A network administrator is evaluating VPN protocols for a new remote-access solution. The company uses Windows and Linux clients, and the security team mandates that all VPN traffic be encrypted. The administrator is considering L2TP. What is the correct understanding of L2TP's role in this context?

L2TP provides tunneling but no encryption, so it must be combined with IPsec (L2TP/IPsec) to encrypt the traffic.

L2TP provides encryption natively, so IPsec is not needed.

L2TP is only supported on Linux and cannot be used with Windows clients.

L2TP is a Layer 3 protocol that replaces IPsec entirely.

An OpenVPN server is configured with `tls-server`, `dev tun`, and `server 10.8.0.0 255.255.255.0`. The server also has `client-config-dir /etc/openvpn/ccd` and `route 192.168.20.0 255.255.255.0`. A client connects and receives the IP 10.8.0.10. The client can reach the server's LAN (192.168.20.0/24), but the LAN hosts cannot initiate connections back to the client. What is the most likely reason?

The OpenVPN server has `client-to-client` disabled.

The client's firewall is blocking inbound connections from the LAN.

The LAN hosts do not have a route back to the 10.8.0.0/24 network via the OpenVPN server.

The client is missing a `route` directive for the LAN subnet.

LPIC-3 Security

Domain 4Objective 4

328.4 Virtual Private Networks (weight: 4) LPIC-3-SECURITY Practice Questions (Page 1)

Part of the Topic 328: Network Security domain, which makes up ~27% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

12concepts

Questions 1–5

1application · easy
A network administrator is evaluating VPN protocols for a new remote-access solution. The company uses Windows and Linux clients, and the security team mandates that all VPN traffic be encrypted. The administrator is considering L2TP. What is the correct understanding of L2TP's role in this context?
Select an answer first
2foundation · easy
Which command is used to start an OpenVPN service on a system using systemd?
Select an answer first
3foundation · easy
In IPsec-Tools, which command is used to set security policies and security associations in the kernel?
Select an answer first
4foundation · easy
In a routed OpenVPN (tun) setup, what must be enabled on the server to allow clients to communicate with hosts on the LAN?
Select an answer first
5expert · hard
An OpenVPN server is configured with `tls-server`, `dev tun`, and `server 10.8.0.0 255.255.255.0`. The server also has `client-config-dir /etc/openvpn/ccd` and `route 192.168.20.0 255.255.255.0`. A client connects and receives the IP 10.8.0.10. The client can reach the server's LAN (192.168.20.0/24), but the LAN hosts cannot initiate connections back to the client. What is the most likely reason?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.

328.4 Virtual Private Networks (weight: 4) LPIC-3-SECURITY Practice Questions (Page 1)

Questions 1–5

Which command is used to start an OpenVPN service on a system using systemd?

In IPsec-Tools, which command is used to set security policies and security associations in the kernel?

In a routed OpenVPN (tun) setup, what must be enabled on the server to allow clients to communicate with hosts on the LAN?

Keep studying — Topic 328: Network Security