LPIC3 303 Security Practice Test

The configuration of LUKS (Linux Unified Key Setup) encrypted devices is primarily specified in the file /etc/crypttab. This file serves as a critical component in managing encrypted volumes by listing the devices that should be decrypted at boot time. It allows the system to know which devices are encrypted and to provide the necessary information (such as the device name, key file, and the passphrase handling) to unlock these devices during the boot process.

In contrast, while /etc/luks.conf may appear relevant, it is not a standard configuration file associated specifically with LUKS setups. The /etc/fstab file is used for mounting filesystems, not specifically for encrypted volumes, although it can reference decrypted devices. The /etc/secure.conf file does not have a recognized purpose related to LUKS or encrypted devices. By understanding the specific role of /etc/crypttab, one can effectively manage and configure LUKS-encrypted devices on a system.