Lpi LPI Certifications 117-202 Questions & Answers

• Question 121:

  When configuring a PPP dial-in server, which option is used (in the pppd configuration file) to enable user authentication against the system password database?

  A. login

  B. auth

  C. local

  D. password

  E. user

  Correct Answer: A

• Question 122:

  To configure an LDAP service in the company " Certkiller Ltd", which of the following entries should be added to slapd.conf, in the Database Directives section, to set the rootdn so that the common name is Manager and the company's domain is Certkiller .com ?

  A. rootdn cn=Manager dc= Certkiller dc=com

  B. rootdn "cn=Manager,dc= Certkiller ,dc=com"

  C. rootdn cn= Certkiller ,dc=com,dc=Manager

  D. rootdn "cn= Certkiller ,dc=com,dc=Manager"

  E. rootdn "cn=Manager dc= Certkiller dc=com"

  Correct Answer: B

• Question 123:

  Which of the following tools, on its own, can provide dial-in access to a server?

  A. mingetty

  B. pppd

  C. dip

  D. chat

  E. mgetty

  Correct Answer: E

• Question 124:

  Which of the following is true, when a server uses PAM authentication and both /etc/pam.conf and /etc/ pam.d/ exist?

  A. It causes error messages.

  B. /etc /pam.conf will be ignored.

  C. /etc / pam.d/ will be ignored.

  D. Both are used, but /etc/pam.d/ has a higher priority.

  E. Both are used, but /etc/pam.conf has a higher priority.

  Correct Answer: B

• Question 125:

  What is the advantage of using SASL authentication with OpenLDAP?

  A. It can prevent the transmission of plain text passwords over the network.

  B. It disables anonymous access to the LDAP server.

  C. It enables the use of Access Control Lists.

  D. It allows the use of LDAP to authenticate system users over the network.

  E. All of the above.

  Correct Answer: A

• Question 126:

  In a PAM configuration file, which of the following is true about the required control flag?

  A. If the module returns success, no more modules of the same type will be invoked

  B. The success of the module is needed for the module-type facility to succeed. If it returns a failure, control is returned to the calling application

  C. The success of the module is needed for the module-type facility to succeed. However, all remaining modules of the same type will be invoked.

  D. The module is not critical and whether it returns success or failure is not important.

  E. If the module returns failure, no more modules of the same type will be invoked

  Correct Answer: C

• Question 127:

  LDAP-based authentication against a newly-installed LDAP server does not work as expected. The file / etc/pam.d/login includes the following configuration parameters. Which of them is NOT correct?

  A. password required /lib/security/pam_ldap.so

  B. auth sufficient /lib/security/pam_ldap.so use_first_pass

  C. account sufficient /lib/security/pam_ldap.so

  D. password required /lib/security/pam_pwdb.so

  E. auth required /lib/security/pam_ldap.so

  Correct Answer: E

• Question 128:

  What command is used to add a route to the 192.168.4.0/24 network via 192.168.0.2?

  A. route add - network 192.168.4.0 netmask 255.255.255.0 gw 192.168.0.2

  B. route add - net 192.168.4.0/24 gw 192.168.0.2

  C. route add - network 192.168.4.0/24 192.168.0.2

  D. route add - net 192.168.4.0 netmask 255.255.255.0 192.168.0.2

  E. route add - net 192.168.4.0 netmask 255.255.255.0 gw 192.168.0.2

  Correct Answer: E

• Question 129:

  Which of the following sentences is true, when using the following /etc/pam.d/login file?

  #%PAM-l.0 auth required /lib/security/pam_securetty.so auth required /lib/security/pam_nologin.so auth sufficient /lib/security/pam_unix.so shadow nullok md5 use_authtok auth required /lib/security/pam_ldap.so use_first_pass account sufficient /lib/security/pam_unix.so account required /lib/security/pam_ldap.so password required /lib/security/pam_cracklib.so password sufficient /lib/security/pam_unix.so nullok use_authtok md5 shadow password required /lib/security/pam_ldap.so use_first_pass session optional /lib/security/pam_console.so session sufficient /lib/security/pam_unix.so session required /lib/security/pam_ldap.so

  A. All users will be authenticated against the LDAP directory

  B. This is the only file needed to configure LDAP authentication on Linux

  C. Only local users will be able to log in, when the file/etc/nologin exists

  D. Ordinary users will be able to change their password to be blank

  E. If the control flags for auth were changed to required, local users wouldn't be able to log in

  Correct Answer: D

• Question 130:

  A server with 2 network interfaces, eth0 and eth1, should act as a router. eth0 has the IP address 192.168.0.1 in the subnet 192.168.0.1/24 and eth1 has the IP address 10.0.0.1 in the subnet 10.0.0.0/16.

  The routing table looks fine, but no data is traversing the networks. Which TWO of the following need to be done?

  A. Enable IP forwarding with echo "1" > /proc/sys/net/ipv4/ip_forward

  B. Add new firewall chains to handle inbound and outbound traffic on both interfaces.

  C. Reconfigure the firewall rules to allow traffic to traverse the networks.

  D. The routing table needs to be restarted, for the changes to take effect.

  E. The server needs to be restarted, for the changes to take effect.

  Correct Answer: AC