LPI 202-450 Free Practice Questions

NEW QUESTION 1
What option in the client configuration file would tell OpenVPN to use a dynamic source port when making a connection to a peer?

• A. src-port
• B. remote
• C. source-port
• D. nobind
• E. dynamic-bind

Answer: D

NEW QUESTION 2
Which of the following nmap parameters scans a target for open TCP ports? (Choose two.)

• A. -sO
• B. -sZ
• C. -sT
• D. -sU
• E. -sS

Answer: CE

NEW QUESTION 3
Which of the following information has to be submitted to a certification authority in order to request a web server certificate?

• A. The web server’s private key.
• B. The IP address of the web server.
• C. The list of ciphers supported by the web server.
• D. The web server’s SSL configuration file.
• E. The certificate signing reques

Answer: E

NEW QUESTION 4
Which keyword is used in the Squid configuration to define networks and times used to limit access to the service?

• A. acl
• B. allow
• C. http_allow
• D. permit

Answer: A

NEW QUESTION 5
Which of the following options are valid in /etc/exports? (Choose two.)

• A. rw
• B. ro
• C. rootsquash
• D. norootsquash
• E. uid

Answer: AB

NEW QUESTION 6
Which Linux user is used by vsftpd to perform file system operations for anonymous FTP users?

• A. The Linux user which runs the vsftpd process
• B. The Linux user that owns the root FTP directory served by vsftpd
• C. The Linux user with the same user name that was used to anonymously log into the FTP server
• D. The Linux user root, but vsftpd grants access to anonymous users only to globally read-/writeable files
• E. The Linux user specified in the configuration option ftp_username

Answer: E

NEW QUESTION 7
Which of the following DNS record types is used for reverse DNS queries?

• A. CNAME
• B. IN
• C. PTR
• D. REV
• E. RIN

Answer: C

NEW QUESTION 8
Which of these tools provides DNS information in the following format?

• A. dig
• B. nslookup
• C. host
• D. named-checkconf
• E. named-checkzone

Answer: B

NEW QUESTION 9
How must Samba be configured such that it can check CIFS passwords against those found in
/etc/passwd and /etc/shadow?

• A. Set the parameters “encrypt passwords = yes” and “password file = /etc/passwd”
• B. Set the parameters “encrypt passwords = yes”, “password file = /etc/passwd” and “password algorithm = crypt”
• C. Delete the smbpasswd file and create a symbolic link to the passwd and shadow file
• D. It is not possible for Samba to use /etc/passwd and /etc/shadow directly
• E. Run smbpasswd to convert /etc/passwd and /etc/shadow to a Samba password file

Answer: D

NEW QUESTION 10
To allow X connections to be forwarded from or through an SSH server, what configuration keyword must be set to yes in the sshd configuration file?

• A. AllowForwarding
• B. ForwardingAllow
• C. XllForwardingAllow
• D. XllForwarding

Answer: D

NEW QUESTION 11
Which Apache HTTPD configuration directive is used to specify the method of authentication, e.g. None or Basic?

• A. AuthUser
• B. AllowedAuthUser
• C. AuthType
• D. AllowAuth

Answer: C

NEW QUESTION 12
Which of the following Samba configuration parameters is functionally identical to the parameter read only=yes?

• A. browseable=no
• B. read write=no
• C. writeable=no
• D. write only=no
• E. write access=no

Answer: C

NEW QUESTION 13
Which tool creates a Certificate Signing Request (CSR) for serving HTTPS with Apache HTTPD?

• A. apachect1
• B. certgen
• C. cartool
• D. httpsgen
• E. openssl

Answer: E

NEW QUESTION 14
Which of the following lines is valid in a configuration file in /etc/pam.d/?

• A. authrequired pam_unix.sotry_first_pass nullok
• B. authtry_first_pass nullok, require pam_unix.so
• C. authrequired:pam_unix.so(try_first_pass nullok)
• D. authpam_unix.so(required try_first_pass nullok)

Answer: A

NEW QUESTION 15
Which of the following commands is used to change user passwords in an OpenLDAP directory?

• A. setent
• B. ldpasswd
• C. olppasswd
• D. ldappasswd
• E. ldapchpw

Answer: D

NEW QUESTION 16
If there is no access directive, what is the default setting for OpenLDAP?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: B

NEW QUESTION 17
Which of the following values can be used in the OpenLDAP attribute olcBackend for any object of the class olcBackendConfig to specify a backend? (Choose three.)

• A. xml
• B. bdb
• C. passwd
• D. ldap
• E. text

Answer: BDE

NEW QUESTION 18
After the installation of Dovecot, it is observed that the dovecot processes are shown in ps ax like this:

In order to associate the processes with users and peers, the username, IP address of the peer and the connection status, which of the following options must be set?

• A. --with-linux-extprocnames for ./configure when building Dovecot
• B. sys.ps.allow_descriptions = 1 in sysct1.conf or /proc
• C. proc.all.show_status = 1 in sysctl.conf or /proc
• D. verbose_proctitle = yes in the Dovecot configuration
• E. process_format = “%u %I %s” in the Dovecot configuration

Answer: D

NEW QUESTION 19
Which statements about the Alias and Redirect directives in Apache HTTPD’s configuration file are true? (Choose two.)

• A. Alias can only reference files under DocumentRoot
• B. Redirect works with regular expressions
• C. Redirect is handled on the client side
• D. Alias is handled on the server side
• E. Alias is not a valid configuration directive

Answer: CD

NEW QUESTION 20
What does the samba-tool testparm command confirm regarding the Samba configuration?

• A. The configuration loads successfully.
• B. The service operates as expected.
• C. The Samba services are started automatically when the system boots.
• D. The netfilter configuration on the Samba server does not block any access to the services defined in the configuration.
• E. All running Samba processes use the most recent configuration versio

Answer: A

NEW QUESTION 21
In response to a certificate signing request, a certification authority sent a web server certificate along with the certificate of an intermediate certification authority that signed the web server certificate. What should be done with the intermediate certificate in order to use the web server certificate with Apache HTTPD?

• A. The intermediate certificate should be merged with the web server’s certificate into one file that is specified in SSLCertificateFile
• B. The intermediate certificate should be used to verify the certificate before its deployment on the web server and can be deleted
• C. The intermediate certificate should be stored in its own file which is referenced in SSLCaCertificateFile
• D. The intermediate certificate should be improved into the certificate store of the web browser used to test the correct operation of the web server
• E. The intermediate certificate should be archived and resent to the certification authority in order to request a renewal of the certificate

Answer: A

NEW QUESTION 22
It has been discovered that the company mail server is configured as an open relay. Which of the following actions would help prevent the mail server from being used as an open relay while maintaining the possibility to receive company mails? (Choose two.)

• A. Restrict Postfix to only accept e-mail for domains hosted on this server
• B. Configure Dovecot to support IMAP connectivity
• C. Configure netfilter to not permit port 25 traffic on the public network
• D. Restrict Postfix to only relay outbound SMTP from the internal network
• E. Upgrade the mailbox format from mbox to maildir

Answer: CD

NEW QUESTION 23
......