A FreeRADIUS administrator is testing a new EAP-TLS configuration. The administrator runs 'radtest' with a test user and receives an 'Access-Accept'. However, when a real user attempts to authenticate with a certificate, the authentication fails. The administrator checks the FreeRADIUS debug output and sees 'TLS handshake failed'. Which step should the administrator take next?

Verify the client certificate is signed by the CA configured in the EAP-TLS section.

Restart the FreeRADIUS service to reload the EAP configuration.

Confirm the user exists in the 'users' file.

Check the clients.conf file for the correct shared secret.

A security analyst needs to identify which hosts on a subnet are alive and which TCP ports are open on those hosts. The analyst wants to minimize the chance of being detected by the target's intrusion detection system (IDS). Which nmap command should the analyst use?

nmap -sT -p 1-1000 192.168.1.0/24

nmap -sS -p 1-1000 192.168.1.0/24

nmap -sU -p 1-1000 192.168.1.0/24

LPIC-3 Security

Domain 4Objective 1

328.1 Network Hardening (weight: 4) LPIC-3-SECURITY Practice Questions (Page 6)

Part of the Topic 328: Network Security domain, which makes up ~27% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

16concepts

Questions 26–30

26foundation · easy
Which Wireshark display filter can help detect rogue DHCP servers by showing all DHCP packets?
Select an answer first
27application · medium
An organization uses an existing LDAP directory for user authentication. The FreeRADIUS server is configured to authenticate against LDAP, but when a user attempts to authenticate via 802.1X, the request fails. The administrator runs 'radtest' with a valid username and password and receives an 'Access-Reject'. Which configuration file is most likely misconfigured?
Select an answer first
28application · hard
A FreeRADIUS administrator is testing a new EAP-TLS configuration. The administrator runs 'radtest' with a test user and receives an 'Access-Accept'. However, when a real user attempts to authenticate with a certificate, the authentication fails. The administrator checks the FreeRADIUS debug output and sees 'TLS handshake failed'. Which step should the administrator take next?
Select an answer first
29application · medium
A security analyst needs to identify which hosts on a subnet are alive and which TCP ports are open on those hosts. The analyst wants to minimize the chance of being detected by the target's intrusion detection system (IDS). Which nmap command should the analyst use?
Select an answer first
30foundation · easy
Which nmap option is used to run NSE scripts?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.

328.1 Network Hardening (weight: 4) LPIC-3-SECURITY Practice Questions (Page 6)

Questions 26–30

Which Wireshark display filter can help detect rogue DHCP servers by showing all DHCP packets?

A security analyst needs to identify which hosts on a subnet are alive and which TCP ports are open on those hosts. The analyst wants to minimize the chance of being detected by the target's intrusion detection system (IDS). Which nmap command should the analyst use?

Which nmap option is used to run NSE scripts?

Keep studying — Topic 328: Network Security