A penetration tester is scanning a target server and needs to identify the exact version of the web server running on port 443. The tester also wants to know the operating system of the target. Which nmap command should be used?

nmap -sV -O -p 443 192.168.1.10

A network analyst is using Wireshark to troubleshoot a slow application. The analyst wants to see only HTTP traffic between the client 192.168.1.100 and the server 192.168.1.200. Which display filter should be applied?

ip.src == 192.168.1.100 && ip.dst == 192.168.1.200

http && ip.addr == 192.168.1.100 && ip.addr == 192.168.1.200

A network administrator is setting up FreeRADIUS for the first time. The administrator wants to test the RADIUS server locally with a test user before configuring any network devices. Which command should be used to send a test authentication request?

freeradius -X testuser testpass

radtest testuser testpass localhost 0 testing123

radclient testuser testpass localhost

A network analyst is investigating a possible rogue router advertisement attack. The analyst has a packet capture and wants to identify all ICMPv6 router advertisements and determine if any are coming from an unexpected source. Which Wireshark display filter should be used to isolate these packets?

icmpv6.type == 134 && ipv6.src != fe80::1

LPIC-3 Security

Domain 4Objective 1

328.1 Network Hardening (weight: 4) LPIC-3-SECURITY Practice Questions (Page 2)

Part of the Topic 328: Network Security domain, which makes up ~27% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

16concepts

Questions 6–10

6application · medium
A penetration tester is scanning a target server and needs to identify the exact version of the web server running on port 443. The tester also wants to know the operating system of the target. Which nmap command should be used?
Select an answer first
7application · medium
A network analyst is using Wireshark to troubleshoot a slow application. The analyst wants to see only HTTP traffic between the client 192.168.1.100 and the server 192.168.1.200. Which display filter should be applied?
Select an answer first
8application · medium
A network administrator is setting up FreeRADIUS for the first time. The administrator wants to test the RADIUS server locally with a test user before configuring any network devices. Which command should be used to send a test authentication request?
Select an answer first
9foundation · easy
Which feature on network switches can help mitigate rogue DHCP server attacks?
Select an answer first
10expert · hard
A network analyst is investigating a possible rogue router advertisement attack. The analyst has a packet capture and wants to identify all ICMPv6 router advertisements and determine if any are coming from an unexpected source. Which Wireshark display filter should be used to isolate these packets?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.