202-450 : LPIC-2 Exam 202 : Part 03

202-450 : LPIC-2 Exam 202 : Part 03

1. When trying to reverse proxy a web server through Nginx, what keyword is missing from the following configuration sample?

   

   •  remote_proxy

   • reverse_proxy

   • proxy_reverse

   • proxy_pass

   • forward_to

2. If there is no access directive, what is the default setting for OpenLDAP?

   • 

   • 

   • 

   • 

3. A host, called lpi, with the MAC address 08:00:2b:4c:59:23 should always be given the IP address of 192.168.1.2 by a DHCP server running ISC DHCPD.

   Which of the following configurations will achieve this?

   • 

   • 

   • host lpi = 08:00:2b:4c:59:23 192.168.1.2

   • 

   • 

4. How is the LDAP administrator account configured when the rootdn and rootpw directives are not present in the slapd.conf file?

   • The default account admin with the password admin are used
   • The account is defined by an ACL in slapd.conf
   • The default account admin is used without a password
   • The account is defined in the file /etc/ldap.secret
   • The account is defined in the file /etc/ldap.root.conf

5. Which of the following PAM modules allows the system administrator to use an arbitrary file containing a list of user and group names with restrictions on the system resources available to them?

   • pam_filter

   • pam_limits

   • pam_listfile

   • pam_unix

6. FILL BLANK

   According to this LDIF excerpt, which organizational unit is Robert Smith part of? (Specify only the organizational unit.)

   

   •  people

7. In a PAM configuration file, which of the following is true about the required control flag?

   • If the module returns success, no more modules of the same type will be invoked
   • The success of the module is needed for the module-type facility to succeed. If it returns a failure, control is returned to the calling application
   • The success of the module is needed for the module-type facility to succeed. However, all remaining modules of the same type will be invoked
   • The module is not critical and whether it returns success or failure is not important
   • If the module returns failure, no more modules of the same type will be invoked

8. FILL BLANK

   What is the name of the root element of the LDAP tree holding the configuration of an OpenLDAP server that is using directory based configuration? (Specify ONLY the element’s name without any additional information.)

   • slapd

9. How are PAM modules organized and stored?

   • As plain text files in /etc/security/
   • A statically linked binaries in /etc/pam.d/bin/
   • As Linux kernel modules within the respective sub directory of /lib/modules/
   • As shared object files within the /lib/ directory hierarchy
   • As dynamically linked binaries in /usr/lib/pam/sbin/

10. Which of the following statements in the ISC DHCPD configuration is used to specify whether or not an address pool can be used by nodes which have a corresponding host section in the configuration?

    • identified-nodes

    • unconfigured-hosts

    • missing-peers

    • unmatched-hwaddr

    • unknown-clients

11. FILL BLANK

    In order to specify alterations to an LDAP entry, what keyword is missing from the following LDIF file excerpt?

    

    Specify the keyword only and no other information.

    •  add

12. FILL BLANK

    Which OpenLDAP client command can be used to change the password for an LDAP entry? (Specify ONLY the command without any path or parameters.)

    • ldappasswd

13. A company is transitioning to a new DNS domain name and wants to accept e-mail for both domains for all of its users on a Postfix server.

    Which configuration option should be updated to accomplish this?

    • mydomain

    • mylocations

    • mydestination

    • myhosts

    • mydomains

14. FILL BLANK

    What is the path to the global Postfix configuration file? (Specify the full name of the file, including path.)

    • etc/postfix/main.cf

15. When are Sieve filters usually applied to an email?

    • When the email is delivered to a mailbox
    • When the email is relayed by an SMTP server
    • When the email is received by an SMTP smarthost
    • When the email is sent to the first server by an MUA
    • When the email is retrieved by an MUA

16. It has been discovered that the company mail server is configured as an open relay. Which of the following actions would help prevent the mail server from being used as an open relay while maintaining the possibility to receive company mails? (Choose two.)

    • Restrict Postfix to only accept e-mail for domains hosted on this server
    • Configure Dovecot to support IMAP connectivity
    • Configure netfilter to not permit port 25 traffic on the public network
    • Restrict Postfix to only relay outbound SMTP from the internal network
    • Upgrade the mailbox format from mbox to maildir

17. After the installation of Dovecot, it is observed that the dovecot processes are shown in ps ax like this:

    

    In order to associate the processes with users and peers, the username, IP address of the peer and the connection status, which of the following options must be set?

    • --with-linux-extprocnames for ./configure when building Dovecot

    • sys.ps.allow_descriptions = 1 in sysct1.conf or /proc

    • proc.all.show_status = 1 in sysctl.conf or /proc

    • verbose_proctitle = yes in the Dovecot configuration

    • process_format = “%u %I %s” in the Dovecot configuration

18. Which Postfix command can be used to rebuild all of the alias database files with a single invocation and without the need for any command line arguments?

    • makealiases

    • newaliases

    • postalias

    • postmapbuild

19. FILL BLANK

    Which action in a Sieve filter forwards a message to another email address without changing the message? (Specify ONLY the action’s name without any parameters.)

    • redirect

20. Which of the following authentication mechanisms are supported by Dovecot? (Choose three.)

    • ldap

    • digest-md5

    • cram-md5

    • plain

    • krb5

    Explanation:

    Reference: https://wiki2.dovecot.org/Authentication/Mechanisms