What information can be found in the file specified by the status parameter in an OpenVPN server configuration file? (Choose two.)

A list of currently connected clients

Errors and warnings generated by the openvpn daemon

Statistical information regarding the currently running openvpn daemon

A list of currently connected clients

A history of all clients who have connected at some point

Which of the statements below are correct regarding the following commands, which are executed on a Linux router? (Choose two.)

Both ip6tables commands complete without an error message or warning

The rules suppress any automatic configuration through router advertisements or DHCPv6

Packets with source or destination addresses from fe80::/64 will never occur in the FORWARD chain

The rules disable packet forwarding because network nodes always use addresses from fe80::/64 to identify routers in their routing tables

ip6tables returns an error for the second command because the affected network is already part of another rule

Both ip6tables commands complete without an error message or warning

The rules suppress any automatic configuration through router advertisements or DHCPv6

Which Linux user is used by vsftpd to perform file system operations for anonymous FTP users?

The Linux user specified in the configuration option ftp_username

The Linux user which runs the vsftpd process

The Linux user that owns the root FTP directory served by vsftpd

The Linux user with the same user name that was used to anonymously log into the FTP server

The Linux user root, but vsftpd grants access to anonymous users only to globally read-/writeable files

The Linux user specified in the configuration option ftp_username

Which of the following sshd configuration should be set to no in order to fully disable password based logins? (Choose two.)

ChallengegeResponseAuthentication

When the default policy for the netfilter INPUT chain is set to DROP, why should a rule allowing traffic to localhost exist?

Some applications use the localhost interface to communicate with other applications

All traffic to localhost must always be allowed

It doesn't matter; netfilter never affects packets addressed to localhost

Some applications use the localhost interface to communicate with other applications

syslogd receives messages on localhost

The iptables command communicates with the netfilter management daemon netfilterd on localhost to create and change packet filter rules

With fail2ban, what is a 'jail'?

A filter definition and a set of one or more actions to take when the filter is matched

A netfilter rules chain blocking offending IP addresses for a particular service

A group of services on the server which should be monitored for similar attack patterns in the log files

A filter definition and a set of one or more actions to take when the filter is matched

The chroot environment in which fail2ban runs

The program vsftpd, running in a chroot jail, gives the following error: Which of the following actions would fix the error?

Copy the required library to the appropriate lib directory in the chroot jail

The file /etc/ld.so.conf in the root filesystem must contain the path to the appropriate lib directory in the chroot jail

Create a symbolic link that points to the required library outside the chroot jail

Copy the required library to the appropriate lib directory in the chroot jail

Run the program using the command chroot and the option--static_libs

How must Samba be configured such that it can check CIFS passwords against those found in /etc/passwd and /etc/shadow?

It is not possible for Samba to use /etc/passwd and /etc/shadow directly

Set the parameters "encrypt passwords = yes" and "password file = /etc/passwd"

Set the parameters "encrypt passwords = yes", "password file = /etc/passwd" and "passwordalgorithm = crypt"

Delete the smbpasswd file and create a symbolic link to the passwd and shadow file

It is not possible for Samba to use /etc/passwd and /etc/shadow directly

Run smbpasswd to convert /etc/passwd and /etc/shadow to a Samba password file

In which CIFS share must printer drivers be placed to allow Point'n'Print driver deployment on Windows?

The name of the share is specified in the option print driver share within each printable share in smb.conf

Which of the following statements is true regarding the NFSv4 pseudo file system on the NFS server?

It usually contains bind mounts of the directory trees to be exported

It must be a dedicated partition on the server

It is defined in the option Nfsv4-Root in /etc/pathmapd.conf

It usually contains symlinks to the directory trees to be exported

Performing a DNS lookup with dig results in this answer:

There is no . after linuserv.example.net in the PTR record in the reverse lookup zone file

There is no . after linuserv.example.net in the PTR record in the forward lookup zone file

There is no . after linuserv in the PTR record in the forward lookup zone file

There is no . after linuserv.example.net in the PTR record in the reverse lookup zone file

The . in the NS definition in the reverse lookup zone has to be removed

What option for BIND is required in the global options to disable recursive queries on the DNS server by default?

allow-recursive-query ( none; );

What is DNSSEC used for?

Cryptographic authentication of DNS zones

Encrypted DNS queries between nameservers

Cryptographic authentication of DNS zones

Secondary DNS queries for local zones

Authentication of the user that initiated the DNS query

Encrypting DNS queries and answers

In a BIND zone file, what does the @ character indicate?

It's the name of the zone as defined in the zone statement in named.conf

It's the fully qualified host name of the DNS server

It's an alias for the e-mail address of the zone master

It's the name of the zone as defined in the zone statement in named.conf

It's used to create an alias between two CNAME entries

In order to protect a directory on an Apache HTTPD web server with a password, this configuration was added to an .htaccess file in the respective directory: Furthermore, a file /var/www/dir/ .htpasswd was created with the following content: usera:S3cr3t Given that all these files were correctly processed by the web server processes, which of the following statements is true about requests to the directory?

The user usera can access the site using the password s3cr3t

Accessing the directory as usera raises HTTP error code 442 (User Not Existent)

Requests are answered with HTTP error code 500 (Internal Server Error)

The browser prompts the visitor for a username and password but logins for usera do not seem to work

The web server delivers the content of the directory without requesting authentication

Which statements about the Alias and Redirect directives in Apache HTTPD's configuration file are true? (Choose two.)

Redirect is handled on the client side

Alias is handled on the server side

Alias can only reference files under DocumentRoot

Redirect works with regular expressions

Redirect is handled on the client side

Alias is handled on the server side

Alias is not a valid configuration directive

Which http_access directive for Squid allows users in the ACL named sales_net to only access the Internet at times specified in the time_acl named sales_time?

http_access allow sales_net sales_time

http_access deny sales_time sales_net

http_access allow sales_net sales_time

http_access allow sales_net and sales-time

allow http_access sales_net sales_time

http_access sales_net sales_time

In response to a certificate signing request, a certification authority sent a web server certificate along with the certificate of an intermediate certification authority that signed the web server certificate.What should be done with the intermediate certificate in order to use the web server certificate with Apache HTTPD?

The intermediate certificate should be merged with the web server's certificate into one file that is specified in SSLCertificateFile

The intermediate certificate should be used to verify the certificate before its deployment on the web server and can be deleted

The intermediate certificate should be stored in its own file which is referenced in SSLCaCertificateFile

The intermediate certificate should be improved into the certificate store of the web browser used to test the correct operation of the web server

The intermediate certificate should be archived and resent to the certification authority in order to request a renewal of the certificate

LPI 202-450 Practice Test 1 - Free Online Exam Prep & Questions

On a Linux router, packet forwarding for IPv4 has been enabled. After a reboot, the machine no longer forwards IP packets from other hosts. The command: echo 1 > /proc/sys/net/ipv4/ip_forward temporarily resolves this issue.

Which one of the following options is the best way to ensure this setting is saved across system restarts?

A.

Add echo 1 > /proc/sys/net/ipv4/ip_forward to the root user login script

B.

Add echo 1 > /proc/sys/net/ipv4/ip_forward to any user login script

C.

In /etc/sysct1.conf change net.ipv4.ip_forward to 1

D.

In /etc/rc.local add net.ipv4.ip_forward = 1

E.

In /etc/sysconfig/iptables-config add ipv4.ip_forward = 1

LPI 202-450 Practice Test 1

Question

LPI 202-450 Practice Tests

Practice Tests