A security auditor is reviewing an IPsec configuration and notes that the VPN uses AH in transport mode between two application servers. The auditor recommends switching to ESP. What is the primary security advantage of ESP over AH in this scenario?

ESP protects the IP header from modification, while AH does not.

ESP provides confidentiality (encryption) of the payload, while AH only provides authentication and integrity.

ESP is faster because it does not compute a hash over the entire packet.

ESP uses a stronger authentication algorithm than AH.

An organization wants to allow remote employees to securely access internal web applications. The security team requires that all traffic between the client and the VPN server be encrypted and that the server authenticate clients using certificates. The network team wants to avoid Layer 2 broadcasts crossing the VPN. Which OpenVPN configuration should be used?

`dev tap` with `tls-server` and client certificates.

`dev tap` with `secret static.key`.

`dev tun` with `secret static.key`.

`dev tun` with `tls-server` and client certificates.

LPIC-3 Security

Domain 4Objective 4

328.4 Virtual Private Networks (weight: 4) LPIC-3-SECURITY Practice Questions (Page 3)

Part of the Topic 328: Network Security domain, which makes up ~27% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

12concepts

Questions 11–15

11foundation · easy
Which configuration file is used to define the IKE proposals and pre-shared keys for racoon?
Select an answer first
12application · medium
A security auditor is reviewing an IPsec configuration and notes that the VPN uses AH in transport mode between two application servers. The auditor recommends switching to ESP. What is the primary security advantage of ESP over AH in this scenario?
Select an answer first
13foundation · easy
Which racoon directive is used on a client to specify the remote IPsec server's address?
Select an answer first
14application · medium
An organization wants to allow remote employees to securely access internal web applications. The security team requires that all traffic between the client and the VPN server be encrypted and that the server authenticate clients using certificates. The network team wants to avoid Layer 2 broadcasts crossing the VPN. Which OpenVPN configuration should be used?
Select an answer first
15foundation · easy
Which directive in an OpenVPN server configuration file specifies the network and netmask that will be assigned to clients?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.

328.4 Virtual Private Networks (weight: 4) LPIC-3-SECURITY Practice Questions (Page 3)

Questions 11–15

Which configuration file is used to define the IKE proposals and pre-shared keys for racoon?

A security auditor is reviewing an IPsec configuration and notes that the VPN uses AH in transport mode between two application servers. The auditor recommends switching to ESP. What is the primary security advantage of ESP over AH in this scenario?

Which racoon directive is used on a client to specify the remote IPsec server's address?

Which directive in an OpenVPN server configuration file specifies the network and netmask that will be assigned to clients?

Keep studying — Topic 328: Network Security