Updated Dec-2021 Exam 202-450 Dumps - Pass Your Certification Exam
Latest Real Lpi 202-450 Exam Dumps Questions
NEW QUESTION 68
After the installation of Dovecot, it is observed that the dovecot processes are shown in ps ax like this:
In order to associate the processes with users and peers, the username, IP address of the peer and the connection status, which of the following options must be set?
- A. proc.all.show_status = 1 in sysctl.conf or /proc
- B. --with-linux-extprocnames for ./configure when building Dovecot
- C. process_format = "%u %I %s" in the Dovecot configuration
- D. sys.ps.allow_descriptions = 1 in sysct1.conf or /proc
- E. verbose_proctitle = yes in the Dovecot configuration
Answer: E
NEW QUESTION 69
Which of the following statements are true regarding Server Name Indication (SNI)? (Choose two.)
- A. It allows multiple SSL/TLS secured virtual HTTP hosts to coexist on the same IP address.
- B. It submits the host name of the requested URL during the TLS handshake.
- C. It enables HTTP servers to update the DNS of their virtual hosts' names using the X 509 certificates of the virtual hosts.
- D. It provides a list of available virtual hosts to the client during the TLS handshake.
- E. It supports transparent failover of TLS sessions from one web server to another.
Answer: A,B
Explanation:
Explanation
NEW QUESTION 70
Which of the following authentication mechanisms are supported by Dovecot? (Choose three.)
- A. digest-md5
- B. krb5
- C. plain
- D. cram-md5
- E. ldap
Answer: A,C,D
NEW QUESTION 71
In order to export /usr and /bin via NFSv4, /exports was created and contains working bind mounts to /usr and /bin.
The following lines are added to /etc/exports on the NFC server:
After running mount-tnfsv4 server://mnt of an NFC-Client, it is observed that /mnt contains the content of the server's /usr directory instead of the content of the NFSv4 foot folder.
Which option in /etc/exports has to be changed or removed in order to make the NFSv4 root folder appear when mounting the highest level of the server?
(Specify ONLY the option name without any values or parameters.)
Answer:
Explanation:
mount
NEW QUESTION 72
Fill in the blank.
What configuration directive of the Apache HTTPD server defines where log files are stored?
(Specify ONE of the directives without any other options.)
Answer:
Explanation:
ErrorLog
NEW QUESTION 73
FILL BLANK
What configuration directive of the Apache HTTPD server defines where log files are stored? (Specify ONE of the directives without any other options.)
Answer:
Explanation:
ErrorLog
NEW QUESTION 74
Which of the following Samba configuration parameters is functionally identical to the parameter read only=yes?
- A. browseable=no
- B. write access=no
- C. write only=no
- D. read write=no
- E. writeable=no
Answer: E
NEW QUESTION 75
Which option within the ISC DHCPD configuration file defines the IPv4 DNS server address(es) to be sent to the DHCP clients?
- A. servers
- B. domain-name-servers
- C. domain-server
- D. name-server
Answer: B
Explanation:
Explanation
NEW QUESTION 76
The program vsftpd, running in a chroot jail, gives the following error:
Which of the following actions would fix the error?
- A. Run the program using the command chrootand the option--static_libs
- B. Create a symbolic link that points to the required library outside the chroot jail
- C. Copy the required library to the appropriate libdirectory in the chroot jail
- D. The file /etc/ld.so.confin the root filesystem must contain the path to the appropriate libdirectory in the chroot jail
Answer: C
NEW QUESTION 77
Which of the following lines is valid in a configuration file in /etc/pam.d/?
- A. authpam_unix.so(required try_first_pass nullok)
- B. authtry_first_pass nullok, require pam_unix.so
- C. authrequired:pam_unix.so(try_first_pass nullok)
- D. authrequired pam_unix.sotry_first_pass nullok
Answer: D
NEW QUESTION 78
What is DNSSEC used for?
- A. Encrypted DNS queries between nameservers
- B. Secondary DNS queries for local zones
- C. Authentication of the user that initiated the DNS query
- D. Cryptographic authentication of DNS zones
- E. Encrypting DNS queries and answers
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION 79
The following Apache HTTPD configuration has been set up to create a virtual host available at www.example.com and www2.example.com:
Even though Apache HTTPD correctly processed the configuration file, requests to both names are not handled correctly. What should be changed in order to ensure correct operations?
- A. Both virtual host names have to be placed as comma separated values in one ServerName declaration.
- B. The configuration must be split into two VirtualHost sections since each virtual host may only have one name.
- C. Both virtual host names have to be mentioned in the opening VirtualHost tag.
- D. Only one Server name declaration may exist, but additional names can be declared in ServerAlias options.
- E. The port mentioned in opening VirtualHost tag has to be appended to the ServerName declaration's values.
Answer: A
NEW QUESTION 80
NO: 99
A BIND server should be upgraded to use TSIG. Which configuration parameters should be added if the server should use the algorithm hmac-md5 and the key skrKc4DoTzi/takIlPi7JZA==?
- A. Option A
- B. Option E
- C. Option B
- D. Option C
- E. Option D
Answer: D
NEW QUESTION 81
In order to protect a directory on an Apache HTTPD web server with a password, this configuration was added to an .htaccess file in the respective directory:
Furthermore, a file /var/www/dir/ .htpasswd was created with the following content:
usera:S3cr3t
Given that all these files were correctly processed by the web server processes, which of the following statements is true about requests to the directory?
- A. The browser prompts the visitor for a username and password but logins for usera do not seem to work
- B. Requests are answered with HTTP error code 500 (Internal Server Error)
- C. Accessing the directory as usera raises HTTP error code 442 (User Not Existent)
- D. The web server delivers the content of the directory without requesting authentication
- E. The user usera can access the site using the password s3cr3t
Answer: E
NEW QUESTION 82
FILL BLANK
What option in the sshdconfiguration file instructs sshdto permit only specific user names to log in to a system? (Specify ONLY the option name without any values.)
Answer:
Explanation:
sshd_config
Explanation/Reference:
Reference: https://www.ssh.com/ssh/sshd_config/
NEW QUESTION 83
If there is no access directive, what is the default setting for OpenLDAP?
- A. Option B
- B. Option A
- C. Option C
- D. Option D
Answer: A
NEW QUESTION 84
In which CIFS share must printer drivers be placed to allow Point'n'Print driver deployment on Windows?
- A. The name of the share is specified in the option print driver share within each printable share in smb.
- B. winx64drv$
- C. print$
- D. NETLOGON
- E. conf pnpdrivers$
Answer: C
NEW QUESTION 85
Which of the statements below are correct regarding the following commands, which are executed on a Linux router? (Choose two.)
- A. The rules disable packet forwarding because network nodes always use addresses from fe80::/64 to identify routers in their routing tables
- B. Packets with source or destination addresses from fe80::/64 will never occur in the FORWARD chain
- C. ip6tables returns an error for the second command because the affected network is already part of another rule
- D. The rules suppress any automatic configuration through router advertisements or DHCPv6
- E. Both ip6tables commands complete without an error message or warning
Answer: D,E
NEW QUESTION 86
Which global option in squid.confsets the port number or numbers that Squid will use to listen for client requests?
- A. squid_port
- B. port
- C. http_port
- D. server_port
- E. client_port
Answer: C
NEW QUESTION 87
Which of the following DNS records could be a glue record?
- A. ns1.labA198.51.100.53
- B. ns1.A198.51.100.53
- C. labNS198.51.100.53
- D. ns1.labGLUE198.51.100.53
- E. ns1.labNS198.51.100.53
Answer: A
NEW QUESTION 88
What does the samba-tool testparm command confirm regarding the Samba configuration?
- A. The Samba services are started automatically when the system boots.
- B. The netfilter configuration on the Samba server does not block any access to the services defined in the configuration.
- C. The service operates as expected.
- D. The configuration loads successfully.
- E. All running Samba processes use the most recent configuration version.
Answer: D
NEW QUESTION 89
The Samba configuration file contains the following lines:
A workstation is on the wired network with an IP address of 192.168.1.177 but is unable to access the Samba server. A wireless laptop with an IP address 192.168.2.93 can access the Samba server. Additional trouble shooting shows that almost every machine on the wired network is unable to access the Samba server.
Which alternate host allow declaration will permit wired workstations to connect to the Samba server without denying access to anyone else?
- A. host allow = 192.168.1.1-255
- B. host allow = 192.168.1.100192.168.2.200localhost
- C. host allow = 192.168.1.0/255.255.255.0192.168.2.0/255.255.255.0 localhost
- D. host deny = 192.168.1.100/255.255.255.0192.168.2.31localhost
- E. host deny = 192.168.2.200/255.255.255.0192.168.2.31localhost
Answer: C,E
NEW QUESTION 90
Fill in the blank.
What is the path to the global Postfix configuration file? (Specify the full name of the file, including path.)
Answer:
Explanation:
etc/postfix/main.cf
NEW QUESTION 91
A host, called lpi, with the MAC address 08:00:2b:4c:59:23 should always be given the IP address of
192.168.1.2 by a DHCP server running ISC DHCPD.
Which of the following configurations will achieve this?
- A. Option A
- B. Option C
- C. Option E
- D. Option B
- E. Option D
Answer: E
NEW QUESTION 92
Performing a DNS lookup with dig results in this answer:
- A. The . in the NS definition in the reverse lookup zone has to be removed
- B. There is no . after linuserv.example.net in the PTR record in the reverse lookup zone file
- C. There is no . after linuserv.example.net in the PTR record in the forward lookup zone file
- D. There is no . after linuserv in the PTR record in the forward lookup zone file
Answer: B
NEW QUESTION 93
......
Topic 6: System Security
The examinees should be able to customize a system in order to forward an IP packet as well as execute network address translation (including IP masquerading & NAT). The applicants should also possess the skills in configuring an FTP server for anonymous uploads downloads. The topic also covers their competency in precautions that are to be taken in case anonymous uploads are allowed. Moreover, they should be proficient in configuring and securing an SSH daemon. This subject area also involves your skills in handling keys and customizing SSH for the users. You need to possess the capacity to forward an application protocol over SSH as well as handle the SSH login. You are required to have proficiency in receiving security alerts from different sources, installing, customizing, and operating intrusion detection systems. The individuals need to be capable of applying security patches & bugfixes. Lastly, it is essential that one possesses the expertise in customizing VPN and creating secure site-to-site or point-to-point connections.
202-450 Dumps To Pass LPIC-2 Certified Linux Engineer Exam in One Day : https://www.pass4sures.top/LPIC-2-Certified-Linux-Engineer/202-450-testking-braindumps.html
100% Guaranteed Results 202-450 Unlimited 120 Questions: https://drive.google.com/open?id=1MwK_P9pv96qLrXjG9W1YCl0HxUcf6Xa8