Lpi LPIC-2 117-202 Questions & Answers

• Question 1:

  Unlike many other services, OpenSSH cannot be configured to hide its version information without recompiling from source code. What is the primary reason for this disclosure of version information?

  A. There are many inconsistent SSH client and server versions. This information is used to enable protocol compatibility adjustments.

  B. The information is used for surveys of SSH servers on the internet by the OpenSSH project.

  C. Being a security centric application, the OpenSSH developers do not rely on security through obscurity.

  D. It is used by network auditing tools to report on when versions of ssh require security updates.

  Correct Answer: A

• Question 2:

  After having a laptop assigned to a new subnet, a user is no longer able to login to the SSH server with an error message like Connection closed by remote host. Which of the following are possible approaches to determine and fix the cause of this problem? (Choose TWO correct answers.)

  A. Generate a new host key on the client and replace the current client host key on the SSH server.

  B. Verify that the settings in /etc/host.allow and /etc/host.deny are not preventing access.

  C. Flush the ARP table and the neighbor discovery cache on both the SSH server and the client.

  D. Add the new IP address of the client to the AllowHosts configuration setting on the SSH server.

  E. Check that there are no netfilter rules that reject SSH connections from the new IP address.

  Correct Answer: BE

• Question 3:

  With Nginx, which of the following directives is used to proxy requests to a FastCGI application?

  A. fastcgi_pass

  B. fastcgi_proxy

  C. proxy_fastcgi

  D. proxy_fastcgi_pass

  Correct Answer: A

• Question 4:

  Which of the following sshd configuration settings should be set to no in order to fully disable password based logins? (Choose THREE correct answers.)

  A. PAMAuthentication

  B. ChallengeResponseAuthentication

  C. UsePAM

  D. UsePasswords

  E. PasswordAuthentication

  Correct Answer: BCE

• Question 5:

  When trying to reverse proxy a web server through Nginx, what keyword is required to pass the Host header from the original request to the proxied server?

  ... {

  _________ Host $host

  ...

  }

  A. proxy_pass_header

  B. proxy_forward_header

  C. proxy_set_header

  D. proxy_header

  Correct Answer: C

• Question 6:

  Which of the following commands can be used to connect and interact with remote services? (Choose TWO correct answers.)

  A. nettalk

  B. nc

  C. telnet

  D. cat

  E. netmap

  Correct Answer: BC

• Question 7:

  Which configuration block in Nginx is used to define settings for a reverse proxied web server?

  A. server

  B. location

  C. reverse

  D. http

  Correct Answer: B

• Question 8:

  When trying to reverse proxy a web server through Nginx, what keyword is missing from the following configuration sample?

  location / {

  _________ http://proxiedserver:8080;

  }

  A. remote_proxy

  B. reverse_proxy

  C. proxy_reverse

  D. proxy_pass

  Correct Answer: D

• Question 9:

  With fail2ban what is a 'jail'?

  A. A netfilter rules chain blocking offending IP addresses for a particular service.

  B. A group of services on the server which should be monitored for similar attack patterns in the log files.

  C. A filter definition and a set of one or more actions to take when the filter is matched.

  D. The chroot environment in which fail2ban runs.

  Correct Answer: C

• Question 10:

  Which command can be used when writing scripts which perform tests against remote services?

  A. snort

  B. netmap

  C. nc

  D. telnet

  Correct Answer: C