ExamGecko
Home Home / LPI / 202-450

LPI 202-450 Practice Test - Questions Answers

Question list
Search
Search

Related questions











On a Linux router, packet forwarding for IPv4 has been enabled. After a reboot, the machine no longer forwards IP packets from other hosts. The command: echo 1 > /proc/sys/net/ipv4/ip_forward temporarily resolves this issue.

Which one of the following options is the best way to ensure this setting is saved across system restarts?

A.
Add echo 1 > /proc/sys/net/ipv4/ip_forward to the root user login script
A.
Add echo 1 > /proc/sys/net/ipv4/ip_forward to the root user login script
Answers
B.
Add echo 1 > /proc/sys/net/ipv4/ip_forward to any user login script
B.
Add echo 1 > /proc/sys/net/ipv4/ip_forward to any user login script
Answers
C.
In /etc/sysct1.conf change net.ipv4.ip_forward to 1
C.
In /etc/sysct1.conf change net.ipv4.ip_forward to 1
Answers
D.
In /etc/rc.local add net.ipv4.ip_forward = 1
D.
In /etc/rc.local add net.ipv4.ip_forward = 1
Answers
E.
In /etc/sysconfig/iptables-config add ipv4.ip_forward = 1
E.
In /etc/sysconfig/iptables-config add ipv4.ip_forward = 1
Answers
Suggested answer: C

What information can be found in the file specified by the status parameter in an OpenVPN server configuration file? (Choose two.)

A.
Errors and warnings generated by the openvpn daemon
A.
Errors and warnings generated by the openvpn daemon
Answers
B.
Routing information
B.
Routing information
Answers
C.
Statistical information regarding the currently running openvpn daemon
C.
Statistical information regarding the currently running openvpn daemon
Answers
D.
A list of currently connected clients
D.
A list of currently connected clients
Answers
E.
A history of all clients who have connected at some point
E.
A history of all clients who have connected at some point
Answers
Suggested answer: B, D

Which of the following lines in the sshd configuration file should, if present, be changed in order to increase the security of the server? (Choose two.)

A.
Protocol 2, 1
A.
Protocol 2, 1
Answers
B.
PermitEmptyPasswords no
B.
PermitEmptyPasswords no
Answers
C.
Port 22
C.
Port 22
Answers
D.
PermitRootLogin yes
D.
PermitRootLogin yes
Answers
E.
IgnoreRhosts yes
E.
IgnoreRhosts yes
Answers
Suggested answer: A, D

Which of the following nmap parameters scans a target for open TCP ports? (Choose two.)

A.
-sO
A.
-sO
Answers
B.
-sZ
B.
-sZ
Answers
C.
-sT
C.
-sT
Answers
D.
-sU
D.
-sU
Answers
E.
-sS
E.
-sS
Answers
Suggested answer: C, E

Which of the statements below are correct regarding the following commands, which are executed on a Linux router? (Choose two.)

A.
Packets with source or destination addresses from fe80::/64 will never occur in the FORWARD chain
A.
Packets with source or destination addresses from fe80::/64 will never occur in the FORWARD chain
Answers
B.
The rules disable packet forwarding because network nodes always use addresses from fe80::/64 to identify routers in their routing tables
B.
The rules disable packet forwarding because network nodes always use addresses from fe80::/64 to identify routers in their routing tables
Answers
C.
ip6tables returns an error for the second command because the affected network is already part of another rule
C.
ip6tables returns an error for the second command because the affected network is already part of another rule
Answers
D.
Both ip6tables commands complete without an error message or warning
D.
Both ip6tables commands complete without an error message or warning
Answers
E.
The rules suppress any automatic configuration through router advertisements or DHCPv6
E.
The rules suppress any automatic configuration through router advertisements or DHCPv6
Answers
Suggested answer: D, E

What option in the client configuration file would tell OpenVPN to use a dynamic source port when making a connection to a peer?

A.
src-port
A.
src-port
Answers
B.
remote
B.
remote
Answers
C.
source-port
C.
source-port
Answers
D.
nobind
D.
nobind
Answers
E.
dynamic-bind
E.
dynamic-bind
Answers
Suggested answer: D

Which Linux user is used by vsftpd to perform file system operations for anonymous FTP users?

A.
The Linux user which runs the vsftpd process
A.
The Linux user which runs the vsftpd process
Answers
B.
The Linux user that owns the root FTP directory served by vsftpd
B.
The Linux user that owns the root FTP directory served by vsftpd
Answers
C.
The Linux user with the same user name that was used to anonymously log into the FTP server
C.
The Linux user with the same user name that was used to anonymously log into the FTP server
Answers
D.
The Linux user root, but vsftpd grants access to anonymous users only to globally read-/writeable files
D.
The Linux user root, but vsftpd grants access to anonymous users only to globally read-/writeable files
Answers
E.
The Linux user specified in the configuration option ftp_username
E.
The Linux user specified in the configuration option ftp_username
Answers
Suggested answer: E

Which of the following sshd configuration should be set to no in order to fully disable password based logins? (Choose two.)

A.
PAMAuthentication
A.
PAMAuthentication
Answers
B.
ChallengegeResponseAuthentication
B.
ChallengegeResponseAuthentication
Answers
C.
PermitPlaintextLogin
C.
PermitPlaintextLogin
Answers
D.
UsePasswords
D.
UsePasswords
Answers
E.
PasswordAuthentication
E.
PasswordAuthentication
Answers
Suggested answer: B, E

When the default policy for the netfilter INPUT chain is set to DROP, why should a rule allowing traffic to localhost exist?

A.
All traffic to localhost must always be allowed
A.
All traffic to localhost must always be allowed
Answers
B.
It doesn't matter; netfilter never affects packets addressed to localhost
B.
It doesn't matter; netfilter never affects packets addressed to localhost
Answers
C.
Some applications use the localhost interface to communicate with other applications
C.
Some applications use the localhost interface to communicate with other applications
Answers
D.
syslogd receives messages on localhost
D.
syslogd receives messages on localhost
Answers
E.
The iptables command communicates with the netfilter management daemon netfilterd on localhost to create and change packet filter rules
E.
The iptables command communicates with the netfilter management daemon netfilterd on localhost to create and change packet filter rules
Answers
Suggested answer: C

FILL BLANK

What command creates a SSH key pair? (Specify ONLY the command without any path or parameters)

A.
ssh-keygen
A.
ssh-keygen
Answers
Suggested answer: A
Total 119 questions
Go to page: of 12