Get Prepared for Your 202-450 Exam With Actual 120 Questions
Valid 202-450 Test Answers Full-length Practice Certification Exams
NEW QUESTION # 63
Which of the following DNS record types is used for reverse DNS queries?
- A. IN
- B. REV
- C. RIN
- D. CNAME
- E. PTR
Answer: E
Explanation:
Explanation/Reference: http://help.dnsmadeeasy.com/managed-dns/dns-record-types/ptr-record/
NEW QUESTION # 64
Which of the following Samba configuration parameters is functionally identical to the parameter read only=yes?
- A. browseable=no
- B. read write=no
- C. write only=no
- D. writeable=no
- E. write access=no
Answer: D
NEW QUESTION # 65
In a BIND zone file, what does the @ character indicate?
- A. It's an alias for the e-mail address of the zone master
- B. It's used to create an alias between two CNAME entries
- C. It's the name of the zone as defined in the zone statement in named.conf
- D. It's the fully qualified host name of the DNS server
Answer: C
Explanation:
Explanation
In a BIND zone file, the @ character indicates the name of the zone as defined in the zone statement in named.conf. This is also known as the current origin of the zone file. The @ character is a shortcut that allows the zone file to refer to the zone name without typing it fully. For example, if the zone name is example.com, then the @ character can be used instead of example.com. in the zone file. This can save space and avoid typos123 References:
LPIC-2 Overview
LPIC-2 202-450
What's the meaning of '@' in a DNS zone file? - Server Fault
NEW QUESTION # 66
In order to protect a directory on an Apache HTTPD web server with a password, this configuration was added to an .htaccessfile in the respective directory:
Furthermore, a file /var/www/dir/ .htpasswdwas created with the following content:
usera:S3cr3t
Given that all these files were correctly processed by the web server processes, which of the following statements is true about requests to the directory?
- A. Requests are answered with HTTP error code 500 (Internal Server Error)
- B. The browser prompts the visitor for a username and password but logins for userado not seem to work
- C. The user useracan access the site using the password s3cr3t
- D. Accessing the directory as useraraises HTTP error code 442 (User Not Existent)
- E. The web server delivers the content of the directory without requesting authentication
Answer: C
NEW QUESTION # 67
Which attitude of an object in LDAP defines which other attributes can be set for the object?
(Specify ONLY the attribute name without any values.)
Answer:
Explanation:
class
NEW QUESTION # 68
Which of the following nmap parameters scans a target for open TCP ports? (Choose two.)
- A. -sZ
- B. -sS
- C. -sU
- D. -sT
- E. -sO
Answer: B,D
Explanation:
Explanation
The nmap command is a network exploration and security auditing tool that can scan hosts and networks for open ports, services, operating systems, vulnerabilities, and other information. The nmap parameters that can scan a target for open TCP ports are:
-sT: This parameter performs a TCP connect scan, which establishes a complete connection to the target host by completing a TCP three-way handshake. This is the default scan type when the user does not have root privileges. The advantage of this scan is that it works on any system that supports TCP, but the disadvantage is that it is easily detectable by firewalls and intrusion detection systems.
-sS: This parameter performs a TCP SYN scan, which sends a TCP SYN packet to the target port and waits for a response. If the response is a SYN/ACK packet, the port is open. If the response is a RST packet, the port is closed. This scan does not complete the TCP three-way handshake, so it is faster and stealthier than the TCP connect scan. However, this scan requires root privileges and may not work on some systems that do not follow the TCP standard.
The other parameters are not related to TCP port scanning:
-sO: This parameter performs an IP protocol scan, which sends IP packets with the specified protocol number set in the IP header. It can be used to determine which IP protocols are supported by the target host.
-sZ: This parameter is not a valid nmap parameter and will cause an error.
-sU: This parameter performs a UDP scan, which sends a UDP packet to the target port and waits for a response. If the response is an ICMP port unreachable message, the port is closed. If the response is a UDP packet, the port is open. This scan can be used to find open UDP ports, which are often used by DNS, SNMP, DHCP, and other services.
References: LPIC-2 202 exam objectives, LPIC-2 202-450 Exam Prep: Network Configuration, Nmap Tutorial: Common Commands, Nmap Scan Types Cybersecurity | Nmap | TCP Connect Scan | Codecademy
NEW QUESTION # 69
Which of the following information has to be submitted to a certification authority in order to request a web server certificate?
- A. The web server's private key.
- B. The IP address of the web server.
- C. The certificate signing request.
- D. The list of ciphers supported by the web server.
- E. The web server's SSL configuration file.
Answer: C
Explanation:
Explanation/Reference: https://help.ubuntu.com/lts/serverguide/certificates-and-security.html.en
NEW QUESTION # 70
The program vsftpd, running in a chroot jail, gives the following error:
Which of the following actions would fix the error?
- A. The file /etc/ld.so.conf in the root filesystem must contain the path to the appropriate lib directory in the chroot jail
- B. Copy the required library to the appropriate lib directory in the chroot jail
- C. Run the program using the command chroot and the option--static_libs
- D. Create a symbolic link that points to the required library outside the chroot jail
Answer: B
NEW QUESTION # 71
What configuration directive of the Apache HTTPD server defines where log files are stored?
(Specify ONE of the directives without any other options.)
Answer:
Explanation:
ErrorLog
NEW QUESTION # 72
In a PAM configuration file, which of the following is true about the required control flag?
- A. The success of the module is needed for the module-type facility to succeed. If it returns a failure, control is returned to the calling application
- B. The module is not critical and whether it returns success or failure is not important
- C. If the module returns failure, no more modules of the same type will be invoked
- D. If the module returns success, no more modules of the same type will be invoked
- E. The success of the module is needed for the module-type facility to succeed. However, all remaining modules of the same type will be invoked
Answer: E
Explanation:
Explanation
The required control flag means that the PAM module is essential for the authentication process. If the module fails, the whole authentication fails. However, unlike the requisite control flag, the required control flag does not stop the execution of the remaining modules of the same type. This allows the user to receive feedback from all the modules, such as password expiration warnings or account lockout messages.
References:
Linux Professional Institute LPIC-2 Exam 202-450 Objectives, Topic 211: System Security, Objective
211.2: Configuring PAM, Weight: 5
PAM Control Flags, System Administration Guide: Security Services, Oracle
10.2. About PAM Configuration Files, System-Level Authentication Guide, Red Hat Enterprise Linux 7, Red Hat Customer Portal
4. The Linux-PAM configuration file, SCO Group
NEW QUESTION # 73
Which of the following PAM modules allows the system administrator to use an arbitrary file containing a list of user and group names with restrictions on the system resources available to them?
- A. pam_unix
- B. pam_listfile
- C. pam_limits
- D. pam_filter
Answer: C
NEW QUESTION # 74
Which option within the ISC DHCPD configuration file defines the IPv4 DNS server address(es) to be sent to the DHCP clients?
- A. name-server
- B. domain-server
- C. servers
- D. domain-name-servers
Answer: D
Explanation:
Explanation
NEW QUESTION # 75
After the installation of Dovecot, it is observed that the dovecot processes are shown in ps ax like this:
In order to associate the processes with users and peers, the username, IP address of the peer and the connection status, which of the following options must be set?
- A. --with-linux-extprocnamesfor ./configurewhen building Dovecot
- B. verbose_proctitle = yesin the Dovecot configuration
- C. sys.ps.allow_descriptions = 1in sysct1.confor /proc
- D. proc.all.show_status = 1 in sysctl.confor /proc
- E. process_format = "%u %I %s"in the Dovecot configuration
Answer: B
NEW QUESTION # 76
Which Postfix command can be used to rebuild all of the alias database files with a single invocation and without the need for any command line arguments?
- A. postalias
- B. makealiases
- C. newaliases
- D. postmapbuild
Answer: C
NEW QUESTION # 77
Select the Samba option below that should be used if the main intention is to setup a guest printer service?
- A. security = cups
- B. security = share
- C. security = pam
- D. security = printing
- E. security = ldap
Answer: B
Explanation:
Explanation
The security option in the smb.conf file determines how Samba authenticates users who try to access its shares. The value of security = share means that Samba does not require a valid username and password for each connection, but only for each share. This allows users to access shares anonymously, without providing any credentials. This is useful for setting up a guest printer service, where anyone can print to a shared printer without logging in. However, this option is deprecated and not recommended for security reasons. The other options are either invalid or irrelevant for this question.
NEW QUESTION # 78
......
Accurate & Verified 2024 New 202-450 Answers As Experienced in the Actual Test!: https://exam-labs.exam4tests.com/202-450-pdf-braindumps.html