Lpi Lpic Level 2 202-450 Questions & Answers

• Question 41:

  It has been discovered that the company mail server is configured as an open relay. Which of the following actions would help prevent the mail server from being used as an open relay while maintaining the possibility to receive company mails? (Choose two.)

  A. Restrict Postfix to only accept e-mail for domains hosted on this server

  B. Configure Dovecot to support IMAP connectivity

  C. Configure netfilter to not permit port 25 traffic on the public network

  D. Restrict Postfix to only relay outbound SMTP from the internal network

  E. Upgrade the mailbox format from mbox to maildir

  Correct Answer: CD

• Question 42:

  How are PAM modules organized and stored?

  A. As plain text files in /etc/security/

  B. A statically linked binaries in /etc/pam.d/bin/

  C. As Linux kernel modules within the respective sub directory of /lib/modules/

  D. As shared object files within the /lib/ directory hierarchy

  E. As dynamically linked binaries in /usr/lib/pam/sbin/

  Correct Answer: E

• Question 43:

  Which of the following statements in the ISC DHCPD configuration is used to specify whether or not an address pool can be used by nodes which have a corresponding host section in the configuration?

  A. identified-nodes

  B. unconfigured-hosts

  C. missing-peers

  D. unmatched-hwaddr

  E. unknown-clients

  Correct Answer: E

• Question 44:

  When are Sieve filters usually applied to an email?

  A. When the email is delivered to a mailbox

  B. When the email is relayed by an SMTP server

  C. When the email is received by an SMTP smarthost

  D. When the email is sent to the first server by an MUA

  E. When the email is retrieved by an MUA

  Correct Answer: A

• Question 45:

  In response to a certificate signing request, a certification authority sent a web server certificate along with the certificate of an intermediate certification authority that signed the web server certificate.

  What should be done with the intermediate certificate in order to use the web server certificate with Apache HTTPD?

  A. The intermediate certificate should be merged with the web server's certificate into one file that is specified in SSLCertificateFile

  B. The intermediate certificate should be used to verify the certificate before its deployment on the web server and can be deleted

  C. The intermediate certificate should be stored in its own file which is referenced in SSLCaCertificateFile

  D. The intermediate certificate should be improved into the certificate store of the web browser used to test the correct operation of the web server

  E. The intermediate certificate should be archived and resent to the certification authority in order to request a renewal of the certificate

  Correct Answer: A

• Question 46:

  Which Apache HTTPD directive enables HTTPS protocol support?

  A. HTTPSEngine on

  B. SSLEngine on

  C. SSLEnable on

  D. HTTPSEnable on

  E. StartTLS on

  Correct Answer: B

• Question 47:

  When using mod_authz_core, which of the following strings can be used as an argument to Require in an Apache HTTPD configuration file to specify the authentication provider? (Choose three.)

  A. method

  B. all

  C. regex

  D. header

  E. expr

  Correct Answer: ABE

  Reference: https://httpd.apache.org/docs/2.4/mod/mod_authz_core.html

• Question 48:

  Which tool creates a Certificate Signing Request (CSR) for serving HTTPS with Apache HTTPD?

  A. apachect1

  B. certgen

  C. cartool

  D. httpsgen

  E. openssl

  Correct Answer: E

• Question 49:

  Which of the following options are valid in /etc/exports? (Choose two.)

  A. rw

  B. ro

  C. rootsquash

  D. norootsquash

  E. uid

  Correct Answer: AB

• Question 50:

  Which command is used to configure which file systems a NFS server makes available to clients?

  A. exportfs

  B. mkfs.nfs

  C. mount

  D. nfsservct1

  E. telinit

  Correct Answer: A