Lpi LPI Certifications 117-202 Questions & Answers

• Question 171:

  Which option is used to configure pppd to use up to two DNS server addresses provided by the remote server?

  A. ms-dns

  B. nameserver

  C. usepeerdns

  D. dns

  E. None of the above

  Correct Answer: E

• Question 172:

  A DNS server has the IP address 192.168.0.1. Which TWO of the following need to be done on a client machine to use this DNS server?

  A. Add nameserver 192.168.0.1 to /etc/resolv.conf

  B. Run route add nameserver 192.168.0.1

  C. Run ifconfig eth0 nameserver 192.168.0.1

  D. Run echo "nameserver 192.168.1.1" >> /etc/resolv.conf

  E. Run bind nameserver 192.168.1.1

  Correct Answer: AD

• Question 173:

  The mailserver is currently called fred, while the primary MX record points to mailhost.example.org. What must be done to direct example.org email towards fred?

  A. Add an A record for mailhost to fred's IP address.

  B. Add a CNAME record from mailhost to fred

  C. Add another MX record pointing to fred's IP address.

  D. Add a PTR record from mailhost to fred.

  Correct Answer: A

• Question 174:

  What directive can be used in named.conf to restrict zone transfers to the 192.168.1.0/24 network?

  A. allow-transfer { 192.168.1.0/24; };

  B. allow-transfer { 192.168.1.0/24 };

  C. allow-axfr { 192.168.1.0/24; };

  D. allow-axfr { 192.168.1.0/24 };

  E. allow-xfer { 192.168.1.0/24; };

  Correct Answer: A

• Question 175:

  To securely use dynamic DNS updates, the use of TSIG is recommended. Which TWO statements about TSIG are true?

  A. TSIG is used for zone data encryption

  B. TSIG is a signal to start a zone update

  C. TSIG is used in zone files

  D. TSIG is used only in server configuration

  E. Servers using TSIG must be in sync (time zone!)

  Correct Answer: DE

• Question 176:

  What is the purpose of a PTR record?

  A. To provide name to IP resolution.

  B. To provide IP to name resolution.

  C. To direct email to a specific host.

  D. To provide additional host information.

  E. To direct clients to another nameserver.

  Correct Answer: B

• Question 177:

  Performing a DNS lookup with dig results in this answer: What might be wrong in the zone definition?

  

  A. Nothing. All seems to be good.

  B. There's no "." after linuserv.example.net in the PTR record in the forward lookup zone file.

  C. There's no "." after linuserv in the PTR record in the forward lookup zone file.

  D. There's no "." after linuserv.example.net in the PTR record in the reverse lookup zone file.

  E. The "." in the NS definition in reverse lookup zone has to be removed.

  Correct Answer: D

• Question 178:

  DNSSEC is used for?

  A. Encrypted DNS queries between nameservers.

  B. Cryptographic authentication of DNS zones.

  C. Secondary DNS queries for local zones.

  D. Defining a secure DNS section.

  E. Querying a secure DNS section.

  Correct Answer: B

• Question 179:

  A BIND server should never answer queries from certain networks or hosts. Which configuration directive could be used for this purpose?

  A. deny-query { ...; };

  B. no-answer { ...; };

  C. deny-answer { ...; };

  D. deny-access { ...; };

  E. blackhole { ...; };

  Correct Answer: E

• Question 180:

  A BIND server should be upgraded to use TSIG. Which configuration parameters should be added, if the server should use the algorithm hmac-md5 and the key skrKc4DoTzi/tAkllPi7JZA== ?

  A. TSIG server.example.com. algorithm hmac-md5; secret "skrKc4DoTzi/tAkllPi7JZA=="; };

  B. key server.example.com. { algorithm hmac-md5; secret skrKc4DoTzi/tAkllPi7JZA==; };

  C. key server.example.com. { algorithm hmac-md5; secret "skrKc4DoTzi/tAkllPi7JZA=="; };

  D. key server.example.com. { algorithm=hmac-md5; secret="skrKc4DoTzi/tAkllPi7JZA=="; };

  E. key server.example.com. { algorithm hmac-md5 secret "skrKc4DoTzi/tAkI1Pi7JZA==" };

  Correct Answer: C