Lpi LPI Certifications 117-202 Questions & Answers

• Question 71:

  Which of the following are Samba security modes or levels? (Choose TWO correct answers.)

  A. ads

  B. data

  C. ldap

  D. network

  E. share

  Correct Answer: AE

• Question 72:

  What does the testparm command confirm regarding Samba configuration?

  A. The configuration file will load successfully.

  B. The services will operate as expected.

  C. The Samba services will be started automatically when the system boots.

  D. The netfilter configuration of the Samba server does not block any access to the services defined in the configuration.

  Correct Answer: A

• Question 73:

  The Samba configuration file contains the following lines:

  hosts allow = 192.168.1.100 192.168.2.0/255.255.255.0 localhost

  hosts deny = 192.168.2.31

  interfaces = 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0

  A workstation is on the wired network with an IP address of 192.168.1.117 but is unable to access the Samba server. A wireless laptop with an IP address of 192.168.2.93 can access the Samba server.

  Additional troubleshooting shows that almost every machine on the wired network is unable to access the Samba server. Which single choice below will permit wired workstations to connect to the Samba server without denying access to any

  one else?

  A. hosts allow = 192.168.1.1-255

  B. hosts allow = 192.168.1.100 192.168.2.200 localhost

  C. hosts deny = 192.168.1.100/255.255.255.0 192.168.2.31 localhost

  D. hosts deny = 192.168.2.200/255.255.255.0 192.168.2.31 localhost

  E. hosts allow = 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 localhost

  Correct Answer: E

• Question 74:

  Which of the following is needed, to synchronise the UNIX password with the Samba password, when the encrypted Samba password in the smbpasswd file is changed?

  A. Nothing, because this is not possible.

  B. Run netvamp regularly, to convert the passwords.

  C. Run winbind --sync, to synchronise the passwords.

  D. Add unix password sync = yes to smb.conf.

  E. Add smb unix password = sync to smb.conf.

  Correct Answer: D

• Question 75:

  How must Samba be configured so that it can check passwords against the ones in /etc/passwd and /etc/shadow?

  A. Set the parameters "encrypt passwords = yes" and "password file = /etc/passwd".

  B. Set the parameters "encrypt passwords = yes", "password file = /etc/passwd" and "password algorithm = crypt".

  C. Delete the smbpasswd file and create a symbolic link to the passwd and shadow file.

  D. It is not possible for Samba to use /etc/passwd and /etc/shadow directly.

  E. Run smbpasswd to convert /etc/passwd and /etc/shadow to a Samba password file.

  Correct Answer: D

• Question 76:

  A user requests a "hidden" Samba share, named confidential, similar to the Windows Administration Share. How can this be configured?

  A. [confidential] comment = hidden share path = /srv/smb/hidden write list = user create mask = 0700 directory mask = 0700

  B. [$confidential] comment = hidden share path = / srv/smb/hidden write list = user create mask = 0700 directory mask = 0700

  C. [#confidential] comment = hidden share path = / srv/smb/hidden write list = user

  create mask = 0700

  directory mask = 0700

  D. [%confidential] comment = hidden share path = / srv/smb/hidden write list = user create mask = 0700 directory mask = 0700

  E. [confidential$] comment = hidden share path = / srv/smb/hidden write list = user create mask = 0700 directory mask = 0700

  Correct Answer: E

• Question 77:

  Users in the ACL named sales_net must only be allowed to access to the Internet at times specified in the time_acl named sales_time. Which is the correct http_access directive for Squid to configure this?

  A. http_access deny sales_time sales_net

  B. http_access allow sales_net sales_time

  C. http_access allow sales_net and sales_time

  D. allow http_access sales_net sales_time

  E. http_access sales_net sales_time

  Correct Answer: B

• Question 78:

  Which Squid configuration keyword is used to define networks and times that the service may be accessed?

  A. acl

  B. allow

  C. http_allow

  D. permit

  Correct Answer: A

• Question 79:

  Why are different IP addresses recommended when hosting multiple HTTPS virtual hosts? (Choose TWO correct answers.)

  A. Apache caches SSL keys based on IP address.

  B. The SSL connection is made before the virtual host name is known by the server.

  C. The SSL key is tied to a specific IP address when issued by the Certificate Authority.

  D. This is only needed when dynamic content is being generated by more than one of the virtual hosts.

  E. The Server Name Indication extension to TLS is not universally supported.

  Correct Answer: BE

• Question 80:

  Which of the following are commonly used log file directives in Apache? (Choose TWO correct answers.)

  A. ConfigLog

  B. CustomLog

  C. ErrorLog

  D. ServerLog

  E. VHostLog

  Correct Answer: BC