Using its standard configuration, how does fail2ban block offending SSH clients?

By modifying and adjusting the SSHD configuration.

By rejecting connections due to its role as a proxy in front of SSHD.

By modifying and adjusting the SSHD configuration.

By creating and maintaining netfilter rules.

By creating null routes that drop any answer packets sent to the client.

By modifying and adjusting the TCP Wrapper configuration for SSHD.

Which FTP names are recognized as anonymous users in vsftp when the option anonymous_enable is set to yes in the configuration files? (Choose two.)

In the described configuration, any username which neither belongs to an existing user nor has another special meaning is treated as anonymous user.

In order to prevent all anonymous FTP users from listing uploaded file names, what security precaution can be taken when creating an upload directory?

The directory must not have the read permission set.

The directory must not have the execute permission set.

The directory must not have the read permission set.

The directory must not have the read or execute permission set.

The directory must not have the write permission set.

The directory must not contain other directories.

A zone file contains the following lines: and is included in the BIND configuration using this configuration stanza: Which problem is contained in this configuration?

The $ORIGIN declaration cannot be used in zone files that are included for a specific zone name in the BIND configuration.

The zone statement is the BIND configuration must contain the cross-zone-data yes; statement.

The zone cannon contain records for a name which is outside the zone's hierarchy.

The $ORIGIN declaration cannot be used in zone files that are included for a specific zone name in the BIND configuration.

An A record cannot contain an IPv4 address because its value is supposed to be a reverse DNS name.

Names of records in a zone file cannot be fully qualified domain names.

What is the purpose of DANE?

Provide a way to verify the association of X 509 certificates to DNS host names.

Verify the integrity of name information retrieved via DNS.

Allow secure dynamic DNS updates.

Invalidate name information stored on caching name servers to speed up DNS updates.

Discover which servers within a DNS domain offer a specific service.

Provide a way to verify the association of X 509 certificates to DNS host names.

In the main Postfix configuration file, how are service definitions continued on the next line?

The following line must begin with white space indentation.

It isn't possible. The service definition must fit on one line.

The initial line must end with a backslash character (\).

The following line must begin with a plus character (+).

The following line must begin with white space indentation.

The service definition continues on the following lines until all of the required fields are specified.

Which of these sets of entries does the following command return?

Entries that have a cn of marie and a telephoneNumber that ending with 9.

Entries that don't have a cn of marie or don't have a telephoneNumber that begins with 9.

Entries that have a cn of marie or don't have a telephoneNumber beginning with 9.

Entries that have a cn of marie and a telephoneNumber that ending with 9.

Entries that don't have a cn of marie and don't have a telephoneNumber beginning with 9.

Entries that have a cn of marie or have a telephoneNumber beginning with 9.

Which of the following types of IPv6 address assignments does DHCPv6 support? (Choose three.)

Assignments of normal IPv6 addresses that can be renewed.

Assignments of temporary IPv6 addresses that cannot be renewed.

Assignments of IPv6 prefixes that can be used for routing or further assignments.

Assignments of normal IPv6 addresses that can be renewed.

Assignments of temporary IPv6 addresses that cannot be renewed.

Assignments of blacklisted IPv6 addresses that should no longer be used.

Assignments of IPv6 prefixes that can be used for routing or further assignments.

Assignments of anonymous IPv6 addresses whose assignment is not logged by the DHCPv6 server.

Which of the following is correct about this excerpt from an LDIF file?

dn is the relative distinguished name.

DC is the delegation container.

Which of the following statements is INCORRECT regarding the LDIF file format?

The LDIF file accepts any type of file encoding.

It contains a dn line that indicates where the attributes listed in the following lines of the file must be added.

In the file, a blank line separates one entry from another one.

If an attribute contains binary data, some specific configurations must be made for this entry.

The LDIF file accepts any type of file encoding.

Which of the following lines is valid in a configuration file in /etc/pam.d/?

auth required pam_unix.so try_first_pass nullok

auth try_first_pass nullok, require pam_unix.so

auth required:pam_unix.so(try_first_pass nullok)

auth pam_unix.so(required try_first_pass nullok)

Select the alternative that shows the correct way to disable a user login for all users except root.

The use of the pam_nologin module along with the /etc/nologin configuration file.

The use of the pam_block module along with the /etc/login configuration file.

The use of the pam_deny module along with the /etc/deny configuration file.

The use of the pam_pwdb module along with the /etc/pwdv.conf configuration file.

The use of the pam_nologin module along with the /etc/nologin configuration file.

LPI 202-450 Practice Test 3 - Free Online Exam Prep & Questions

To allow X connections to be forwarded from or through an SSH server, what configuration keyword must be set to yes in the sshd configuration file?

Become a Premium Member for full access

Unlock Premium Member

LPI 202-450 Practice Test 3

Question

LPI 202-450 Practice Tests

Practice Tests