Lpi LPIC-1 Exam 102, Part 2 of 2, version 5.0 (102-500日本語版) - 102-500日本語 Exam Practice Test
ユーザーのアカウントの有効期間情報を変更するために使用できるコマンドはどれですか。 （3つの正しい答えを選んでください。）
Correct Answer: A,B,C
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
次の getent 呼び出しのうち、既存のユーザーをすべて一覧表示するものはどれですか?
Correct Answer: A
どのファイルにユーザーのパスワードが最後に変更された日が含まれていますか？
Correct Answer: C
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
次のうちどれがXDMやKDMのようなディスプレイマネージャによって処理されるタスクですか？ （正しい答えを2つ選んでください。）
Correct Answer: D,E
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
system-journald を使用するシステムでは、次のコマンドのどれがシステム ログに Howdy メッセージを追加しますか? (正しい回答を 2 つ選択してください。)
Correct Answer: B,C
このシェルスクリプトのコードサンプルには、どのキーワードがありませんか。
____ iは* .txtです。行う
エコー$ i
終わった
____ iは* .txtです。行う
エコー$ i
終わった
Correct Answer: D
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
出力の時間枠を制限するために、journalctl で使用されるパラメータは次のどれですか? (正しい答えを 2 つ選択してください。)
Correct Answer: A,D
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
tcpd などの TCP ラッパー プログラムを経由してサーバーに接続できるサービスとホストのセットが含まれているファイルはどれですか? (パスを含むファイルの完全な名前を指定してください。)https://lh3.googleusercontent.com/-5cd-clmKnbk/AAAAAAAAAAI/AAAAAAAAADM/-SXesH19Ido/s46-ck-no/photo.jpg
Correct Answer:
etchostsallow
Explanation:
The /etc/hosts.allow file contains a set of rules that specify which services and hosts are allowed to connect to the server by going through a TCP Wrapper program such as tcpd. TCP Wrappers are a security mechanism that can filter incoming requests based on the source address, destination address, and service name. TCP Wrappers can also perform logging, redirection, and execution of commands based on the rules.
The /etc/hosts.allow file has the following format:
service_list : host_list [ : option_list ]
The service_list is a comma-separated list of service names, such as sshd, telnet, or ftp. The host_list is a comma-separated list of host names, IP addresses, or network masks that are allowed to access the services. The option_list is an optional list of keywords that can modify the behavior of the rule, such as twist, spawn, deny, or allow.
For example, the following rule in /etc/hosts.allow allows ssh access from any host in the 192.168.1.0/24 network, and logs the connection attempt:
sshd : 192.168.1.0/255.255.255.0 : spawn /bin/echo %a from %h attempted to access %d >> /var/log/sshd.log The /etc/hosts.allow file is processed before the /etc/hosts.deny file, which contains the rules for denying access to the server. If a request matches a rule in /etc/hosts.allow, it is granted access and the processing stops. If it does not match any rule in /etc/hosts.allow, it is checked against the rules in /etc/hosts.deny. If it matches a rule in /etc/hosts.deny, it is denied access and the processing stops. If it does not match any rule in either file, it is granted access by default.
Reference:
LPI 102-500 Exam Objectives, Topic 110.3: Implement host security
LPI 102-500 Study Guide, Chapter 10: Securing Your System, Section 10.3: TCP Wrappers hosts.allow man page
Explanation:
The /etc/hosts.allow file contains a set of rules that specify which services and hosts are allowed to connect to the server by going through a TCP Wrapper program such as tcpd. TCP Wrappers are a security mechanism that can filter incoming requests based on the source address, destination address, and service name. TCP Wrappers can also perform logging, redirection, and execution of commands based on the rules.
The /etc/hosts.allow file has the following format:
service_list : host_list [ : option_list ]
The service_list is a comma-separated list of service names, such as sshd, telnet, or ftp. The host_list is a comma-separated list of host names, IP addresses, or network masks that are allowed to access the services. The option_list is an optional list of keywords that can modify the behavior of the rule, such as twist, spawn, deny, or allow.
For example, the following rule in /etc/hosts.allow allows ssh access from any host in the 192.168.1.0/24 network, and logs the connection attempt:
sshd : 192.168.1.0/255.255.255.0 : spawn /bin/echo %a from %h attempted to access %d >> /var/log/sshd.log The /etc/hosts.allow file is processed before the /etc/hosts.deny file, which contains the rules for denying access to the server. If a request matches a rule in /etc/hosts.allow, it is granted access and the processing stops. If it does not match any rule in /etc/hosts.allow, it is checked against the rules in /etc/hosts.deny. If it matches a rule in /etc/hosts.deny, it is denied access and the processing stops. If it does not match any rule in either file, it is granted access by default.
Reference:
LPI 102-500 Exam Objectives, Topic 110.3: Implement host security
LPI 102-500 Study Guide, Chapter 10: Securing Your System, Section 10.3: TCP Wrappers hosts.allow man page
コマンドtest -e pathとtest -f pathの違いは何ですか？
Correct Answer: A
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
統合構成ファイルの代わりにいくつかの構成ファイルを使用する場合に、xinetdサービスを構成するファイルをどのディレクトリーに保管しますか？ （ディレクトリへのフルパスを指定してください。）
Correct Answer:
etcxinetddetcxinetdd
Explanation:
The /etc/xinetd.d/ directory holds the files that configure the xinetd service when using several configuration files instead of an integrated configuration file. Each file in this directory corresponds to a specific service that is managed by xinetd, such as telnet, ftp, ssh, etc. The name of the file matches the name of the service. The files in this directory contain service-specific options that override or supplement the global options defined in the /etc/xinetd.conf file. The files are read only when the xinetd service is started, so any changes require a restart of the service. The /etc/xinetd.d/ directory allows for a modular and flexible configuration of the xinetd service, as well as easier management and maintenance of the individual service files. Reference:
How to configure xinetd ? - Red Hat Customer Portal
Understanding /etc/xinetd.d directory under Linux
xinetd - Wikipedia
Explanation:
The /etc/xinetd.d/ directory holds the files that configure the xinetd service when using several configuration files instead of an integrated configuration file. Each file in this directory corresponds to a specific service that is managed by xinetd, such as telnet, ftp, ssh, etc. The name of the file matches the name of the service. The files in this directory contain service-specific options that override or supplement the global options defined in the /etc/xinetd.conf file. The files are read only when the xinetd service is started, so any changes require a restart of the service. The /etc/xinetd.d/ directory allows for a modular and flexible configuration of the xinetd service, as well as easier management and maintenance of the individual service files. Reference:
How to configure xinetd ? - Red Hat Customer Portal
Understanding /etc/xinetd.d directory under Linux
xinetd - Wikipedia