328.1 Network Hardening (weight: 4) LPIC-3-SECURITY Practice Questions (Page 9)

Questions 41–44

1. 41foundation · easy

   Which Wireshark display filter would show only HTTP traffic?

   • Atcp.port == 80
   • Bhttp
   • Cip.addr == 80
   • Dudp
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A network administrator has just installed FreeRADIUS on a new Ubuntu server and needs to add a Cisco switch as a RADIUS client. The switch will use the shared secret 'S3cureSw1tch!' and the source IP 192.168.10.5. After editing the appropriate configuration file, the administrator runs 'sudo freeradius -X' and sees the client listed. Which additional step is required to ensure the switch can authenticate users against this RADIUS server?

   • AConfigure the Cisco switch with the RADIUS server IP, shared secret, and authentication method.
   • BAdd the switch's hostname to the /etc/hosts file on the FreeRADIUS server.
   • CCreate a user account in the 'users' file for the switch's management interface.
   • DRestart the FreeRADIUS service to load the new client configuration.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   Which nmap option enables service version detection?

   • A-sV
   • B-sP
   • C-O
   • D-A
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   What is the primary role of FreeRADIUS in a network environment?

   • ATo encrypt all network traffic using IPsec tunnels
   • BTo provide centralized authentication, authorization, and accounting (AAA) for network access
   • CTo act as a firewall filtering network traffic based on security policies
   • DTo perform vulnerability scanning of network devices
   Reveal Solution Discussion Select an answer first