Lpi 202-450 Online Practice Questions and Exam Preparation

Lpi 202-450 Online Questions & Answers

• Question 251:

  In a PAM configuration file, which of the following is true about the required control flag?

  A. If the module returns success, no more modules of the same type will be invoked
  B. The success of the module is needed for the module-type facility to succeed. If it returns a failure, control is returned to the calling application
  C. The success of the module is needed for the module-type facility to succeed. However, all remaining modules of the same type will be invoked.
  D. The module is not critical and whether it returns success or failure is not important.
  E. If the module returns failure, no more modules of the same type will be invoked
  C. The success of the module is needed for the module-type facility to succeed. However, all remaining modules of the same type will be invoked.

• Question 252:

  The new file server is a member of the Windows domain "foo". Which TWO of the following configuration sections will allow members of the domain group "all" to read, write and execute files in "/srv/smb/data"?

  A. [data] comment = data share path = /srv/smb/data write list = @foo+all force group = @foo+all create mask = 0550 directory mask = 0770
  B. [data] comment = data share path = /srv/smb/data write list = @foo+all force group = @foo+all create mask = 0770 directory mask = 0770
  C. [data] path = /srv/smb/data write list = @foo+all force group = @foo+all create mask = 0770 directory mask = 0770
  D. [data] comment = data share path = /srv/smb/data write list = @foo+all force group = @foo+all directory mask = 0770
  E. [data] comment = data share path = /srv/smb/data write list = @foo+all force group = all create mask = 0550 directory mask = 0770
  B. [data] comment = data share path = /srv/smb/data write list = @foo+all force group = @foo+all create mask = 0770 directory mask = 0770
  C. [data] path = /srv/smb/data write list = @foo+all force group = @foo+all create mask = 0770 directory mask = 0770

• Question 253:

  

  A. Any host, from any network, may use this server as its main DNS server.
  B. If the server doesn't know the answer to a query, it sends a recursive query to 192.168.0.4.
  C. If the server doesn't know the answer to a query, it sends a query to a root DNS server.
  D. Hosts in the network 10.0.0.0/24 will be able to ask for zone transfers.
  E. If the server doesn't know the answer to a query, it sends a recursive query to 192.168.0.4 and, if this fails, it returns a failure.
  B. If the server doesn't know the answer to a query, it sends a recursive query to 192.168.0.4.

• Question 254:

  Select the alternative that shows the correct way to disable a user login for all users except root.

  A. The use of the pam_block module along with the /etc/login configuration file.
  B. The use of the pam_deny module along with the /etc/deny configuration file.
  C. The use of the pam_pwdb module along with the /etc/pwdv.conf configuration file.
  D. The use of the pam_nologin module along with the /etc/nologin configuration file.
  D. The use of the pam_nologin module along with the /etc/nologin configuration file.

• Question 255:

  Which of the following options are valid in /etc/exports? (Choose two.)

  A. rw
  B. ro
  C. rootsquash
  D. norootsquash
  E. uid
  A. rw
  B. ro

• Question 256:

  What is the appropriate configuration file entry to allow SSH to run from inetd?

  A. ssh stream tcp nowait root /usr/sbin/tcpd sshd
  B. ssh stream tcp nowait root /usr/sbin/tcpd tcpd
  C. ssh stream tcpd nowait root /usr/sbin/tcpd sshd
  D. ssh data tcpd nowait root /usr/sbin/tcpd sshd
  E. ssh data tcp nowait root /usr/sbin/tcpd sshd
  A. ssh stream tcp nowait root /usr/sbin/tcpd sshd

• Question 257:

  Which daemon is required on the client if an ethernet device gets its IP address from a central server?

  A. dhcp
  B. dhcpcd
  C. bootpd
  D. ethd
  E. dhcpd
  B. dhcpcd

• Question 258:

  DNSSEC is used for?

  A. Encrypted DNS queries between nameservers.
  B. Cryptographic authentication of DNS zones.
  C. Secondary DNS queries for local zones.
  D. Defining a secure DNS section.
  E. Querying a secure DNS section.
  B. Cryptographic authentication of DNS zones.

• Question 259:

  Which option can be used to allow access to a BIND DNS server from only specified networks/hosts?

  A. Using the limit { ...; }; statement in the named configuration file.
  B. Using the allow-query { ...; }; statement in the named configuration file.
  C. Using the answer-only { ...; }; statement in the named configuration file.
  D. Using the allow-answer { ...; }; statement in the named configuration file.
  E. Using the query-access { ...; }; statement in the named configuration file.
  B. Using the allow-query { ...; }; statement in the named configuration file.

• Question 260:

  FILL BLANK

  According to this LDIF excerpt, which organizational unit is Robert Smith part of? (Specify only the organizational unit.)

  

  people