Lpi 202-450 Online Practice Questions and Exam Preparation

Lpi 202-450 Online Questions & Answers

• Question 41:

  A BIND server should never answer queries from certain networks or hosts. Which configuration directive could be used for this purpose?

  A. deny-query { ...; };
  B. no-answer { ...; };
  C. deny-answer { ...; };
  D. deny-access { ...; };
  E. blackhole { ...; };
  E. blackhole { ...; };

• Question 42:

  When using mod_authz_core, which of the following strings can be used as an argument to Require in an Apache HTTPD configuration file to specify the authentication provider? (Choose three.)

  A. method
  B. all
  C. regex
  D. header
  E. expr
  A. method
  B. all
  E. expr

• Question 43:

  What security precautions must be taken when creating a directory into which files can be uploaded anonymously using FTP?

  A. The directory must not have the execute permission set.
  B. The directory must not have the read permission set.
  C. The directory must not have the read or execute permission set.
  D. The directory must not have the write permission set.
  E. The directory must not contain other directories.
  B. The directory must not have the read permission set.

• Question 44:

  Which of the following configuration lines will export /usr/local/share/ to nfsclient with read- write access, ensuring that all changes are written straight to the disk?

  A. nfsclient:/usr/local/share/:rw,sync
  B. nfsclient(rw,sync) /usr/local/share
  C. /usr/local/share nfsclient(rw,sync)
  D. /usr/local/share nfsclient:rw:sync
  E. /usr/local/share nfsclient(rw)
  C. /usr/local/share nfsclient(rw,sync)

• Question 45:

  Which Apache directive is used to specify the RSA private key that was used in the generation of the SSL certificate for the server?

  A. SSLCertificateKeyFile
  B. SSLKeyFile
  C. SSLPrivateKeyFile
  D. SSLRSAKeyFile
  A. SSLCertificateKeyFile

• Question 46:

  An SSH port-forwarded connection to the web server www.example.com was invoked using the command ssh -TL 80 :www.example.com:80 [email protected]. Which TWO of the following are correct?

  A. The client can connect to the web server by typing http://www.example.com/ into the browser's address bar and the connection will be encrypted
  B. The client can connect to www.example.com by typing http://localhost/ into the browser's address bar and the connection will be encrypted
  C. The client can't connect to the web server by typing http://www.example.com/ into the browser's address bar. This is only possible using http://localhost/
  D. It is only possible to port-forward connections to insecure services that provide an interactive shell (like telnet)
  E. The client can connect to the web server by typing http://www.example.com/ into the browser's address bar and the connection will not be encrypted
  B. The client can connect to www.example.com by typing http://localhost/ into the browser's address bar and the connection will be encrypted
  E. The client can connect to the web server by typing http://www.example.com/ into the browser's address bar and the connection will not be encrypted

• Question 47:

  Which command can be used to list all exported file systems from a remote NFS server:

  A. exportfs
  B. nfsstat
  C. rpcinfo
  D. showmount
  E. importfs
  D. showmount

• Question 48:

  LDAP-based authentication against a newly-installed LDAP server does not work as expected. The file /etc/pam.d/login includes the following configuration parameters. Which of them is NOT correct?

  A. password required /lib/security/pam_ldap.so
  B. auth sufficient /lib/security/pam_ldap.so use_first_pass
  C. account sufficient /lib/security/pam_ldap.so
  D. password required /lib/security/pam_pwdb.so
  E. auth required /lib/security/pam_ldap.so
  E. auth required /lib/security/pam_ldap.so

• Question 49:

  Which of the following options can be passed to a DHCP client machine using configuration options on the DHCP server?

  A. The NIS domain name
  B. The resolving order in /etc/resolv.conf
  C. The priority order in nsswitch.conf
  D. The filter rules for iptables
  E. The contents of hosts.allow and hosts.deny
  A. The NIS domain name

• Question 50:

  Which dhcpd.conf option defines the DNS server address(es) to be sent to the DHCP clients?

  A. domainname
  B. domain-name-servers
  C. domain-nameserver
  D. domain-name-server
  B. domain-name-servers