A host, called lpi, with the MAC address 08:00:2b:4c:59:23 should always be given the IP address of 192.168.1.2 by a DHCP server running ISC DHCPD.Which of the following configurations will achieve this?

host lpi = 08:00:2b:4c:59:23 192.168.1.2

How is the LDAP administrator account configured when the rootdn and rootpw directives are not present in the slapd.conf file?

The account is defined by an ACL in slapd.conf

The default account admin with the password admin are used

The account is defined by an ACL in slapd.conf

The default account admin is used without a password

The account is defined in the file /etc/ldap.secret

The account is defined in the file /etc/ldap.root.conf

In a PAM configuration file, which of the following is true about the required control flag?

The success of the module is needed for the module-type facility to succeed. However, all remaining modules of the same type will be invoked

If the module returns success, no more modules of the same type will be invoked

The success of the module is needed for the module-type facility to succeed. If it returns a failure, control is returned to the calling application

The success of the module is needed for the module-type facility to succeed. However, all remaining modules of the same type will be invoked

The module is not critical and whether it returns success or failure is not important

If the module returns failure, no more modules of the same type will be invoked

How are PAM modules organized and stored?

As dynamically linked binaries in /usr/lib/pam/sbin/

As plain text files in /etc/security/

A statically linked binaries in /etc/pam.d/bin/

As Linux kernel modules within the respective sub directory of /lib/modules/

As shared object files within the /lib/ directory hierarchy

As dynamically linked binaries in /usr/lib/pam/sbin/

When are Sieve filters usually applied to an email?

When the email is delivered to a mailbox

When the email is relayed by an SMTP server

When the email is received by an SMTP smarthost

When the email is sent to the first server by an MUA

When the email is retrieved by an MUA

It has been discovered that the company mail server is configured as an open relay. Which of the following actions would help prevent the mail server from being used as an open relay while maintaining the possibility to receive company mails? (Choose two.)

Configure netfilter to not permit port 25 traffic on the public network

Restrict Postfix to only relay outbound SMTP from the internal network

Restrict Postfix to only accept e-mail for domains hosted on this server

Configure Dovecot to support IMAP connectivity

Configure netfilter to not permit port 25 traffic on the public network

Restrict Postfix to only relay outbound SMTP from the internal network

Upgrade the mailbox format from mbox to maildir

After the installation of Dovecot, it is observed that the dovecot processes are shown in ps ax like this: In order to associate the processes with users and peers, the username, IP address of the peer and the connection status, which of the following options must be set?

verbose_proctitle = yes in the Dovecot configuration

--with-linux-extprocnames for ./configure when building Dovecot

sys.ps.allow_descriptions = 1 in sysct1.conf or /proc

proc.all.show_status = 1 in sysctl.conf or /proc

verbose_proctitle = yes in the Dovecot configuration

process_format = "%u %I %s" in the Dovecot configuration

Which of the following actions synchronizes UNIX passwords with the Samba passwords when the encrypted Samba password is changed using smbpasswd?

Add unix password sync = yes to smb.conf

There are no actions to accomplish this since is not possible.

Run netvamp regularly, to convert the passwords.

Run winbind -sync, to synchronize the passwords.

Add unix password sync = yes to smb.conf

Add smb unix password = sync to smb.conf

In order to join a file server to the Active Directory domain intra.example.com, the following smb.conf has been created: The command net ads join raises an error and the server is not joined to the domain. What should be done to successfully join the domain?

Remove all idmap configuration stanzas since the id mapping is defined globally in an Active Directory domain and cannot be changed on a member server.

Change server role to ad member server to join an Active Directory domain instead of an NT4 domain.

Add realm = intra.example.com to the smb.conf and change workgroup to the domain's netbios workgroup name.

Manually create a machine account in the Active Directory domain and specify the machine account's name with -U when starting net ads join.

Remove the winbind enum users and winbind enum groups since winbind is incompatible with Active Directory domains.

Remove all idmap configuration stanzas since the id mapping is defined globally in an Active Directory domain and cannot be changed on a member server.

What does the samba-tool testparm command confirm regarding the Samba configuration?

The configuration loads successfully.

The service operates as expected.

The Samba services are started automatically when the system boots.

The netfilter configuration on the Samba server does not block any access to the services defined in the configuration.

All running Samba processes use the most recent configuration version.

The Samba configuration file contains the following lines: A workstation is on the wired network with an IP address of 192.168.1.177 but is unable to access the Samba server. A wireless laptop with an IP address 192.168.2.93 can access the Samba server. Additional trouble shooting shows that almost every machine on the wired network is unable to access the Samba server.Which alternate host allow declaration will permit wired workstations to connect to the Samba server without denying access to anyone else?

host deny = 192.168.2.200/255.255.255.0 192.168.2.31 localhost

host allow = 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 localhost

host allow = 192.168.1.100 192.168.2.200 localhost

host deny = 192.168.1.100/255.255.255.0 192.168.2.31 localhost

host deny = 192.168.2.200/255.255.255.0 192.168.2.31 localhost

host allow = 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 localhost

The following Apache HTTPD configuration has been set up to create a virtual host available at www.example.com and www2.example.com: Even though Apache HTTPD correctly processed the configuration file, requests to both names are not handled correctly. What should be changed in order to ensure correct operations?

Both virtual host names have to be placed as comma separated values in one ServerName declaration.

The configuration must be split into two VirtualHost sections since each virtual host may only have one name.

The port mentioned in opening VirtualHost tag has to be appended to the ServerName declaration's values.

Both virtual host names have to be placed as comma separated values in one ServerName declaration.

Both virtual host names have to be mentioned in the opening VirtualHost tag.

Only one Server name declaration may exist, but additional names can be declared in ServerAlias options.

Which of the following statements are true regarding Server Name Indication (SNI)? (Choose two.)

It allows multiple SSL/TLS secured virtual HTTP hosts to coexist on the same IP address.

It submits the host name of the requested URL during the TLS handshake.

It supports transparent failover of TLS sessions from one web server to another.

It allows multiple SSL/TLS secured virtual HTTP hosts to coexist on the same IP address.

It enables HTTP servers to update the DNS of their virtual hosts' names using the X 509 certificates of the virtual hosts.

It provides a list of available virtual hosts to the client during the TLS handshake.

It submits the host name of the requested URL during the TLS handshake.

There is a restricted area in a site hosted by Apache HTTPD, which requires users to authenticate against the file /srv/www/security/sitepasswd.Which command is used to CHANGE the password of existing users, without losing data, when Basic authentication is being used?

htpasswd -c /srv/www/security/sitepasswd user

htpasswd /srv/www/security/sitepasswd user

htpasswd -n /srv/www/security/sitepasswd user

htpasswd -D /srv/www/security/sitepasswd user

Which of the following information has to be submitted to a certification authority in order to request a web server certificate?

The certificate signing request.

The IP address of the web server.

The list of ciphers supported by the web server.

The web server's SSL configuration file.

The certificate signing request.

For what purpose is TCP/IP stack fingerprinting used by nmap?

It is used to determine the remote operating system.

It is used to filter out responses from specific servers.

It is used to identify duplicate responses from the same remote server.

It is used to masquerade the responses of remote servers.

It is used to uniquely identify servers on the network for forensics.

LPI 202-450 Practice Test 2 - Free Online Exam Prep & Questions

When trying to reverse proxy a web server through Nginx, what keyword is missing from the following configuration sample?

LPI 202-450 image Question 41 52304 09182024213305000000

A.

remote_proxy

B.

reverse_proxy

C.

proxy_reverse

D.

proxy_pass

E.

forward_to

LPI 202-450 Practice Test 2

Question

LPI 202-450 Practice Tests

Practice Tests