Lpi LPI Certifications 202-450 Questions & Answers

• Question 131:

  Specify the command to create a SSH key-pair. (Specify ONLY the command without any path or parameters.)

  A. ssh-keygen

  Correct Answer: A

• Question 132:

  Which Squid configuration keyword is used to define networks and times that the service may be accessed?

  A. acl

  B. allow

  C. http_allow

  D. permit

  Correct Answer: A

• Question 133:

  Select the INCORRECT statement regarding the LDIF file format:

  A. It contains a dn line, that indicates where the attributes listed in the following lines of the file must be added.

  B. In the file, a blank line separates one entry from another one.

  C. If an attribute contains binary data, some specific configurations must be made for this entry.

  D. The LDIF file accepts any type of file encoding.

  Correct Answer: D

• Question 134:

  Users in the ACL named sales_net must only be allowed to access to the Internet at times specified in the time_acl named sales_time. Which is the correct http_access directive for Squid to configure this?

  A. http_access deny sales_time sales_net

  B. http_access allow sales_net sales_time

  C. http_access allow sales_net and sales_time

  D. allow http_access sales_net sales_time

  E. http_access sales_net sales_time

  Correct Answer: B

• Question 135:

  What types of virtual network devices does OpenVPN use for connections? (Choose TWO correct answers.)

  A. eth

  B. tap

  C. lo

  D. tun

  E. ppp

  Correct Answer: BD

• Question 136:

  With netfilter, which packet matching table contains built-in chains called INPUT, OUTPUT and FORWARD?

  A. ipconn

  B. filter

  C. nat

  D. default

  E. masq

  Correct Answer: B

• Question 137:

  Why are different IP addresses recommended when hosting multiple HTTPS virtual hosts? (Choose TWO correct answers.)

  A. Apache caches SSL keys based on IP address.

  B. The SSL connection is made before the virtual host name is known by the server.

  C. The SSL key is tied to a specific IP address when issued by the Certificate Authority.

  D. This is only needed when dynamic content is being generated by more than one of the virtual hosts.

  E. The Server Name Indication extension to TLS is not universally supported.

  Correct Answer: BE

• Question 138:

  It has been discovered that the company mail server is configured as an open relay. Which of the following actions would help prevent the mail server from being used as an open relay? (Choose TWO correct answers.)

  A. Restrict Postfix to only accept e-mail for domains hosted on this server.

  B. Configure Dovecot to support IMAP connectivity.

  C. Configure netfilter to not permit port 25 traffic on the public network.

  D. Restrict Postfix to only relay outbound SMTP from the internal network.

  E. Upgrade the mailbox format from mbox to maildir.

  Correct Answer: AD

• Question 139:

  What parameter in the sshd configuration file instructs sshd to prevent specific user names from logging in to a system? (Please specify the parameter only without settings.)

  A. DenyUsers, denyusers

  Correct Answer: A

• Question 140:

  What parameter in the sshd configuration file instructs sshd to permit only specific user names to log in to a system? (Please specify the parameter only without settings)

  A. allowusers, AllowUsers

  Correct Answer: A