Get Ready to Boost your Prepare for your 202-450 Exam with 120 Questions [Q69-Q91]

120問で202-450試験の準備を高めよう【Q69-Q91

この記事を評価する

Get Ready to Boost your Prepare for your 202-450 Exam with 120 Questions

Use Free 202-450 Exam Questions that Stimulates Actual EXAM

To prepare for the LPIC-2 Exam 202, Part 2 of 2, version 4.5, candidates should have a solid understanding of Linux administration and should have completed LPIC-2 Exam 201. There are several resources available to help candidates prepare for the exam, including study guides, practice exams, and online courses.

NO.69 CORRECT TEXT
What is the path to the global Postfix configuration file? (Specify the full name of the file, including path.)

/etc/postfix/main.cf

70位 What is the name of the root element of the LDAP tree holding the configuration of an OpenLDAP server that is using directory based configuration?
(Specify ONLY the element’s name without any additional information.)

cn=config
説明する：
The root element of the LDAP tree holding the configuration of an OpenLDAP server that is using directory based configuration is called cn=config. This is a special entry that is not part of the regular data DITs, but rather a separate DIT that can be used to configure the OpenLDAP server online. The cn=config entry contains various subentries that define the global and database-specific settings for the server. The cn=config entry can be accessed and modified using standard LDAP tools and methods, such as ldapsearch and ldapmodify12.
参考文献
OpenLDAP Software 2.6 Administrator’s Guide: Configuring slapd: The official documentation of OpenLDAP on how to configure the slapd daemon, which includes the description of the cn=config entry and its subentries.
How To Configure OpenLDAP and Perform Administrative LDAP Tasks | DigitalOcean: A tutorial from DigitalOcean on how to configure OpenLDAP and perform administrative LDAP tasks, which includes the use of the cn=config entry and the ldapsearch and ldapmodify tools.

NO.71 When trying to reverse proxy a web server through Nginx, what keyword is missing from the following configuration sample?

remote_proxy

reverse_proxy

proxy_reverse

proxy_pass

forward_to

NO.72 What command displays NFC kernel statistics? (Specify ONLY the command without any path or parameters.)

nfsstat

NO.73 Which of the following commands displays an overview of the Postfix queue content to help identify remote sites that are causing excessive mail traffic?

mailtraf

queuequery

qshape

postmap

poststats

Explanation/Reference: https://easyengine.io/tutorials/mail/postfix-queue/

NO.74 In order to protect a directory on an Apache HTTPD web server with a password, this configuration was added to an .htaccess file in the respective directory:

Furthermore, a file /var/www/dir/ .htpasswd was created with the following content:
usera:S3cr3t
Given that all these files were correctly processed by the web server processes, which of the following statements is true about requests to the directory?

The user usera can access the site using the password s3cr3t

Accessing the directory as usera raises HTTP error code 442 (User Not Existent)

Requests are answered with HTTP error code 500 (Internal Server Error)

The browser prompts the visitor for a username and password but logins for usera do not seem to work

The web server delivers the content of the directory without requesting authentication

説明
The .htaccess file in the directory is configured to require a valid user. The .htpasswd file contains the username and password for usera. Therefore, usera can access the site using the password s3cr3t. References:
LPIC-2 Overview
LPIC-2 202-450
Password Protecting Your Pages with htaccess

NO.75 Which of these tools provides DNS information in the following format?

dig

エヌエスルックアップ

host

named-checkconf

named-checkzone

NO.76 A zone file contains the following lines:

and is included in the BIND configuration using this configuration stanza:

Which problem is contained in this configuration?

The zonestatement is the BIND configuration must contain the cross-zone-data yes; statement.

The zone cannon contain records for a name which is outside the zone’s hierarchy.

The $ORIGINdeclaration cannot be used in zone files that are included for a specific zone name in the BIND configuration.

An A record cannot contain an IPv4 address because its value is supposed to be a reverse DNS name.

Names of records in a zone file cannot be fully qualified domain names.

77位 Which of the following statements in the ISC DHCPD configuration is used to specify whether or not an address pool can be used by nodes which have a corresponding host section in the configuration?

identified-nodes

unconfigured-hosts

missing-peers

unmatched-hwaddr

unknown-clients

NO.78 To allow X connections to be forwarded from or through an SSH server, what configuration keyword must be set to yesin the sshdconfiguration file?

AllowForwarding

ForwardingAllow

XllForwardingAllow

XllForwarding

Explanation/Reference: https://help.ubuntu.com/community/SSH/OpenSSH/Configuring

NO.79 What is the path to the global Postfix configuration file? (Specify the full name of the file, including path.)

/etc/postfix/main.cf
説明する：
The global Postfix configuration file is located at /etc/postfix/main.cf. This file contains the main parameters that control the behavior of the Postfix mail server. It is a plain text file that consists of parameter-value pairs, comments, and blank lines. The syntax of the file is as follows:
parameter = value
commentThe parameter names are case-insensitive, and the values can be enclosed in quotes if they contain spaces or special characters. The values can also reference other parameters by using the $parameter syntax.
The file can be edited manually or by using the postconf command. The postconf command can also be used to display the current values of the parameters, or to set new values. For example:
postconf -d # display default values of all parameters postconf -n # display non-default values of all parameters postconf -e ‘parameter = value’ # set a new value for a parameter The main.cf file is read by Postfix when it starts or reloads. To reload Postfix after making changes to the file, use the command:
postfix reload
参考文献
LPIC-2 Exam 202 Objectives, Objective 205.3: Managing a postfix server
Postfix Basic Configuration, Postfix Documentation
Postfix Configuration Parameters, Postfix Documentation
How do I change postfix configuration after installing it?, Server Fault What are the Configuration Files for Postfix, The Geek Search

NO.80 Which of the following lines is valid in a configuration file in /etc/pam.d/?

auth required pam_unix.so try_first_pass nullok

auth try_first_pass nullok, require pam_unix.so

auth required:pam_unix.so(try_first_pass nullok)

auth pam_unix.so(required try_first_pass nullok)

Explanation/Reference: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/ managing_smart_cards/pam_configuration_files

NO.81 If there is no access directive, what is the default setting for OpenLDAP?
A:

B:

C:

D:

option A

option B

option C

option D

NO.82 Fill in the blank.
Which directive in a Nginx server configuration block defines the TCP ports on which the virtual host will be available, and which protocols it will use?
(Specify ONLY the option name without any values.)

listen

第83位 Using its standard configuration, how does fail2ban block offending SSH clients?

By rejecting connections due to its role as a proxy in front of SSHD.

By modifying and adjusting the SSHD configuration.

By creating and maintaining netfilter rules.

By creating null routes that drop any answer packets sent to the client.

By modifying and adjusting the TCP Wrapper configuration for SSHD.

説明
Fail2ban is a tool that monitors the system logs for failed login attempts and blocks the offending IP addresses using netfilter rules. Netfilter is a framework that provides packet filtering, network address translation, and other functions for the Linux kernel. Fail2ban uses the iptables command to manipulate the netfilter rules and create chains of rules that match the source IP address of the attacker and drop or reject the packets from that IP address. Fail2ban can also use other firewall tools, such as firewalld or ufw, to create the netfilter rules.
Fail2ban can block the IP addresses for a specified amount of time, or permanently, depending on the configuration. Fail2ban can protect various services, such as SSH, HTTP, FTP, etc., by creating different jails for each service. A jail is a set of parameters that define how to monitor a log file, how to detect a failed login attempt, how to ban an IP address, and how long to keep the ban.
Fail2ban does not block offending SSH clients by any of the other options. It does not act as a proxy in front of SSHD, nor does it modify the SSHD configuration. It does not create null routes that drop any answer packets sent to the client, nor does it modify the TCP Wrapper configuration for SSHD.
参考文献
How To Protect SSH with Fail2Ban on Ubuntu 20.04
How To Prevent SSH Brute Force Attacks Using Fail2ban In Linux
Fail2ban – Wikipedia
Fail2ban Manual

NO.84 CORRECT TEXT
Which directive in a Nginx server configuration block defines the TCP ports on which the virtual host will be available, and which protocols it will use? (Specify ONLY the option name without any values.)

listen

NO.85 Which Apache HTTPD configuration directive is used to specify the method of authentication, e.g. None or Basic?

AuthUser

AllowedAuthUser

AuthType

AllowAuth

説明
The AuthType directive is used to specify the method of authentication for a directory or a location on the Apache HTTPD server. The directive has four possible values: None, Basic, Digest, and Form. Each value corresponds to a different module that implements the authentication mechanism.
None: This value means that no authentication is required. This is the default value and it can be used to override any inherited authentication settings.
Basic: This value means that the basic authentication method is used. This method is implemented by the mod_auth_basic module. It requires the user to enter a username and a password, which are sent to the server in plain text. Therefore, this method is not very secure and should be used with encryption, such as SSL or TLS.
Digest: This value means that the digest authentication method is used. This method is implemented by the mod_auth_digest module. It requires the user to enter a username and a password, which are hashed by the client and the server using a nonce (a random number) and a realm (a name for the protected area). Therefore, this method is more secure than the basic method, as it prevents replay attacks and password sniffing.
Form: This value means that the form authentication method is used. This method is implemented by the mod_auth_form module. It requires the user to fill out a web form with their credentials, which are sent to the server using the POST method. Therefore, this method is more flexible and user-friendly than the other methods, as it allows the use of custom forms and cookies.
参考文献
AuthType Directive
Authentication and Authorization – Apache HTTP Server Version 2.4
How to Create and Use .htpasswd

NO.86 Which of the following PAM modules sets and unsets environment variables?

pam_set

pam_shell

pam-vars

pam-env

pam_export

説明
The PAM module that sets and unsets environment variables is pam_env. This module allows the (un)setting of environment variables based on the rules specified in the configuration file /etc/security/pam_env.conf or an alternative file. The module can also read a file with simple KEY=VAL pairs on separate lines (/etc/environment by default) or a user-specific file ($HOME/.pam_environment by default). The pam_env module supports the use of previously set environment variables as well as PAM_ITEMs such as PAM_RHOST. The pam_env module should be the last one on the stack, as setting PAM environment variables can have side effects on other modules. The pam_env module provides the auth and session module types. References:
pam_env – PAM module to set/unset environment variables
pam_env(8) – Linux manual page

87位 What is the purpose of DANE?

Verify the integrity of name information retrieved via DNS.

Allow secure dynamic DNS updates.

Invalidate name information stored on caching name servers to speed up DNS updates.

Discover which servers within a DNS domain offer a specific service.

Provide a way to verify the association of X 509 certificates to DNS host names.

説明
DANE stands for DNS-based Authentication of Named Entities. It is a protocol that provides a way to verify the association of X 509 certificates to DNS host names. X 509 certificates are digital documents that contain the public key and identity information of an entity, such as a web server or an email server. They are used to establish secure connections and authenticate the identity of the entity. However, the traditional way of obtaining and validating X 509 certificates relies on a hierarchical system of trusted third parties, called certificate authorities (CAs), which can be vulnerable to attacks or compromise. DANE aims to enhance the security and trust of X 509 certificates by using DNSSEC, which is a set of extensions to DNS that provide cryptographic signatures and validation for DNS records. DANE allows the owner of a domain name to publish the X 509 certificate or its fingerprint in a DNS record, called a TLSA record, which can be verified by the DNSSEC chain of trust. This way, the client can check the authenticity of the certificate directly from the DNS, without relying on external CAs. DANE can also be used to specify which CAs are authorized to issue certificates for a domain name, or to indicate that no CA is needed at all. DANE can be applied to various protocols that use X 509 certificates, such as HTTPS, SMTP, IMAP, POP3, etc.
参考文献
DANE – Wikipedia
DNS-Based Authentication of Named Entities (DANE) – Internet Society
DANE: Taking TLS Authentication to the Next Level Using DNSSEC

NO.88 Given the following Squid configuration excerpt:
cache_dir ufs /var/spool/squid3/ 1024 16 256
Which of the following directories will exist directly within the directory /var/spool/squid3/? (Choose two.)

89位 After running ssh-keygenand accepting the default values, which of the following files are changed or created? (Choose two.)

~/.ssh/id_rsa.key

~/.ssh/id_rsa.pub

~/.ssh/id_rsa.prv

~/.ssh/id_rsa.crt

~/.ssh/id_rsa

Explanation/Reference: https://www.ssh.com/ssh/keygen/

NO.90 Which of the following services belongs to NFSv4 and does not exist in NFSv3?

rpc.idmapd

rpc.statd

nfsd

rpc.mountd

説明
The rpc.idmapd service is a new component of NFSv4 that does not exist in NFSv3. It is responsible for mapping user and group IDs between the NFS client and server, using string names instead of numeric values.
This allows for better security and compatibility across different systems. The rpc.idmapd service runs on both the NFS client and server and communicates with each other using the NFSv4 protocol. The other services, rpc.statd, nfsd, and rpc.mountd, are common to both NFSv3 and NFSv4, although they have some differences in functionality and behavior. References: 1, 2, 3

NO.91 Which global option in squid.confsets the port number or numbers that Squid will use to listen for client requests?

port

client_port

http_port

server_port

squid_port

ローディング …

The LPIC-2 Exam 202, Part 2 of 2, version 4.5 is a computer-based exam that consists of 60 multiple-choice and fill-in-the-blank questions. Candidates are given 90 minutes to complete the exam, and they must achieve a score of at least 500 out of 800 to pass. 202-450 exam is available in English, German, Portuguese, Spanish, and Japanese languages.

BEST Verified Lpi 202-450 Exam Questions (2024) : https://www.examboosts.com/Lpi/202-450-practice-exam-dumps.html