Lpi LPI Certifications 202-450 Questions & Answers

• Question 91:

  Which of the following actions should be considered when a FTP chroot jail is created? (Choose THREE correct answers.)

  A. Create /dev/ and /etc/ in the chroot enviroment.

  B. Create /etc/passwd in the chroot enviroment.

  C. Bind-mount /proc in the chroot environment.

  D. Create the user ftp in the chroot enviroment.

  E. Create /dev/kmem in the chroot environment.

  Correct Answer: ABD

• Question 92:

  In the main Postfix configuration file, how are service definitions continued on the next line?

  A. It isn't possible. The service definition must fit on one line.

  B. The initial line must end with a backslash character (\).

  C. The following line must begin with a plus character (+).

  D. The following line must begin with white space indentation.

  E. The service definition continues on the following lines until all of the required fields are specified.

  Correct Answer: D

• Question 93:

  Which of these tools, without any options, provides the most information when performing DNS queries?

  A. dig

  B. nslookup

  C. host

  D. named-checkconf

  E. named-checkzone

  Correct Answer: A

• Question 94:

  Given the following section of a ISC DHCPD configuration filE.

  subnet 192.168.1.0 netmask 255.255.255.0 {

  ...

  # Set the default gateway to be used by

  # the PC clients

  option _____________ 192.168.1.254;

  ...

  What keyword is missing in order to provide a default gateway address to clients?

  A. gateway

  B. nexthop

  C. route

  D. routers

  E. transit

  Correct Answer: D

• Question 95:

  How must Samba be configured so that it can check passwords against the ones in /etc/passwd and /etc/shadow?

  A. Set the parameters "encrypt passwords = yes" and "password file = /etc/passwd".

  B. Set the parameters "encrypt passwords = yes", "password file = /etc/passwd" and "password algorithm = crypt".

  C. Delete the smbpasswd file and create a symbolic link to the passwd and shadow file.

  D. It is not possible for Samba to use /etc/passwd and /etc/shadow directly.

  E. Run smbpasswd to convert /etc/passwd and /etc/shadow to a Samba password file.

  Correct Answer: D

• Question 96:

  If there is no access directive, what is the default setting for OpenLDAP?

  A. access to * by anonymous read by * none

  B. access to * by anonymous read by * read

  C. access to * by anonymous auth by * read

  D. access to * by anonymous write by * read

  Correct Answer: A

• Question 97:

  Which of the following commands can be used to list all exported file systems from a remote NFS server?

  A. exportfs

  B. mount

  C. nfslist

  D. rpcstat

  E. showmount

  Correct Answer: E

• Question 98:

  What is the standard port used by OpenVPN?

  A. 1723

  B. 4500

  C. 500

  D. 1194

  Correct Answer: D

• Question 99:

  With fail2ban what is a 'jail'?

  A. A netfilter rules chain blocking offending IP addresses for a particular service.

  B. A group of services on the server which should be monitored for similar attack patterns in the log files.

  C. A filter definition and a set of one or more actions to take when the filter is matched.

  D. The chroot environment in which fail2ban runs.

  Correct Answer: C

  Reference: https://docs.plesk.com/en-US/onyx/administrator-guide/server-administration/protection-against-brute-force-attacks-fail2ban/fail2ban-jails-management.73382/

• Question 100:

  Which of the following services must be started first on an NFS server?

  A. mountd

  B. nfsd

  C. portmap

  D. statd

  Correct Answer: C