An administrator is scanning a local network segment (192.168.1.0/24) to identify all active devices. The administrator wants to ensure that hosts that block ICMP echo requests are still discovered. Which nmap command should be used?

nmap -PS22,80,443 -sn 192.168.1.0/24

What is a rogue router advertisement?

An ARP reply that spoofs a MAC address

A DHCP message that assigns incorrect IP addresses

A DNS response that redirects a domain to a malicious IP

An unsolicited ICMPv6 Router Advertisement message sent by an unauthorized device to manipulate network configuration

A network administrator is analyzing a packet capture to determine which protocols are consuming the most bandwidth on the network. The administrator wants to see a breakdown of traffic by protocol. Which Wireshark feature should be used?

Statistics > Protocol Hierarchy

A company wants to prevent rogue DHCP servers from assigning incorrect IP addresses to clients. The network uses a mix of wired and wireless segments. Which mitigation should be implemented?

Enable IPv6 router advertisements on the network.

Disable ICMP redirects on all routers.

Enable DHCP snooping on all switches.

Configure all clients to use static IP addresses.

LPIC-3 Security

Domain 4Objective 1

328.1 Network Hardening (weight: 4) LPIC-3-SECURITY Practice Questions (Page 1)

Part of the Topic 328: Network Security domain, which makes up ~27% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

16concepts

Questions 1–5

1foundation · easy
Which Wireshark statistics tool is used to view traffic between two specific endpoints?
Select an answer first
2application · medium
An administrator is scanning a local network segment (192.168.1.0/24) to identify all active devices. The administrator wants to ensure that hosts that block ICMP echo requests are still discovered. Which nmap command should be used?
Select an answer first
3foundation · easy
What is a rogue router advertisement?
Select an answer first
4application · medium
A network administrator is analyzing a packet capture to determine which protocols are consuming the most bandwidth on the network. The administrator wants to see a breakdown of traffic by protocol. Which Wireshark feature should be used?
Select an answer first
5application · medium
A company wants to prevent rogue DHCP servers from assigning incorrect IP addresses to clients. The network uses a mix of wired and wireless segments. Which mitigation should be implemented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.