Lpi Lpic Level 2 202-450 Questions & Answers

• Question 31:

  Given the following Squid configuration excerpt:

  cache_dir ufs /var/spool/squid3/ 1024 16 256

  Which of the following directories will exist directly within the directory: /var/spool/squid3/? (Choose two.)

  A. 0F

  B. A0

  C. 0b

  D. FF

  E. 00

  Correct Answer: AC

• Question 32:

  Which keyword is used in the Squid configuration to define networks and times used to limit access to the service?

  A. acl

  B. allow

  C. http_allow

  D. permit

  Correct Answer: A

  Reference: https://www.tecmint.com/configure-squid-server-in-linux/

• Question 33:

  The following Apache HTTPD configuration has been set up to create a virtual host available at www.example.com and www2.example.com:

  

  Even though Apache HTTPD correctly processed the configuration file, requests to both names are not handled correctly. What should be changed in order to ensure correct operations?

  A. The configuration must be split into two VirtualHost sections since each virtual host may only have one name.

  B. The port mentioned in opening VirtualHost tag has to be appended to the ServerName declaration's values.

  C. Both virtual host names have to be placed as comma separated values in one ServerName declaration.

  D. Both virtual host names have to be mentioned in the opening VirtualHost tag.

  E. Only one Server name declaration may exist, but additional names can be declared in ServerAlias options.

  Correct Answer: C

• Question 34:

  The Samba configuration file contains the following lines:

  

  A workstation is on the wired network with an IP address of 192.168.1.177 but is unable to access the Samba server. A wireless laptop with an IP address 192.168.2.93 can access the Samba server. Additional trouble shooting shows that almost every machine on the wired network is unable to access the Samba server.

  Which alternate host allow declaration will permit wired workstations to connect to the Samba server without denying access to anyone else?

  A. host allow = 192.168.1.1-255

  B. host allow = 192.168.1.100 192.168.2.200 localhost

  C. host deny = 192.168.1.100/255.255.255.0 192.168.2.31 localhost 192.168.2.31 localhost

  D. host deny = 192.168.2.200/255.255.255.0

  E. host allow = 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 localhost

  Correct Answer: DE

• Question 35:

  What does the samba-tool testparm command confirm regarding the Samba configuration?

  A. The configuration loads successfully.

  B. The service operates as expected.

  C. The Samba services are started automatically when the system boots.

  D. The netfilter configuration on the Samba server does not block any access to the services defined in the configuration.

  E. All running Samba processes use the most recent configuration version.

  Correct Answer: A

  Reference: https://www.samba.org/samba/docs/current/man-html/testparm.1.html

• Question 36:

  Which of the following actions synchronizes UNIX passwords with the Samba passwords when the encrypted Samba password is changed using smbpasswd?

  A. There are no actions to accomplish this since is not possible.

  B. Run netvamp regularly, to convert the passwords.

  C. Run winbind -sync, to synchronize the passwords.

  D. Add unix password sync = yes to smb.conf

  E. Add smb unix password = sync to smb.conf

  Correct Answer: D

  Reference: https://www.oreilly.com/openbook/samba/book/ch06_04.html

• Question 37:

  In order to join a file server to the Active Directory domain intra.example.com, the following smb.conf has been created:

  

  The command net ads join raises an error and the server is not joined to the domain. What should be done to successfully join the domain?

  A. Change server role to ad member server to join an Active Directory domain instead of an NT4 domain.

  B. Add realm = intra.example.com to the smb.conf and change workgroup to the domain's netbios workgroup name.

  C. Manually create a machine account in the Active Directory domain and specify the machine account's name with when starting net ads join.

  D. Remove the winbind enum users and winbind enum groups since winbind is incompatible with Active Directory domains.

  E. Remove all idmap configuration stanzas since the id mapping is defined globally in an Active Directory domain and cannot be changed on a member server.

  Correct Answer: E

• Question 38:

  After the installation of Dovecot, it is observed that the dovecot processes are shown in ps ax like this:

  

  In order to associate the processes with users and peers, the username, IP address of the peer and the connection status, which of the following options must be set?

  A. --with-linux-extprocnames for ./configure when building Dovecot

  B. sys.ps.allow_descriptions = 1 in sysct1.conf or /proc

  C. proc.all.show_status = 1 in sysctl.conf or /proc

  D. verbose_proctitle = yes in the Dovecot configuration

  E. process_format = "%u %I %s" in the Dovecot configuration

  Correct Answer: D

• Question 39:

  Which of the following authentication mechanisms are supported by Dovecot? (Choose three.)

  A. ldap

  B. digest-md5

  C. cram-md5

  D. plain

  E. krb5

  Correct Answer: BCD

  Reference: https://wiki2.dovecot.org/Authentication/Mechanisms

• Question 40:

  Which of the following services belongs to NFSv4 and does not exist in NFSv3?

  A. rpc.idmapd

  B. rpc.statd

  C. nfsd

  D. rpc.mountd

  Correct Answer: A

  Reference: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/5/html/ deployment_guide/ch-nfs