Get Started: 202-450 Exam [2024] Dumps Lpi PDF Questions
202-450 Premium Exam Engine pdf Download
NEW QUESTION # 39
Which netfilter table contains built-in chains called INPUT, OUTPUT and FORWARD?
- A. nat
- B. default
- C. filter
- D. masq
- E. ipconn
Answer: C
NEW QUESTION # 40
When trying to reverse proxy a web server through Nginx, what keyword is missing from the following configuration sample?
- A. forward_to
- B. remote_proxy
- C. reverse_proxy
- D. proxy_pass
- E. proxy_reverse
Answer: D
NEW QUESTION # 41
Which of the following information has to be submitted to a certification authority in order to request a web server certificate?
- A. The web server's SSL configuration file.
- B. The certificate signing request.
- C. The list of ciphers supported by the web server.
- D. The web server's private key.
- E. The IP address of the web server.
Answer: B
Explanation:
Explanation/Reference: https://help.ubuntu.com/lts/serverguide/certificates-and-security.html.en
NEW QUESTION # 42
Which of the following services belongs to NFSv4 and does not exist in NFSv3?
- A. rpc.statd
- B. nfsd
- C. rpc.mountd
- D. rpc.idmapd
Answer: D
Explanation:
Explanation
The rpc.idmapd service is a new component of NFSv4 that does not exist in NFSv3. It is responsible for mapping user and group IDs between the NFS client and server, using string names instead of numeric values.
This allows for better security and compatibility across different systems. The rpc.idmapd service runs on both the NFS client and server and communicates with each other using the NFSv4 protocol. The other services, rpc.statd, nfsd, and rpc.mountd, are common to both NFSv3 and NFSv4, although they have some differences in functionality and behavior. References: 1, 2, 3
NEW QUESTION # 43
Select the alternative that shows the correct way to disable a user login for all users except root.
- A. The use of the pam_deny module along with the /etc/deny configuration file.
- B. The use of the pam_block module along with the /etc/login configuration file.
- C. The use of the pam_nologin module along with the /etc/nologin configuration file.
- D. The use of the pam_pwdb module along with the /etc/pwdv.conf configuration file.
Answer: C
Explanation:
Explanation
The pam_nologin module is used to prevent users from logging into the system when the /etc/nologin file exists. The file can contain a message that is displayed to the user before the login is denied. The only exception is the root user, who can always log in regardless of the existence of the /etc/nologin file. This method is useful for system maintenance or emergency situations when normal users should not access the system. References: LPIC-2 exam 201 topics, pam_nologin man page
NEW QUESTION # 44
Which of the following services belongs to NFSv4 and does not exist in NFSv3?
- A. rpc.statd
- B. nfsd
- C. rpc.mountd
- D. rpc.idmapd
Answer: D
Explanation:
Explanation/Reference: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/5/html/ deployment_guide/ch-nfs
NEW QUESTION # 45
Which of the following values can be used in the OpenLDAP attribute olcBackendfor any object of the class olcBackendConfigto specify a backend? (Choose three.)
- A. xml
- B. passwd
- C. bdb
- D. ldap
- E. text
Answer: C,D,E
Explanation:
Explanation/Reference:
NEW QUESTION # 46
Given the following Squid configuration excerpt:
cache_dir ufs /var/spool/squid3/ 1024 16 256
Which of the following directories will exist directly within the directory /var/spool/squid3/? (Choose two.)
- A. A0
- B. FF
- C. 0F
- D. 00
- E. 0b
Answer: C,E
NEW QUESTION # 47
Which http_accessdirective for Squid allows users in the ACL named sales_net to only access the Internet at times specified in the time_aclnamed sales_time?
- A. allow http_access sales_net sales_time
- B. http_access deny sales_time sales_net
- C. http_access allow sales_net and sales-time
- D. http_access sales_net sales_time
- E. http_access allow sales_net sales_time
Answer: E
NEW QUESTION # 48
Using its standard configuration, how does fail2ban block offending SSH clients?
- A. By creating and maintaining netfilter rules.
- B. By creating null routes that drop any answer packets sent to the client.
- C. By modifying and adjusting the SSHD configuration.
- D. By modifying and adjusting the TCP Wrapper configuration for SSHD.
- E. By rejecting connections due to its role as a proxy in front of SSHD.
Answer: C
NEW QUESTION # 49
How must Samba be configured such that it can check CIFS passwords against those found in /etc/passwd and
/etc/shadow?
- A. Run smbpasswd to convert /etc/passwd and /etc/shadow to a Samba password file
- B. It is not possible for Samba to use /etc/passwd and /etc/shadow directly
- C. Delete the smbpasswd file and create a symbolic link to the passwd and shadow file
- D. Set the parameters "encrypt passwords = yes" and "password file = /etc/passwd"
- E. Set the parameters "encrypt passwords = yes", "password file = /etc/passwd" and "password algorithm = crypt"
Answer: B
NEW QUESTION # 50
A host, called lpi, with the MAC address 08:00:2b:4c:59:23 should always be given the IP address of
192.168.1.2 by a DHCP server running ISC DHCPD.
Which of the following configurations will achieve this?
- A. Option E
- B. Option C
- C. Option D
- D. Option B
- E. Option A
Answer: C
NEW QUESTION # 51
Select the Samba option below that should be used if the main intention is to setup a guest printer service?
- A. security = share
- B. security = pam
- C. security = ldap
- D. security = printing
- E. security = cups
Answer: A
NEW QUESTION # 52
In order to specify alterations to an LDAP entry, what keyword is missing from the following LDIF file excerpt?
Specify the keyword only and no other information.
Answer:
Explanation:
modify
Explanation
In the context of LDAP, when alterations need to be specified to an entry, the "changetype: modify" keyword is used in the LDIF file. This keyword indicates that modifications are to be made to the existing LDAP entry.
The modify operation can be used to add, replace, or delete attributes and their values. The syntax of the modify operation is as follows:
changetype: modify add: attribute attribute: valuereplace: attribute attribute: valuedelete: attribute attribute:
value
Each modify operation is separated by a hyphen (-) and a blank line separates different entries. The attribute;binary subtype can be used to indicate that the attribute values are binary data. The LDIF syntax for reading a binary value from a file is:
attribute;binary:< file:///path/to/file
References:
LPIC-2 Exam 202 Objectives, Objective 207.3: LDAP Operations
How To Use LDIF Files to Make Changes to an OpenLDAP System, DigitalOcean Modifying Entries Using ldapmodify, Oracle ldap - ldapadd/ldapmodify: clarifications needed about these commands, Server Fault Modify Attribute type definition on LDAP server, Stack Overflow
NEW QUESTION # 53
Which statements about the Alias and Redirect directives in Apache HTTPD's configuration file are true? (Choose two.)
- A. Alias is handled on the server side
- B. Redirect is handled on the client side
- C. Alias can only reference files under DocumentRoot
- D. Redirect works with regular expressions
- E. Alias is not a valid configuration directive
Answer: A,B
NEW QUESTION # 54
Which Linux user is used by vsftpd to perform file system operations for anonymous FTP users?
- A. The Linux user that owns the root FTP directory served by vsftpd
- B. The Linux user which runs the vsftpd process
- C. The Linux user specified in the configuration option ftp_username
- D. The Linux user with the same user name that was used to anonymously log into the FTP server
- E. The Linux user root, but vsftpd grants access to anonymous users only to globally read-/writeable files
Answer: C
Explanation:
The Linux user that is used by vsftpd to perform file system operations for anonymous FTP users is the one specified in the configuration option ftp_username. This option defines the local user that vsftpd will run as when handling anonymous FTP requests. By default, this option is set to 'ftp', which is a predefined user account that has limited privileges and access to the FTP server. The other options are incorrect for the following reasons:
A). The Linux user which runs the vsftpd process. This is false because vsftpd does not use the same user that runs the daemon to handle anonymous FTP requests. Instead, it switches to the user specified by ftp_username, which is usually a different and less privileged user than the one that starts the vsftpd process.
B). The Linux user that owns the root FTP directory served by vsftpd. This is false because vsftpd does not use the owner of the root FTP directory to perform file system operations for anonymous FTP users.
The owner of the root FTP directory may or may not be the same as the user specified by ftp_username, but it does not affect the behavior of vsftpd for anonymous FTP requests.
C). The Linux user with the same user name that was used to anonymously log into the FTP server. This is false because vsftpd does not use the user name that was used to anonymously log into the FTP server to perform file system operations. The user name that is used for anonymous FTP login is usually 'anonymous' or 'ftp', but it does not correspond to any actual Linux user account on the system. Instead, vsftpd maps these user names to the user specified by ftp_username, which is the one that actually performs the file system operations.
D). The Linux user root, but vsftpd grants access to anonymous users only to globally read-/writeable files. This is false because vsftpd does not use the root user to perform file system operations for anonymous FTP users. The root user is the most powerful and privileged user on the system, and using it for anonymous FTP requests would pose a serious security risk. Instead, vsftpd uses the user specified by ftp_username, which is usually a low-privileged user that has limited access to the FTP server. The option anon_world_readable_only controls whether vsftpd only allows anonymous users to access files that have global read permissions, regardless of the permissions of the user specified by ftp_username.
References: LPIC-2 202 exam objectives, LPIC-2 202-450 Exam Prep: Network Configuration, Reference Manual For OpenVPN 2.4, linux - What is the anonymous user in vsftp? - Super User How To Set Up vsftpd for Anonymous Downloads on Ubuntu 16.04
NEW QUESTION # 55
After the installation of Dovecot, it is observed that the dovecot processes are shown in ps ax like this:
In order to associate the processes with users and peers, the username, IP address of the peer and the connection status, which of the following options must be set?
- A. proc.all.show_status = 1 in sysctl.conf or /proc
- B. sys.ps.allow_descriptions = 1 in sysct1.conf or /proc
- C. --with-linux-extprocnames for ./configure when building Dovecot
- D. verbose_proctitle = yes in the Dovecot configuration
- E. process_format = "%u %I %s" in the Dovecot configuration
Answer: D
NEW QUESTION # 56
When using mod_authz_core, which of the following strings can be used as an argument to Require in an Apache HTTPD configuration file to specify the authentication provider? (Choose three.)
- A. regex
- B. header
- C. all
- D. method
- E. expr
Answer: C,D,E
Explanation:
Explanation/Reference: https://httpd.apache.org/docs/2.4/mod/mod_authz_core.html
NEW QUESTION # 57
What is the standard port used by OpenVPN?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
Explanation:
Explanation/Reference: https://openvpn.net/archive/openvpn-users/2006-04/msg00355.html
NEW QUESTION # 58
To allow X connections to be forwarded from or through an SSH server, what configuration keyword must be set to yesin the sshdconfiguration file?
- A. XllForwarding
- B. AllowForwarding
- C. ForwardingAllow
- D. XllForwardingAllow
Answer: A
Explanation:
Explanation/Reference:
Reference: https://help.ubuntu.com/community/SSH/OpenSSH/Configuring
NEW QUESTION # 59
In order to protect a directory on an Apache HTTPD web server with a password, this configuration was added to an .htaccess file in the respective directory:
Furthermore, a file /var/www/dir/ .htpasswd was created with the following content:
usera:S3cr3t
Given that all these files were correctly processed by the web server processes, which of the following statements is true about requests to the directory?
- A. The web server delivers the content of the directory without requesting authentication
- B. The browser prompts the visitor for a username and password but logins for usera do not seem to work
- C. The user usera can access the site using the password s3cr3t
- D. Requests are answered with HTTP error code 500 (Internal Server Error)
- E. Accessing the directory as usera raises HTTP error code 442 (User Not Existent)
Answer: C
NEW QUESTION # 60
......
Pass Your Lpi Exam with 202-450 Exam Dumps: https://www.dumpsking.com/202-450-testking-dumps.html
Verified 202-450 Bundle Real Exam Dumps PDF: https://drive.google.com/open?id=1q9P3W7j4ZntESf9o_1dQgl2aEepIzkSw
