Lpi LPI Certifications 202-450 Questions & Answers

• Question 141:

  Which subcommands to the openssl command are used in the process of generating a private key and a Certificate Signing Request (CSR)? (Choose TWO correct answers.)

  A. csr

  B. gencsr

  C. genkey

  D. genrsa

  E. req

  Correct Answer: DE

• Question 142:

  When trying to reverse proxy a web server through Nginx, what keyword is required to pass the Host header from the original request to the proxied server? ... {

  _________ Host $host

  ...

  }

  A. proxy_pass_header

  B. proxy_forward_header

  C. proxy_set_header

  D. proxy_header

  Correct Answer: C

• Question 143:

  Which of the following sshd configuration settings should be set to no in order to fully disable password based logins? (Choose THREE correct answers.)

  A. PAMAuthentication

  B. ChallengeResponseAuthentication

  C. UsePAM

  D. UsePasswords

  E. PasswordAuthentication

  Correct Answer: BCE

• Question 144:

  Given that all users have their home directory in /home and the following directive is present in the Apache HTTPD Server configuration file, what is the full filesystem path to the file referenced by the URL http://server/~joe/index.html?

  UserDir public_html

  A. /home/joe/public_html/index.html

  B. /home/public_html/joe/index.html

  C. /home/joe/public_html/htdocs/index.html

  D. /home/joe/apache/public_html/index.html

  Correct Answer: A

• Question 145:

  A private OID to be used with OpenLDAP should be obtained for a company when:

  A. The company intends to use a commercial LDAP schema.

  B. The company wants to make their directory available to the public on the Internet.

  C. The company plans to create custom schema files for their directory.

  D. The company wish to use an encrypted attribute.

  Correct Answer: C

• Question 146:

  According to this LDIF excerpt, which organizational unit is Robert Smith part of? (Specify only the organizational unit.) dn: cn=Robert Smith,ou=people,dc=example,dc=com objectclass: inetOrgPerson cn: Robert Smith cn: Robert J Smith cn: bob smith sn: smith uiD. rjsmith userpassworD. rJsmitH carlicensE. HISCAR 123 homephonE. 555-111-2222 mail: [email protected] mail: [email protected] mail: [email protected]

  description: swell guy

  A. people, ou=people

  Correct Answer: A

• Question 147:

  Where is the procmail configuration of the user foo stored if home directories are located in /home? (Specify the full name of the file, including path.)

  A. /home/foo/.procmailrc

  Correct Answer: A

• Question 148:

  For what purpose is TCP/IP stack fingerprinting used by nmap?

  A. It is used to determine the remote operating system.

  B. It is used to filter out responses from specific servers.

  C. It is used to identify duplicate responses from the same remote server.

  D. It is used to masquerade the responses of remote servers.

  E. It is used to uniquely identify servers on the network for forensics.

  Correct Answer: A

• Question 149:

  In a BIND zone file, what does the @ character indicate?

  A. It's the fully qualified host name of the DNS server.

  B. It's an alias for the e-mail address of the zone master.

  C. It's the name of the zone as defined in the zone statement in named.conf.

  D. It's used to create an alias between two CNAME entries.

  Correct Answer: C

• Question 150:

  Unlike many other services, OpenSSH cannot be configured to hide its version information without recompiling from source code. What is the primary reason for this disclosure of version information?

  A. There are many inconsistent SSH client and server versions. This information is used to enable protocol compatibility adjustments.

  B. The information is used for surveys of SSH servers on the internet by the OpenSSH project.

  C. Being a security centric application, the OpenSSH developers do not rely on security through obscurity.

  D. It is used by network auditing tools to report on when versions of ssh require security updates.

  Correct Answer: A