Lpi Lpic Level 2 202-450 Questions & Answers

• Question 21:

  Using its standard configuration, how does fail2ban block offending SSH clients?

  A. By rejecting connections due to its role as a proxy in front of SSHD.

  B. By modifying and adjusting the SSHD configuration.

  C. By creating and maintaining netfilter rules.

  D. By creating null routes that drop any answer packets sent to the client.

  E. By modifying and adjusting the TCP Wrapper configuration for SSHD.

  Correct Answer: B

  Reference: https://www.digitalocean.com/community/tutorials/how-to-protect-ssh-with-fail2ban-on-centos-7

• Question 22:

  Which FTP names are recognized as anonymous users in vsftp when the option anonymous_enable is set to yes in the configuration files? (Choose two.)

  A. anonymous

  B. ftp

  C. In the described configuration, any username which neither belongs to an existing user nor has another special meaning is treated as anonymous user.

  D. nobody

  E. guest

  Correct Answer: AB

  Reference: http://vsftpd.beasts.org/vsftpd_conf.html#lbAE

• Question 23:

  Which of the following commands can be used to connect and interact with remote TCP network services? (Choose two.)

  A. nettalk

  B. nc

  C. telnet

  D. cat

  E. netmap

  Correct Answer: BC

• Question 24:

  To which destination will a route appear in the Linux routing table after activating IPv6 on a router's network interface, even when no global IPv6 addresses have been assigned to the interface?

  A. fe80::/10

  B. 0::/128

  C. 0::/0

  D. fe80::/64

  E. 2000::/3

  Correct Answer: A

• Question 25:

  There is a restricted area in a site hosted by Apache HTTPD, which requires users to authenticate against the file /srv/www/security/sitepasswd.

  Which command is used to CHANGE the password of existing users, without losing data, when Basic authentication is being used?

  A. htpasswd -c /srv/www/security/sitepasswd user

  B. htpasswd /srv/www/security/sitepasswd user

  C. htpasswd -n /srv/www/security/sitepasswd user

  D. htpasswd -D /srv/www/security/sitepasswd user

  Correct Answer: B

  Reference: https://httpd.apache.org/docs/2.4/howto/auth.html

• Question 26:

  Which Apache HTTPD configuration directive is used to specify the method of authentication, e.g. None or Basic?

  A. AuthUser

  B. AllowedAuthUser

  C. AuthType

  D. AllowAuth

  Correct Answer: C

  Reference: https://httpd.apache.org/docs/2.4/howto/auth.html

• Question 27:

  Which of the following are logging directives in Apache HTTPD? (Choose two.)

  A. TransferLog

  B. CustomLog

  C. ErrorLog

  D. ServerLog

  E. VHostLog

  Correct Answer: AB

  Reference: http://httpd.apache.org/docs/current/mod/mod_log_config.html

• Question 28:

  Which option within a Nginx server configuration section defines the file system path from which the content of the server is retrieved?

  A. location

  B. htdocs

  C. DocumentRoot

  D. root

  E. base_dir

  Correct Answer: D

  Reference: http://nginx.org/en/docs/beginners_guide.html

• Question 29:

  Which of the following statements are true regarding Server Name Indication (SNI)? (Choose two.)

  A. It supports transparent failover of TLS sessions from one web server to another.

  B. It allows multiple SSL/TLS secured virtual HTTP hosts to coexist on the same IP address.

  C. It enables HTTP servers to update the DNS of their virtual hosts' names using the X 509 certificates of the virtual hosts.

  D. It provides a list of available virtual hosts to the client during the TLS handshake.

  E. It submits the host name of the requested URL during the TLS handshake.

  Correct Answer: BE

• Question 30:

  Which Apache HTTPD configuration directive specifies the RSA private key that was used in the generation of the SSL certificate for the server?

  A. SSLCertificateKeyFile

  B. SSLKeyFile

  C. SSLPrivateKeyFile

  D. SSLRSAKeyFile

  Correct Answer: A

  Reference: https://httpd.apache.org/docs/2.4/ssl/ssl_faq.html#aboutcerts