The security team wants to allow AD users to access a FreeIPA-enrolled web application that uses Kerberos authentication. The application is configured to use the FreeIPA realm. AD users can authenticate, but they receive an authorization error. The FreeIPA administrator has verified that the AD users are in the correct FreeIPA group. What is the most likely cause?
Select an answer first - 3
A government agency requires that all users logging into Linux servers be confined to specific SELinux roles based on their FreeIPA group. The agency has created SELinux user mappings in FreeIPA, mapping the group `analysts` to the `staff_u` SELinux user. However, when an analyst logs in, `id -Z` shows `unconfined_u` instead of `staff_u`. What is the most likely cause?
Select an answer first - 4
A company uses FreeIPA to manage SELinux user mappings. They have a group of developers who need to run `sudo` to install software. The developers are mapped to the `staff_u` SELinux user, which allows them to transition to `sysadm_u` via sudo. However, when a developer runs `sudo -i`, the resulting shell is still in `staff_u` instead of `sysadm_u`. What is the most likely cause?
Select an answer first - 5
A company is deploying FreeIPA in a highly available configuration. They have two FreeIPA servers, `ipa1.example.com` and `ipa2.example.com`, both with integrated DNS. The company's network uses DHCP, and the DHCP server assigns IP addresses dynamically. The administrator has configured both servers with static IPs and has set up replication. However, clients that receive their DNS settings from DHCP cannot resolve `ipa1.example.com` or `ipa2.example.com`. What is the most likely cause?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.