Lpi LPI Certifications 117-202 Questions & Answers

• Question 111:

  As of Linux kernel 2.4, which software is used to configure a VPN?

  A. IPSec

  B. SSH

  C. net - tools

  D. FreeS/WAN

  E. iproute2

  Correct Answer: D

• Question 112:

  What is the appropriate configuration file entry to allow SSH to run from inetd?

  A. ssh stream tcp nowait root /usr/sbin/tcpd sshd

  B. ssh stream tcp nowait root /usr/sbin/tcpd tcpd

  C. ssh stream tcpd nowait root /usr/sbin/tcpd sshd

  D. ssh data tcpd nowait root /usr/sbin/tcpd sshd

  E. ssh data tcp nowait root /usr/sbin/tcpd sshd

  Correct Answer: A

• Question 113:

  Which of the following sentences is TRUE about FreeS/WAN?

  A. FreeS/WAN doesn't support remote users (i.e. notebook users with dynamic IP addresses) connecting to the LAN

  B. FreeS/WAN needs a patch to support NAT traversal for users behind a NAT gateway

  C. FreeS/WAN doesn't require any Linux kernel 2.4 modules to work properly

  D. FreeS/WAN only enables the use of strong encryption between Linux hosts

  E. FreeS/WAN can't be used to establish a VPN between a Linux host and a Microsoft Windows 2000 Server host

  Correct Answer: B

• Question 114:

  Which TWO of the following statements about the tcp_wrappers configuration files are correct?

  A. Both files must be edited, to get tcp_wrappers to work properly

  B. It is possible to configure tcp_wrappers using just one file

  C. (x) inetd requires these files

  D. All programs that provide network services use these files to control access

  E. tcpd uses these files to control access to network services

  Correct Answer: BE

• Question 115:

  A correctly-formatted entry has been added to /etc/hosts.allow to allow certain clients to connect to a service, but this is having no effect. What would be the cause of this?

  A. tcpd needs to be sent the HUP signal.

  B. The service needs to be restarted.

  C. The machine needs to be restarted.

  D. There is a conflicting entry in /etc/hosts.deny .

  E. The service does not support tcpwrappers

  Correct Answer: E

• Question 116:

  Which TWO /etc/hosts.allow entries will allow access to sshd from the class C network 192.168.1.0?

  A. sshd : 192.168.1.

  B. sshd : 192.168.1

  C. sshd : 192.168.1.0 netmask 255.255.255.0

  D. sshd : 192.168.1.0/255.255.255.0

  E. sshd : 192.168.1.0

  Correct Answer: AD

• Question 117:

  Which TWO of the following statements about xinetd and inetd are correct?

  A. xinetd supports access control by time.

  B. xinetd only supports TCP connections.

  C. xinetd is faster than xinetd and should be preferred for this reason.

  D. xinetd includes support for X connections.

  E. xinetd and inetd are used to reduce the number of listening daemons.

  Correct Answer: AE

• Question 118:

  What could be a reason for invoking vsftpd from (x) inetd?

  A. It's not a good idea, because (x) inetd is not secure

  B. Running vsftpd in standalone mode is only possible as root, which could be a security risk

  C. vsftpd cannot be started in standalone mode

  D. (x) inetd has more access control capabilities

  E. (x) inetd is needed to run vsftpd in a chroot jail

  Correct Answer: D

• Question 119:

  An SSH server is configured to use tcp_wrappers and only hosts from the class C network 192.168.1.0 should be allowed to access it. Which of the following lines would achieve this, when entered in/etc/hosts.allow?

  A. ALLOW: 192.168.1.0/255.255.255.0 : sshd

  B. sshd : 192.168.1.0/255.255.255.0 : ALLOW

  C. 192.168.1.0/255.255.255.0 : ALLOW: sshd

  D. tcpD. sshd : 192.168.1.0/255.255.255.0 : ALLOW

  E. sshd : ALLOW: 192.168.1.0/255.255.255.0

  Correct Answer: B

• Question 120:

  Which of the following commands can gather entries from the specified administrative NIS database group?

  A. ypserv group

  B. getent group

  C. rpcinfo group

  D. ypbind group

  E. yppoll group

  Correct Answer: B