Lpi LPI Certifications 202-450 Questions & Answers

• Question 61:

  The content of which local file has to be transmitted to a remote SSH server in order to be able to log into the remote server using SSH keys?

  A. ~/.ssh/authorized_keys

  B. ~/.ssh/config

  C. ~/.ssh/id_rsa.pub

  D. ~/.ssh/id_rsa

  E. ~./ssh/known_hosts

  Correct Answer: A

  Reference: https://www.digitalocean.com/community/tutorials/ssh-essentials-working-with-ssh-servers- clients-and-keys

• Question 62:

  Which command is used to tell the NFS server which filesystems to make available to clients?

  A. exportfs

  B. mkfs.nfs

  C. mount

  D. nfsservctl

  E. telinit

  Correct Answer: A

• Question 63:

  Which Postfix command can be used to rebuild all of the alias database files with a single invocation?

  A. makealiases

  B. newaliases

  C. postalias

  D. postmapbuild

  Correct Answer: B

• Question 64:

  Select the Samba option below that should be used if the main intention is to setup a guest printer service?

  A. security = cups

  B. security = ldap

  C. security = pam

  D. security = share

  E. security = printing

  Correct Answer: D

• Question 65:

  A company is transitioning to a new domain name and wants to accept e-mail for both domains for all of its users on a Postfix server. Which configuration option should be updated to accomplish this?

  A. mydomain

  B. mylocations

  C. mydestination

  D. myhosts

  E. mydomains

  Correct Answer: C

• Question 66:

  Which of the following nmap parameters scans a target for open TCP ports? (Choose two.)

  A. -sO

  B. -sZ

  C. -sT

  D. -sU

  E. -sS

  Correct Answer: CE

• Question 67:

  Which of the statements below are correct regarding the following commands, which are executed on a Linux router? (Choose two.)

  

  A. Packets with source or destination addresses from fe80::/64 will never occur in the FORWARD chain

  B. The rules disable packet forwarding because network nodes always use addresses from fe80::/64 to identify routers in their routing tables

  C. ip6tables returns an error for the second command because the affected network is already part of another rule

  D. Both ip6tables commands complete without an error message or warning

  E. The rules suppress any automatic configuration through router advertisements or DHCPv6

  Correct Answer: DE

• Question 68:

  After having a laptop assigned to a new subnet, a user is no longer able to login to the SSH server with an error message like Connection closed by remote host. Which of the following are possible approaches to determine and fix the cause of this problem? (Choose TWO correct answers.)

  A. Generate a new host key on the client and replace the current client host key on the SSH server.

  B. Verify that the settings in /etc/host.allow and /etc/host.deny are not preventing access.

  C. Flush the ARP table and the neighbor discovery cache on both the SSH server and the client.

  D. Add the new IP address of the client to the AllowHosts configuration setting on the SSH server.

  E. Check that there are no netfilter rules that reject SSH connections from the new IP address.

  Correct Answer: BE

• Question 69:

  What command is used to reload a set of saved netfilter rules?

  A. iptables-restore

  B. iptables-recover

  C. iptables-load

  D. iptables-reload

  Correct Answer: A

• Question 70:

  What is DNSSEC used for?

  A. Encrypted DNS queries between nameservers.

  B. Cryptographic authentication of DNS zones.

  C. Secondary DNS queries for local zones.

  D. Authentication of the user that initiated the DNS query.

  E. Encrypting DNS queries and answers.

  Correct Answer: B