Lpi LPI Certifications 117-202 Questions & Answers

• Question 11:

  What command is used to reload a set of saved netfilter rules?

  A. iptables-restore

  B. iptables-recover

  C. iptables-load

  D. iptables-reload

  Correct Answer: A

• Question 12:

  Which of the following daemons will monitor log files for inappropriate activity, such as login attempts, from remote IP addresses and will add netfilter rules to block the offending address?

  A. fail2ban

  B. portsentry

  C. openids

  D. logwatch

  Correct Answer: A

• Question 13:

  Which of the following are predefined targets for netfilter rules? (Choose TWO correct answers.)

  A. JUMP

  B. REROUTE

  C. NAT

  D. ACCEPT

  E. RETURN

  Correct Answer: DE

• Question 14:

  With netfilter, which packet matching table contains built-in chains called INPUT, OUTPUT and FORWARD?

  A. ipconn

  B. filter

  C. nat

  D. default

  E. masq

  Correct Answer: B

• Question 15:

  Which command is used to administer IPv6 netfilter rules?

  A. iptables

  B. iptablesv6

  C. iptables6

  D. ip6tables

  E. ipv6tables

  Correct Answer: D

• Question 16:

  A company is transitioning to a new domain name and wants to accept e-mail for both domains for all of its users on a Postfix server. Which configuration option should be updated to accomplish this?

  A. mydomain

  B. mylocations

  C. mydestination

  D. myhosts

  E. mydomains

  Correct Answer: C

• Question 17:

  Why should the Postfix parameter disable_vrfy_command be set to yes on a publicly accessible mail server?

  A. It prevents e-mail delivery attempts to a non-existent user.

  B. It prevents some techniques of gathering existing e-mail addresses.

  C. It enables verification attempts on the sender e-mail address.

  D. It speeds up forwarding of relayed e-mail.

  Correct Answer: B

• Question 18:

  Which Postfix command can be used to rebuild all of the alias database files with a single invocation?

  A. makealiases

  B. newaliases

  C. postalias

  D. postmapbuild

  Correct Answer: B

• Question 19:

  In a PAM configuration file, which of the following is true about the sufficient control flag in the following line?

  Auth sufficient pam_module.so

  A. This PAM module is called if it is present, otherwise, further modules will be tried.

  B. This module is sufficient to determine both success or failure of an authentication attempt and no other modules will need to be tried.

  C. Failure of this module will not be considered fatal and, if the module succeeds, success will be returned to the application immediately without considering and further modules.

  D. If a previous required module fails, success of this module will be used to check if further modules in the stack should be tried.

  Correct Answer: C

• Question 20:

  In which Apache context should SSL support be activated?

  A. In a VirtualHost directive

  B. In a Location directive

  C. In a Directory directive which is set to /

  D. In a SSLHost directive

  Correct Answer: A