Free Lpi 202-450 Practice Test & Real Exam Questions
With fail2ban, what is a 'jail'?
Correct Answer: A
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
When the default policy for the netfilter INPUT chain is set to DROP, why should a rule allowing traffic to localhost exist?
Correct Answer: E
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
If there is no access directive, what is the default setting for OpenLDAP?
Correct Answer: A
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Which netfilter table contains built-in chains called INPUT, OUTPUT and FORWARD?
Correct Answer: E
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
In order to export /usr and /bin via NFSv4, /exports was created and contains working bind mounts to /usr and
/bin. The following lines are added to /etc/exports on the NFC server:
After running
Explanation
mount-tnfsv4 server://mnt
of an NFC-Client, it is observed that /mnt contains the content of the server's /usr directory instead of the content of the NFSv4 foot folder.
Which option in /etc/exports has to be changed or removed in order to make the NFSv4 root folder appear when mounting the highest level of the server? (Specify ONLY the option name without any values or parameters.)
/bin. The following lines are added to /etc/exports on the NFC server:
After running
Explanation
mount-tnfsv4 server://mnt
of an NFC-Client, it is observed that /mnt contains the content of the server's /usr directory instead of the content of the NFSv4 foot folder.
Which option in /etc/exports has to be changed or removed in order to make the NFSv4 root folder appear when mounting the highest level of the server? (Specify ONLY the option name without any values or parameters.)
Correct Answer:
fsid
The fsid option in /etc/exports is used to specify a unique identifier for each exported filesystem.
For NFSv4, there is a distinguished filesystem which is the root of all exported filesystems, and it is specified with fsid=root or fsid=0, both of which mean the same thing. If this option is used for the /exports directory, then it will be the root of the NFSv4 hierarchy, and any subdirectories under it will be mounted relative to it. This means that when mounting the highest level of the server, the client will see the content of /exports instead of the NFSv4 root folder. To avoid this, the fsid option should be removed or changed to a different value for the /exports directory, so that it is not the NFSv4 root. The other options in /etc/exports are not relevant for this question.
The fsid option in /etc/exports is used to specify a unique identifier for each exported filesystem.
For NFSv4, there is a distinguished filesystem which is the root of all exported filesystems, and it is specified with fsid=root or fsid=0, both of which mean the same thing. If this option is used for the /exports directory, then it will be the root of the NFSv4 hierarchy, and any subdirectories under it will be mounted relative to it. This means that when mounting the highest level of the server, the client will see the content of /exports instead of the NFSv4 root folder. To avoid this, the fsid option should be removed or changed to a different value for the /exports directory, so that it is not the NFSv4 root. The other options in /etc/exports are not relevant for this question.
What is the name of the root element of the LDAP tree holding the configuration of an OpenLDAP server that is using directory based configuration?
(Specify ONLY the element's name without any additional information.)
(Specify ONLY the element's name without any additional information.)
Correct Answer:
cn=config
Explanation:
The root element of the LDAP tree holding the configuration of an OpenLDAP server that is using directory based configuration is called cn=config. This is a special entry that is not part of the regular data DITs, but rather a separate DIT that can be used to configure the OpenLDAP server online. The cn=config entry contains various subentries that define the global and database-specific settings for the server. The cn=config entry can be accessed and modified using standard LDAP tools and methods, such as ldapsearch and ldapmodify12.
References:
OpenLDAP Software 2.6 Administrator's Guide: Configuring slapd: The official documentation of OpenLDAP on how to configure the slapd daemon, which includes the description of the cn=config entry and its subentries.
How To Configure OpenLDAP and Perform Administrative LDAP Tasks | DigitalOcean: A tutorial from DigitalOcean on how to configure OpenLDAP and perform administrative LDAP tasks, which includes the use of the cn=config entry and the ldapsearch and ldapmodify tools.
Explanation:
The root element of the LDAP tree holding the configuration of an OpenLDAP server that is using directory based configuration is called cn=config. This is a special entry that is not part of the regular data DITs, but rather a separate DIT that can be used to configure the OpenLDAP server online. The cn=config entry contains various subentries that define the global and database-specific settings for the server. The cn=config entry can be accessed and modified using standard LDAP tools and methods, such as ldapsearch and ldapmodify12.
References:
OpenLDAP Software 2.6 Administrator's Guide: Configuring slapd: The official documentation of OpenLDAP on how to configure the slapd daemon, which includes the description of the cn=config entry and its subentries.
How To Configure OpenLDAP and Perform Administrative LDAP Tasks | DigitalOcean: A tutorial from DigitalOcean on how to configure OpenLDAP and perform administrative LDAP tasks, which includes the use of the cn=config entry and the ldapsearch and ldapmodify tools.
Which of the following statements in the ISC DHCPD configuration is used to specify whether or not an address pool can be used by nodes which have a corresponding host section in the configuration?
Correct Answer: A
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
A company is transitioning to a new DNS domain name and wants to accept e-mail for both domains for all of its users on a Postfix server.
Which configuration option should be updated to accomplish this?
Which configuration option should be updated to accomplish this?
Correct Answer: E
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Which keyword is used in the Squid configuration to define networks and times used to limit access to the service?
Correct Answer: C
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
