202-450 : LPIC-2 Exam 202 : Part 02

202-450 : LPIC-2 Exam 202 : Part 02

1. Which of the following options are valid in /etc/exports? (Choose two.)

   • rw

   • ro

   • rootsquash

   • norootsquash

   • uid

2. Which command is used to configure which file systems a NFS server makes available to clients?

   • exportfs

   • mkfs.nfs

   • mount

   • nfsservct1

   • telinit

3. Which of these tools, without any options, provides the most information when performing DNS queries?

   • dig

   • nslookup

   • host

   • named-checkconf

   • named-checkzone

4. Performing a DNS lookup with dig results in this answer:

   

   • There is no . after linuserv.example.net in the PTR record in the forward lookup zone file
   • There is no . after linuserv in the PTR record in the forward lookup zone file
   • There is no . after linuserv.example.net in the PTR record in the reverse lookup zone file
   • The . in the NS definition in the reverse lookup zone has to be removed

5. What option for BIND is required in the global options to disable recursive queries on the DNS server by default?

   • allow-recursive-query ( none; );

   • allow-recursive-query off;

   • recursion { disabled; }; 

   • recursion { none; };

   • recursion no;

6. Which of the following DNS records could be a glue record?

   • ns1.lab A 198.51.100.53

   • lab NS 198.51.100.53

   • ns1.lab NS 198.51.100.53

   • ns1. A 198.51.100.53

   • ns1.lab GLUE 198.51.100.53

7. What is DNSSEC used for?

   • Encrypted DNS queries between nameservers
   • Cryptographic authentication of DNS zones
   • Secondary DNS queries for local zones
   • Authentication of the user that initiated the DNS query
   • Encrypting DNS queries and answers

8. What word is missing from the following excerpt of a named.conf file?

   

   •  networks

   • net

   • list

   • acl

   • group

9. In a BIND zone file, what does the @ character indicate?

   • It’s the fully qualified host name of the DNS server
   • It’s an alias for the e-mail address of the zone master
   • It’s the name of the zone as defined in the zone statement in named.conf
   • It’s used to create an alias between two CNAME entries

10. Which BIND option should be used to limit the IP addresses from which slave name servers may connect?

    • allow-zone-transfer

    • allow-transfer

    • allow-secondary

    • allow-slaves

    • allow-queries

11. In order to protect a directory on an Apache HTTPD web server with a password, this configuration was added to an .htaccess file in the respective directory:

    

    Furthermore, a file /var/www/dir/ .htpasswd was created with the following content:
    usera:S3cr3t

    Given that all these files were correctly processed by the web server processes, which of the following statements is true about requests to the directory?

    • The user usera can access the site using the password s3cr3t
    • Accessing the directory as usera raises HTTP error code 442 (User Not Existent)
    • Requests are answered with HTTP error code 500 (Internal Server Error)
    • The browser prompts the visitor for a username and password but logins for usera do not seem to work
    • The web server delivers the content of the directory without requesting authentication

12. Which Apache HTTPD directive enables HTTPS protocol support?

    • HTTPSEngine on

    • SSLEngine on

    • SSLEnable on

    • HTTPSEnable on

    • StartTLS on

13. FILL BLANK

    What configuration directive of the Apache HTTPD server defines where log files are stored? (Specify ONE of the directives without any other options.)

    • ErrorLog

14. Which statements about the Alias and Redirect directives in Apache HTTPD’s configuration file are true? (Choose two.)

    • Alias can only reference files under DocumentRoot
    • Redirect works with regular expressions
    • Redirect is handled on the client side
    • Alias is handled on the server side
    • Alias is not a valid configuration directive

15. Which http_access directive for Squid allows users in the ACL named sales_net to only access the Internet at times specified in the time_acl named sales_time?

    • http_access deny sales_time sales_net

    • http_access allow sales_net sales_time

    • http_access allow sales_net and sales-time

    • allow http_access sales_net sales_time

    • http_access sales_net sales_time

16. Which global option in squid.conf sets the port number or numbers that Squid will use to listen for client requests?

    • port

    • client_port

    • http_port

    • server_port

    • squid_port

17. When using mod_authz_core, which of the following strings can be used as an argument to Require in an Apache HTTPD configuration file to specify the authentication provider? (Choose three.)

    • method
    • all
    • regex
    • header
    • expr

    Explanation:

    Reference: https://httpd.apache.org/docs/2.4/mod/mod_authz_core.html

18. Which tool creates a Certificate Signing Request (CSR) for serving HTTPS with Apache HTTPD?

    • apachect1

    • certgen

    • cartool

    • httpsgen

    • openssl

19. In response to a certificate signing request, a certification authority sent a web server certificate along with the certificate of an intermediate certification authority that signed the web server certificate.

    What should be done with the intermediate certificate in order to use the web server certificate with Apache HTTPD?

    • The intermediate certificate should be merged with the web server’s certificate into one file that is specified in SSLCertificateFile
    • The intermediate certificate should be used to verify the certificate before its deployment on the web server and can be deleted
    • The intermediate certificate should be stored in its own file which is referenced in SSLCaCertificateFile
    • The intermediate certificate should be improved into the certificate store of the web browser used to test the correct operation of the web server
    • The intermediate certificate should be archived and resent to the certification authority in order to request a renewal of the certificate

20. FILL BLANK

    Which directive in a Nginx server configuration block defines the TCP ports on which the virtual host will be available, and which protocols it will use? (Specify ONLY the option name without any values.)

    • listen