Lpi LPI Certifications 202-450 Questions & Answers

• Question 271:

  What is a significant difference between host and zone keys generated by dnssec-keygen?

  A. There is no difference.

  B. Both zone key files ( .key/.private ) contain a public and private key.

  C. Both host keys files ( .key/. private) contain a public and private key.

  D. Host Keys must always be generated if DNSSEC is used; zone keys are optional

  E. Zone Keys must always be generated if is used; host keys are optional

  Correct Answer: B

• Question 272:

  For an LDAP client configuration, the LDAP base needs to be set. Which TWO of the following actions would achieve that?

  A. export LDAPBASE=dc=linuxfoo,dc=com

  B. export BASE=dc=linuxfoo,dc=com

  C. Edit ldapbase.conf and add "BASE dc=linuxfoo,dc=com".

  D. Edit cldap.conf and add "BASE dc=linuxfoo,dc=com".

  E. Edit ldap.conf and add "BASE dc=linuxfoo,dc=com".

  Correct Answer: AE

• Question 273:

  A GRUB boot loader installed in the MBR was accidentally overwritten. After booting with a rescue CDROM, how can the lost GRUB first stage loader be recovered?

  A. Use dd to restore a previous backup of the MBR

  B. Install LILO since there is no easy way to recover GRUB

  C. Running mformat will create a new MBR and fix GRUB using info from grub.conf

  D. Run grub-install after verifying that grub.conf is correct.

  E. Run fdisk --mbr /dev/had assuming that the boot harddisk is /dev/hda.

  Correct Answer: D

• Question 274:

  The Internet gateway connects the clients with the Internet by using a Squid proxy. Only the clients from the network 192.168.1.0/24 should be able to use the proxy. Which of the following configuration sections is correct?

  A. acl local src 192.168.1.0/24 http_allow local

  B. acl local src 192.168.1.0/24 http_access allow local

  C. acl local src 192.168.1.0/24 http access allow local

  D. acl local src 192.168.1.0/24 http_access_allow=local

  E. acl local src 192.168.1.0/24 httpd local allow

  Correct Answer: B

• Question 275:

  This program has 3 operating modes: copy-in mode, copy-out mode, and copy-pass mode, and is used to copy files into or out of archives. What program is this? (Please provide the command name only, with no arguments or path.)

  A. cpio

  Correct Answer: A

• Question 276:

  On a newly-installed mail server with the IP address 10.10.10.1, ONLY local networks should be able to send email. How can the configuration be tested, using telnet, from outside the local network?

  A. telnet 10.10.10.1 25 MAIL FROM RECEIPT TO:

  B. telnet 10.10.10.1 25 RCPT FROM:[email protected] MAIL TO:

  C. telnet 10.10.10.1 25 HELLO bogus.example.com MAIL FROM: RCPT TO:

  D. telnet 10.10.10.1 25 HELO bogus.example.com MAIL FROM: RCPT TO:

  E. telnet 10.10.10.1 25 HELO: bogus.example.com RCPT FROM: MAIL TO:

  Correct Answer: D

• Question 277:

  The host, called " Certkiller ", with the MAC address "08:00:2b:4c:59:23", should always be given the IP address of 192.168.1.2 by the DHCP server. Which of the following configurations will achieve this?

  A. host Certkiller { hardware-ethernet 08:00:2b:4c:59:23; fixed-address 192.168.1.2; }

  B. host Certkiller { mac=08:00:2b:4c:59:23; ip= 192.168.1.2; }

  C. host Certkiller = 08:00:2b:4c:59:23 192.168.1.2

  D. host Certkiller { hardware ethernet 08:00:2b:4c:59:23; fixed-address 192.168.1.2; }

  E. host Certkiller { hardware-address 08:00:2b.4c:59:23; fixed-ip 192.168.1.2; }

  Correct Answer: D

• Question 278:

  DNSSEC is used for?

  A. Encrypted DNS queries between nameservers.

  B. Cryptographic authentication of DNS zones.

  C. Secondary DNS queries for local zones.

  D. Defining a secure DNS section.

  E. Querying a secure DNS section.

  Correct Answer: B

• Question 279:

  The internal network (192.168.1.0-192.168.1.255) needs to be able to relay email through the site's sendmail server. What line must be added to /etc/mail/access to allow this?

  A. 192.168.1.0/24 RELAY

  B. 192.168.1 RELAY

  C. 192.168.1.0/24 OK

  D. 192.168.1 OK

  Correct Answer: B

• Question 280:

  

  A. Any host, from any network, may use this server as its main DNS server.

  B. If the server doesn't know the answer to a query, it sends a recursive query to 192.168.0.4.

  C. If the server doesn't know the answer to a query, it sends a query to a root DNS server.

  D. Hosts in the network 10.0.0.0/24 will be able to ask for zone transfers.

  E. If the server doesn't know the answer to a query, it sends a recursive query to 192.168.0.4 and, if this fails, it returns a failure.

  Correct Answer: B