Lpi LPI Certifications 117-201 Questions & Answers

• Question 101:

  To securely use dynamic DNS updates, the use of TSIG is recommended. Which TWO statements about TSIG are true?

  A. TSIG is used for zone data encryption

  B. TSIG is a signal to start a zone update

  C. TSIG is used in zone files

  D. TSIG is used only in server configuration

  E. Servers using TSIG must be in sync (time zone!)

  Correct Answer: DE

• Question 102:

  What is the purpose of a PTR record?

  A. To provide name to IP resolution.

  B. To provide IP to name resolution.

  C. To direct email to a specific host.

  D. To provide additional host information.

  E. To direct clients to another nameserver.

  Correct Answer: B

• Question 103:

  After changing the default runlevel in the init configuration file, the system boots in a different than the intended runlevel. Where else could be this different run level be defined?

  A. Nowhere. The init configuration file wasn't properly modified

  B. In the boot loader configuration file

  C. In /etc/ runlevel under default

  D. In the initrd image file

  E. In the /etc/rc.d/rc.local file

  Correct Answer: B

• Question 104:

  A BIND server should never answer queries from certain networks or hosts. Which configuration directive could be usedforthispurpose?

  A. deny-query { ...; };

  B. no-answer { ...; };

  C. deny-answer { ...; };

  D. deny-access { ...; };

  E. blackhole { ...; };

  Correct Answer: E

• Question 105:

  What command is used to mount a floppy disk image under /mnt/floppy?

  A. mount -l root.img /mnt/floppy

  B. mount --loop root.img /mnt/floppy

  C. mountroot.img/mnt/floppy

  D. mount root.img

  E. mount -o loop root.img /mnt/floppy

  Correct Answer: E

• Question 106:

  What information can be found in the log file specified by the status parameter in OpenVPN's server.conf? (Select TWO correct answers)

  A. Errors and warnings generated by the openvpn daemon

  B. Routing information

  C. Statistical information regarding the currently running openvpn daemon

  D. A list of currently connected clients

  E. A history of all clients who have connected at some point

  Correct Answer: BD

• Question 107:

  Hundreds of people log in to a server from remote locations per day. Which of the following commands show remote SSH, FTP and telnetsessions fora particularday?

  A. cat/var/log/messagesIgrep"'date"+%b%e"'"Iegrep'(telnetIsshIftp)'

  B. cat /var/log/messages I egrep '(telnetIsshIftp)'

  C. cat/var/log/messagesIgrep"date"+%b%e""Igrep-E'(telnetIsshIftp)'

  D. cat/var/log/messagesIdateIegrep'(telnetIsshIftp)'

  E. cat /var/log/messages > grep "'date "+%b %e"'" > egrep '(telnet\ssh\ftp)'

  Correct Answer: AC

• Question 108:

  A system is running out of swap space. To initialise 5GB of additional swap space, which combination of commands should be used?

  A. dd if=/dev/zero of=/tmp/swapfile bs=1024 count=5120000; mkswap /tmp/swapfile; swapon /tmp/ swapfile

  B. dd if=/dev/zero of=/tmp/swapfile bs=1024 count=5120000; swap on /tmp/swapfile

  C. dd if=/dev/zero of=/tmp/swapfile bs=1024 count=5120000; mkswap /tmp/swapfile; mount /tmp/swapfile

  D. touch -5G /tmp/swapfile; swapon /tmp/swapfile

  E. mkswap /tmp/swapfile 512000; swapon /tmp/swapfile

  Correct Answer: A

• Question 109:

  What is a significant difference between host and zone keys generated by dnssec-keygen?

  A. There is no difference.

  B. Zone key files contain a public and private key.

  C. Host keys files contain a public and private key.

  D. Host keys must always be generated if DNSSEC is used; zone keys are optional

  E. Zone keys must always be generated if DNSSEC is used; host keys are optional

  Correct Answer: B

• Question 110:

  A BIND server should be upgraded to use TSIG. Which configuration parameters should be added, if the server should use the algorithm hmac-md5 and the key skrKc4DoTzi/tAkllPi7JZA== ?

  A. TSIG server.example.com. algorithm hmac-md5; secret "skrKc4DoTzi/tAkllPi7JZA=="; };

  B. key server.example.com. { algorithm hmac-md5; secret skrKc4DoTzi/tAkllPi7JZA==; };

  C. key server.example.com. { algorithm hmac-md5; secret "skrKc4DoTzi/tAkllPi7JZA=="; };

  D. key server.example.com. { algorithm=hmac-md5; secret="skrKc4DoTzi/tAkllPi7JZA=="; };

  E. key server.example.com. { algorithm hmac-md5 secret "skrKc4DoTzi/tAkIlPi7JZA==" };

  Correct Answer: C