117-202 Exam Training Practice Tests (Lpi LPI Level 2 Exam 202)]

Question 1

Where should the line: $TTL 86400 be placed in a BIND zone file?

A. As the first line of the zone file. B. In any zone file containing hints to the root servers. C. It is required just before any A records are defined. D. In the SOA record of the zone file.

Correct Answer: A

Question 2

Which records must be entered in a zone file in order to use "Round Robin Load Distribution" for a web server?

A. www.example.org. 60 IN A 192.168.1-3 B. www.example.org. 60 IN RR 192.168.1:3 C. www.example.org. 60 IN RR 192.168.1.1;192.168.1.2;192.168.1.3 D. www.example.org. 60 IN A 192.168.1.1;192.168.1.2;192.168.1.3 E. www.example.org. 60 IN A 192.168.1.1 www.example.org. 60 IN A 192.168.1.2 www.example.org. 60 IN A 192.168.1.3

Correct Answer: E

Question 3

The new file server is a member of the Windows domain "foo". Which TWO of the following configuration sections will allow members of the domain group "all" to read, write and execute files in "/srv/smb/data"?

A. [data] comment = data share path = /srv/smb/data write list = @foo+all force group = all create mask = 0550 directory mask = 0770 B. [data] comment = data share path = /srv/smb/data write list = @foo+all force group = @foo+all create mask = 0770 directory mask = 0770 C. [data] comment = data share path = /srv/smb/data write list = @foo+all force group = @foo+all create mask = 0550 directory mask = 0770 D. [data] comment = data share path = /srv/smb/data write list = @foo+all force group = @foo+all directory mask = 0770 E. [data] path = /srv/smb/data write list = @foo+all force group = @foo+all create mask = 0770 directory mask = 0770

Correct Answer: B,E

Question 4

When connecting to an SSH server for the first time, its fingerprint is received and stored in a file, which is located at:

A. ~/ .ssh/known_hosts B. ~/ .ssh/fingerprints C. ~/ .ssh/id_dsa.pub D. ~/ .ssh/id_dsa E. ~/ .ssh/gpg.txt

Correct Answer: A

Question 5

CORRECT TEXT
Instead of running the command echo 1 >/proc/sys/net/ipv4/ip_forward, the configuration setting is going to be added to /etc/sysctl.conf. What is the missing value in the configuration line below? (Please specify only the missing value)

Correct Answer:

net .ipv4.ip_forward

Question 6

To allow X connections to be forwarded from or through an SSH server, what configuration keyword must be set to yes in the sshd configuration file?

A. AllowForwarding B. ForwardingAllow C. X11ForwardingAllow D. X11Forwarding

Correct Answer: D

Question 7

In a PAM configuration file, which of the following is true about the sufficient control flag in the following line?
Auth sufficient pam_module.so

A. This PAM module is called if it is present, otherwise, further modules will be tried. B. If a previous required module fails, success of this module will be used to check if further modules in the stack should be tried. C. This module is sufficient to determine both success or failure of an authentication attempt and no other modules will need to be tried. D. Failure of this module will not be considered fatal and, if the module succeeds, success will be returned to the application immediately without considering and further modules.

Correct Answer: D

Question 8

CORRECT TEXT
The command ___________ -x foo will delete the user foo from the Samba database. (Specify the command only, no path information.)

Correct Answer:

smbpasswd

Question 9

Which of the following Linux services has support for only the Routing Information Protocol (RIP) routing protocol?

A. ipchains B. routed C. netfilter D. zebra E. gated

Correct Answer: B

Question 10

What is a significant difference between host and zone keys generated by dnssec-keygen?

A. Both host keys files ( .key/. private) contain a public and private key. B. Both zone key files ( .key/.private ) contain a public and private key. C. Zone Keys must always be generated if is used; host keys are optional D. Host Keys must always be generated if DNSSEC is used; zone keys are optional E. There is no difference.

Correct Answer: B

Question 11

Which option in named.conf specifies which hosts are permitted to ask for domain name information from the server?

A. allow-query B. accept-query C. allowed-hosts D. permit-query

Correct Answer: A

Question 12

On a newly-installed mail server with the IP address 10.10.10.1, ONLY local networks should be able to send email. How can the configuration be tested, using telnet, from outside the local network?

A. telnet 10.10.10.1 25
MAIL FROM<[email protected]>
RECEIPT TO:<[email protected]> B. telnet 10.10.10.1 25
HELO: bogus.example.com
RCPT FROM:<[email protected]>
MAIL TO:<[email protected]> C. telnet 10.10.10.1 25
HELLO bogus.example.com
MAIL FROM:<[email protected]>
RCPT TO:<[email protected]> D. telnet 10.10.10.1 25
RCPT FROM:[email protected]
MAIL TO:<[email protected]> E. telnet 10.10.10.1 25
HELO bogus.example.com
MAIL FROM:<[email protected]>
RCPT TO:<[email protected]>

Correct Answer: E

Question 13

CORRECT TEXT
What is the path to the global postfix configuration file? (Please specify the complete directory path and file name)

Correct Answer:

/etc/postfix/main.cf

Question 14

Which Apache directive is used to configure the main directory for the site, out of which it will serve documents?

A. UserDir B. Location C. ServerRoot D. DirectoryIndex E. DocumentRoot

Correct Answer: E

Question 15

You suspect that you are receiving messages with a forged From: address. What could help you find out where the mail is originating?

A. A dd the command 'FR-strlog' to the sendmail.cf file B. Run a filter in the aliases file that checks the originating address when mail arrives C. Look in the ReceiveD.and Message-ID.parts of the mail header D. Add the command 'define ('LOG_REAL_FROM') dnl' to the sendmail.mc file E. Install TCP wrappers, and log all connections on port 25

Correct Answer: C

Lpi LPI Level 2 Exam 202 - 117-202 Exam Practice Test