Lpi 202-450 Online Practice Questions and Exam Preparation

Lpi 202-450 Online Questions & Answers

• Question 301:

  FILL BLANK

  Which OpenLDAP client command can be used to change the password for an LDAP entry? (Specify ONLY the command without any path or parameters.)

  ldappasswd

• Question 302:

  When trying to reverse proxy a web server through Nginx, what keyword is missing from the following configuration sample?

  location / {

  _________ http://proxiedserver:8080;

  }

  A. remote_proxy
  B. reverse_proxy
  C. proxy_reverse
  D. proxy_pass
  D. proxy_pass

• Question 303:

  Postfix daemons can be chroot'd by setting the chroot flag in _______. (Supply only the filename, without a path)

  A. master.cf
  A. master.cf

• Question 304:

  In which directory can all parameters available to sysctl be found? (Provide the full path)

  A. /proc/sys
  A. /proc/sys

• Question 305:

  Using its standard configuration, how does fail2ban block offending SSH clients?

  A. By rejecting connections due to its role as a proxy in front of SSHD.
  B. By modifying and adjusting the SSHD configuration.
  C. By creating and maintaining netfilter rules.
  D. By creating null routes that drop any answer packets sent to the client.
  E. By modifying and adjusting the TCP Wrapper configuration for SSHD.
  B. By modifying and adjusting the SSHD configuration.

• Question 306:

  Select the Samba option below that should be used if the main intention is to setup a guest printer service?

  A. security = cups
  B. security = ldap
  C. security = pam
  D. security = share
  E. security = printing
  D. security = share

• Question 307:

  Which of the following are predefined targets for netfilter rules? (Choose TWO correct answers.)

  A. JUMP
  B. REROUTE
  C. NAT
  D. ACCEPT
  E. RETURN
  D. ACCEPT
  E. RETURN

• Question 308:

  After the installation of Dovecot, it is observed that the dovecot processes are shown in ps ax like this:

  

  In order to associate the processes with users and peers, the username, IP address of the peer and the connection status, which of the following options must be set?

  A. --with-linux-extprocnames for ./configure when building Dovecot
  B. sys.ps.allow_descriptions = 1 in sysct1.conf or /proc
  C. proc.all.show_status = 1 in sysctl.conf or /proc
  D. verbose_proctitle = yes in the Dovecot configuration
  E. process_format = "%u %I %s" in the Dovecot configuration
  D. verbose_proctitle = yes in the Dovecot configuration

• Question 309:

  The following data is some of the output produced by a program. Which program produced this output? strftime (" Thu", 1024, "%a", 0xb7f64380) =4 fwrite ("Thu", 3, 1, 0xb7f614e0) =1 fputc (' ', 0xb7f614e0) =32 strftime (" Feb", 1024, " %b", 0xb7f64380) =4 fwrite ("Feb", 3, 1, 0xb7f614e0) =1 fputc (' ', 0xb7f614e0) =32 fwrite ("19", 2, 1, 0xb7f614e0) =1

  A. lsof
  B. ltrace
  C. nm
  D. strace
  E. time
  B. ltrace

• Question 310:

  With fail2ban what is a 'jail'?

  A. A netfilter rules chain blocking offending IP addresses for a particular service.
  B. A group of services on the server which should be monitored for similar attack patterns in the log files.
  C. A filter definition and a set of one or more actions to take when the filter is matched.
  D. The chroot environment in which fail2ban runs.
  C. A filter definition and a set of one or more actions to take when the filter is matched.