A security administrator is hardening a Linux server that will be used as a router. The administrator wants to prevent the server from being used in IP spoofing attacks. Which sysctl setting should be applied?

Set net.ipv4.conf.all.rp_filter=1.

Set net.ipv4.icmp_echo_ignore_all=1.

Set kernel.randomize_va_space=2.

What is the primary security benefit of setting a GRUB 2 password?

It encrypts the kernel and initrd images

It ensures that only the root user can boot the system

It prevents the system from booting into single-user mode

It prevents unauthorized users from modifying kernel boot parameters

What is the primary purpose of a chroot environment?

To isolate a process from the rest of the filesystem

A Linux server is being hardened for a high-security environment. The server runs a critical application that requires IPv6 networking. The administrator wants to reduce the attack surface by disabling unnecessary services and kernel features. Which combination of actions best achieves this without breaking the application?

Disable unused services and set net.ipv6.conf.all.disable_ipv6=0.

Set net.ipv4.ip_forward=1 and disable IPv6.

Disable IPv6 entirely and remove all services except the application.

Enable all services but restrict them with firewall rules.

LPIC-3 Security

Domain 2Objective 1

326.1 Host Hardening (weight: 3) LPIC-3-SECURITY Practice Questions (Page 3)

Part of the Topic 326: Host Security domain, which makes up ~26% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

8concepts

Questions 11–15

11application · medium
A security administrator is hardening a Linux server that will be used as a router. The administrator wants to prevent the server from being used in IP spoofing attacks. Which sysctl setting should be applied?
Select an answer first
12foundation · easy
What is the primary security benefit of setting a GRUB 2 password?
Select an answer first
13foundation · easy
What is the primary purpose of a chroot environment?
Select an answer first
14expert · hard
A Linux server is being hardened for a high-security environment. The server runs a critical application that requires IPv6 networking. The administrator wants to reduce the attack surface by disabling unnecessary services and kernel features. Which combination of actions best achieves this without breaking the application?
Select an answer first
15foundation · easy
Which sysctl parameter controls kernel Address Space Layout Randomization (ASLR)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.

326.1 Host Hardening (weight: 3) LPIC-3-SECURITY Practice Questions (Page 3)

Questions 11–15

A security administrator is hardening a Linux server that will be used as a router. The administrator wants to prevent the server from being used in IP spoofing attacks. Which sysctl setting should be applied?

What is the primary security benefit of setting a GRUB 2 password?

What is the primary purpose of a chroot environment?

Which sysctl parameter controls kernel Address Space Layout Randomization (ASLR)?

Keep studying — Topic 326: Host Security