What is a primary security advantage of running services in separate virtual machines?

Simplified network configuration

A security administrator is hardening a web server binary that runs as root but only needs to bind to port 80 and read files in /var/www. The administrator wants to minimize the privileges of the process. Which approach is most appropriate?

Use ulimit to restrict the binary's memory usage.

Use setcap to grant only the CAP_NET_BIND_SERVICE capability and drop all others.

Set the binary's setuid bit to root.

Run the binary in a chroot jail.

A server administrator is configuring a new Linux server for a high-security environment. The server will be placed in a public area, and the administrator is concerned about physical attacks. Which BIOS setting should be configured to prevent an attacker from booting from a USB drive?

Set kernel.randomize_va_space=2.

Disable boot from removable devices.

A system administrator wants to prevent a single user from consuming all available memory and crashing a shared Linux server. The server runs multiple user processes. Which approach should be used to enforce a per-user memory limit?

Add a ulimit entry to /etc/security/limits.conf for the user.

Use the 'nice' command to lower the priority of user processes.

Disable the user's shell in /etc/passwd.

Set kernel.pid_max in sysctl.conf.

Which command is used to list all active services on a system using systemd?

systemctl list-units --type=service

LPIC-3 Security

Domain 2Objective 1

326.1 Host Hardening (weight: 3) LPIC-3-SECURITY Practice Questions (Page 1)

Part of the Topic 326: Host Security domain, which makes up ~26% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

8concepts

Questions 1–5

1foundation · easy
What is a primary security advantage of running services in separate virtual machines?
Select an answer first
2application · medium
A security administrator is hardening a web server binary that runs as root but only needs to bind to port 80 and read files in /var/www. The administrator wants to minimize the privileges of the process. Which approach is most appropriate?
Select an answer first
3application · medium
A server administrator is configuring a new Linux server for a high-security environment. The server will be placed in a public area, and the administrator is concerned about physical attacks. Which BIOS setting should be configured to prevent an attacker from booting from a USB drive?
Select an answer first
4application · medium
A system administrator wants to prevent a single user from consuming all available memory and crashing a shared Linux server. The server runs multiple user processes. Which approach should be used to enforce a per-user memory limit?
Select an answer first
5foundation · easy
Which command is used to list all active services on a system using systemd?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.