Lpi LPI Certifications 300-100 Questions & Answers

• Question 121:

  A server is authenticating users using the pam_ldap module. Only users who are members of a certain group should be allowed to login. In which parameter in ldap.conf can a filter string be specified, that is ANDed with the login attribute when validating a user? (Enter only the parameter, without any options or values)

  A. pam_filter

  Correct Answer: A

• Question 122:

  When configuring an OpenLDAP system for integration with PAM and NSS the /etc/nsswitch.conf file

  needs to be modified. Which of the following parameters completes this line from the /etc/nsswitch.conf

  file?

  passwD. files _________

  A. pam

  B. ldap

  C. pam_nss

  D. pam_ldap

  E. none

  Correct Answer: B

• Question 123:

  By configuring Pluggable Authentication Module (PAM) and Name Service Switch (NSS) technologies to use OpenLDAP, what authentication service can be replaced?

  A. Microsoft NT Domain

  B. Samba

  C. Network Information Service (NIS)

  D. Active Directory (AD)

  Correct Answer: C

• Question 124:

  Which option for the pam_ldap module specifies a file from which the module's global settings can be read?

  A. default

  B. global

  C. config

  D. include

  Correct Answer: C

• Question 125:

  In order to generate an individual log file for each of the machines connecting to a Samba server, which of the following statements must be used in the Samba configuration file?

  A. log file = /var/log/samba/log.%c

  B. log file = /var/log/samba/log.%M

  C. log file = /var/log/samba/log.%m

  D. log file = /var/log/samba/log.%I

  Correct Answer: C

• Question 126:

  What samba command generates the following output? (Specify ONLY the command without any path or parameters.)

  

  A. smbstatus

  Correct Answer: A

• Question 127:

  Which of the following parameters is used in the database on a slave server to direct clients that want to make changes to the OpenLDAP database to the master server?

  A. updatedn

  B. updateserver

  C. updateref

  D. updateuri

  Correct Answer: C

• Question 128:

  It is found that changes made to an OpenLDAP directory are no longer being replicated to the slave server at 192.168.0.3. Tests prove that the slave server is listening on the correct port and changes are being recorded properly to the replication log file.

  In which file would you find the replication errors?

  A. replication.err

  B. replication.rej

  C. 192.168.0.3: 389.rej

  D. 192.168.0.3: 389.err

  Correct Answer: C

• Question 129:

  In an OpenLDAP masters's slapd.conf configuration file, a replica configuration option is needed to enable

  a slave OpenLDAP server to replicate.

  What value is required in the following setting:

  bindmethod=____________ if using passwords for master/slave authentication? (Only specify the missing

  value)

  A. simple

  Correct Answer: A

• Question 130:

  In the example below, what is the missing argument that is required to use secret as the password to authenticate the replication push with a slave directory server? replica uri=ldaps: //slave.example.com: 636 binddn="cn=Replicator,dc=example,dc=com" bindmethod=simple ______________=secret

  A. secure

  B. master

  C. credentials

  D. password

  Correct Answer: C