A security team is hardening a Linux server that will be exposed to the internet. They want to mitigate the risk of buffer overflow attacks and also prevent the server from being used as a relay for IP spoofing. Which sysctl settings should be applied?

Set kernel.exec-shield=1 and net.ipv4.icmp_echo_ignore_all=1.

Set kernel.randomize_va_space=2 and net.ipv4.conf.all.rp_filter=1.

Set net.ipv4.ip_forward=0 and kernel.randomize_va_space=1.

Set kernel.kptr_restrict=1 and net.ipv4.conf.all.send_redirects=0.

A company is migrating multiple legacy applications to a virtualized environment. The applications are not well-maintained and have known vulnerabilities. The security team wants to minimize the risk of a compromise spreading between applications. Which virtualization feature should be leveraged?

Disable unnecessary services on the host.

Use chroot environments for each application.

Run each application in a separate virtual machine with snapshots.

Run all applications in a single VM with different users.

Which sysctl parameter is used to disable ICMP redirect acceptance, a common hardening measure?

net.ipv4.conf.all.accept_redirects

What is the primary purpose of setting a supervisor password in the BIOS?

To prevent unauthorized changes to BIOS settings

To encrypt the contents of the hard drive

To prevent the operating system from booting

To authenticate users before they can log in to the OS

LPIC-3 Security

Domain 2Objective 1

326.1 Host Hardening (weight: 3) LPIC-3-SECURITY Practice Questions (Page 2)

Part of the Topic 326: Host Security domain, which makes up ~26% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

8concepts

Questions 6–10

6application · medium
A security team is hardening a Linux server that will be exposed to the internet. They want to mitigate the risk of buffer overflow attacks and also prevent the server from being used as a relay for IP spoofing. Which sysctl settings should be applied?
Select an answer first
7expert · hard
A company is migrating multiple legacy applications to a virtualized environment. The applications are not well-maintained and have known vulnerabilities. The security team wants to minimize the risk of a compromise spreading between applications. Which virtualization feature should be leveraged?
Select an answer first
8foundation · easy
Which command is used to change the root directory for a process?
Select an answer first
9foundation · easy
Which sysctl parameter is used to disable ICMP redirect acceptance, a common hardening measure?
Select an answer first
10foundation · easy
What is the primary purpose of setting a supervisor password in the BIOS?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.