Lpi LPI Certifications 117-202 Questions & Answers

• Question 41:

  In order to prevent all anonymous FTP users from listing uploaded file names, what security precaution can be taken when creating an upload directory?

  A. The directory must not have the execute permission set.

  B. The directory must not have the read permission set.

  C. The directory must not have the read or execute permission set.

  D. The directory must not have the write permission set.

  E. The directory must not contain other directories.

  Correct Answer: B

• Question 42:

  Which of the following actions should be considered when a FTP chroot jail is created? (Choose THREE correct answers.)

  A. Create /dev/ and /etc/ in the chroot enviroment.

  B. Create /etc/passwd in the chroot enviroment.

  C. Bind-mount /proc in the chroot environment.

  D. Create the user ftp in the chroot enviroment.

  E. Create /dev/kmem in the chroot environment.

  Correct Answer: ABD

• Question 43:

  The program vsftpd, running in a chroot jail, gives the following error:

  /bin/vsftpD. error while loading shared libraries: libc.so.6: cannot open shared object filE. No such file or directory.

  Which of the following actions would fix the error?

  A. The file /etc/ld.so.conf in the root filesystem must contain the path to the appropriate lib directory in the chroot jail.

  B. Create a symbolic link that points to the required library outside the chroot jail.

  C. Copy the required library to the appropriate lib directory in the chroot jail.

  D. Run the program using the command chroot and the option --static_libs.

  Correct Answer: C

• Question 44:

  On a Linux router, packet forwarding for IPv4 has been enabled. After a reboot, the machine no longer forwards IP packets from other hosts. The commanD.

  echo 1 > /proc/sys/net/ipv4/ip_forward temporarily resolves this issue. Which one of the following options is the best way to ensure this setting is saved across system restarts?

  A. Add echo 1 > /proc/sys/net/ipv4/ip_forward to the root user login script.

  B. Add echo 1 > /proc/sys/net/ipv4/ip_forward to any user login script.

  C. In /etc/sysctl.conf change net.ipv4.ip_forward to 1.

  D. In /etc/rc.local add net.ipv4.ip_forward = 1.

  E. In /etc/sysconfig/iptables-config add ipv4.ip_foward = 1.

  Correct Answer: C

• Question 45:

  Which setting in the Courier IMAP configuration file will tell the IMAP daemon to listen only on the localhost interface?

  A. ADDRESS=127.0.0.1

  B. Listen 127.0.0.1

  C. INTERFACE=127.0.0.1

  D. LOCALHOST_ONLY=1

  Correct Answer: A

• Question 46:

  When the default policy for the netfilter INPUT chain is set to DROP, why should a rule allowing traffic to localhost exist?

  A. All traffic to localhost must always be allowed.

  B. It doesn't matter; netfilter never affects packets addressed to localhost.

  C. Some applications use the localhost interface to communicate with other applications.

  D. syslogd receives messages on localhost.

  Correct Answer: C

• Question 47:

  It has been discovered that the company mail server is configured as an open relay. Which of the following actions would help prevent the mail server from being used as an open relay? (Choose TWO correct answers.)

  A. Restrict Postfix to only accept e-mail for domains hosted on this server.

  B. Configure Dovecot to support IMAP connectivity.

  C. Configure netfilter to not permit port 25 traffic on the public network.

  D. Restrict Postfix to only relay outbound SMTP from the internal network.

  E. Upgrade the mailbox format from mbox to maildir.

  Correct Answer: AD

• Question 48:

  Which format, for storing user e-mail, uses the directories tmp, cur and new in order to solve reliability problems in other storage formats?

  A. imap

  B. maildir

  C. mbox

  D. mh

  E. pop3

  Correct Answer: B

• Question 49:

  In the main Postfix configuration file, how are service definitions continued on the next line?

  A. It isn't possible. The service definition must fit on one line.

  B. The initial line must end with a backslash character (\).

  C. The following line must begin with a plus character (+).

  D. The following line must begin with white space indentation.

  E. The service definition continues on the following lines until all of the required fields are specified.

  Correct Answer: D

• Question 50:

  By default OpenLDAP logs via syslogd. What is the slapd.conf file directive to have the LDAP logs written to /var/log/ldap.log?

  A. loglevel

  B. logfile

  C. syslogfile

  D. logfilepath

  Correct Answer: B