Question 1

In a BIND zone file, what does the @ character indicate?

Accepted Answer

A)  It's the fully qualified host name of the DNS server 
B)  It's an alias for the e-mail address of the zone master 
C)  It's the name of the zone as defined in the zone statement in named.conf It's the name of the zone as defined in the zone statement in named.conf 
D)  It's used to create an alias between two CNAME entries 
A)  It's the fully qualified host name of the DNS server 
B)  It's an alias for the e-mail address of the zone master 
C)  It's the name of the zone as defined in the zone statement in named.conf It's the name of the zone as defined in the zone statement in named.conf 
D)  It's used to create an alias between two CNAME entries

Question 2

Fill in the blank. Which directive in a Nginx server configuration block defines the TCP ports on which the virtual host will be available, and which protocols it will use? (Specify ONLY the option name without any values.)

Accepted Answer

The answer of Fill in the blank. Which directive in...

Question 3

Which of the following OpenVPN configuration options makes OpenVPN forward network packets between VPN clients itself instead of passing the packets on to the Linux host which runs the OpenVPN server for further processing?

Accepted Answer

A)  inter-client-traffic 
B)  client-to-client 
C)  client-router 
D)  client-pass 
E)  grant-client-traffic 
A)  inter-client-traffic 
B)  client-to-client 
C)  client-router 
D)  client-pass 
E)  grant-client-traffic

Question 4

Fill in the blank. What command creates a SSH key pair? (Specify ONLY the command without any path or parameters)

Accepted Answer

The answer of Fill in the blank. What command creates...

Question 5

A host, called lpi , with the MAC address 08:00:2b:4c:59:23 should always be given the IP address of 192.168.1.2 by a DHCP server running ISC DHCPD. Which of the following configurations will achieve this?

Accepted Answer

A)    
B)    
C)  host lpi = 08:00:2b:4c:59:23 192.168.1.2 
D)    
E)    
A)    
B)    
C)  host lpi = 08:00:2b:4c:59:23 192.168.1.2 
D)    
E)

Question 6

Which of the following statements allow the logical combinations of conditions in Sieve filters?

Accepted Answer

A)  allof 
B)  anyof 
C)  noneof 
D)  and 
E)  or 
A)  allof 
B)  anyof 
C)  noneof 
D)  and 
E)  or

Question 7

Which of the following DNS records could be a glue record?

Accepted Answer

A)  ns1.lab        A    198.51.100.53 
B)  lab            NS    198.51.100.53 
C)  ns1.lab        NS    198.51.100.53 
D)  ns1.            A    198.51.100.53 
E)  ns1.lab        GLUE    198.51.100.53 
A)  ns1.lab        A    198.51.100.53 
B)  lab            NS    198.51.100.53 
C)  ns1.lab        NS    198.51.100.53 
D)  ns1.            A    198.51.100.53 
E)  ns1.lab        GLUE    198.51.100.53

Question 8

A user requests a "hidden" Samba share, named confidential , similar to the Windows Administration Share. How can this be configured?

Accepted Answer

A)    
B)    
C)    
D)    
E)    
A)    
B)    
C)    
D)    
E)

Question 9

Which tool creates a Certificate Signing Request (CSR) for serving HTTPS with Apache HTTPD?

Accepted Answer

A)  apachect1 
B)  certgen 
C)  cartool 
D)  httpsgen 
E)  openssl 
A)  apachect1 
B)  certgen 
C)  cartool 
D)  httpsgen 
E)  openssl

Question 10

Which Apache HTTPD configuration directive specifies the RSA private key that was used in the generation of the SSL certificate for the server?

Accepted Answer

A)  SSLCertificateKeyFile 
B)  SSLKeyFile 
C)  SSLPrivateKeyFile 
D)  SSLRSAKeyFile 
A)  SSLCertificateKeyFile 
B)  SSLKeyFile 
C)  SSLPrivateKeyFile 
D)  SSLRSAKeyFile

Question 11

In order to prevent all anonymous FTP users from listing uploaded file names, what security precaution can be taken when creating an upload directory?

Accepted Answer

A)  The directory must not have the execute permission set. 
B)  The directory must not have the read permission set. 
C)  The directory must not have the read or execute permission set. 
D)  The directory must not have the write permission set. 
E)  The directory must not contain other directories. 
A)  The directory must not have the execute permission set. 
B)  The directory must not have the read permission set. 
C)  The directory must not have the read or execute permission set. 
D)  The directory must not have the write permission set. 
E)  The directory must not contain other directories.

Question 12

Which of the following DNS record types is used for reverse DNS queries?

Accepted Answer

A)  CNAME 
B)  IN 
C)  PTR 
D)  REV 
E)  RIN 
A)  CNAME 
B)  IN 
C)  PTR 
D)  REV 
E)  RIN

Question 13

Which option within the ISC DHCPD configuration file defines the IPv4 DNS server address(es) to be sent to the DHCP clients?

Accepted Answer

A)  domain-name-servers 
B)  domain-server 
C)  name-server 
D)  servers 
A)  domain-name-servers 
B)  domain-server 
C)  name-server 
D)  servers

Question 14

Which statements about the Alias and Redirect directives in Apache HTTPD's configuration file are true?

Accepted Answer

A)  Alias can only reference files under DocumentRoot Alias can only reference files under DocumentRoot 
B)  Redirect works with regular expressions Redirect works with regular expressions 
C)  Redirect is handled on the client side is handled on the client side 
D)  Alias is handled on the server side is handled on the server side 
E)  Alias is not a valid configuration directive is not a valid configuration directive 
A)  Alias can only reference files under DocumentRoot Alias can only reference files under DocumentRoot 
B)  Redirect works with regular expressions Redirect works with regular expressions 
C)  Redirect is handled on the client side is handled on the client side 
D)  Alias is handled on the server side is handled on the server side 
E)  Alias is not a valid configuration directive is not a valid configuration directive

Question 15

With fail2ban, what is a 'jail'?

Accepted Answer

A)  A netfilter rules chain blocking offending IP addresses for a particular service 
B)  A group of services on the server which should be monitored for similar attack patterns in the log files 
C)  A filter definition and a set of one or more actions to take when the filter is matched 
D)  The chroot environment in which fail2ban runs 
A)  A netfilter rules chain blocking offending IP addresses for a particular service 
B)  A group of services on the server which should be monitored for similar attack patterns in the log files 
C)  A filter definition and a set of one or more actions to take when the filter is matched 
D)  The chroot environment in which fail2ban runs

Question 16

Which of these tools, without any options, provides the most information when performing DNS queries?

Accepted Answer

A)  dig 
B)  nslookup 
C)  host 
D)  named-checkconf 
E)  named-checkzone 
A)  dig 
B)  nslookup 
C)  host 
D)  named-checkconf 
E)  named-checkzone

Question 17

Which of the following lines is valid in a configuration file in /etc/pam.d/?

Accepted Answer

A)  auth        required pam_unix.so    try_first_pass nullok 
B)  auth        try_first_pass nullok, require pam_unix.so 
C)  auth        required:pam_unix.so(try_first_pass nullok) 
D)  auth        pam_unix.so(required try_first_pass nullok) 
A)  auth        required pam_unix.so    try_first_pass nullok 
B)  auth        try_first_pass nullok, require pam_unix.so 
C)  auth        required:pam_unix.so(try_first_pass nullok) 
D)  auth        pam_unix.so(required try_first_pass nullok)

Question 18

Which of these tools provides DNS information in the following format?

Accepted Answer

A)  dig 
B)  nslookup 
C)  host 
D)  named-checkconf 
E)  named-checkzone 
A)  dig 
B)  nslookup 
C)  host 
D)  named-checkconf 
E)  named-checkzone

Question 19

Which configuration parameter on a Postfix server modifies only the sender address and not the recipient address?

Accepted Answer

A)  alias_maps 
B)  alias_rewrite_maps 
C)  sender_canonical_maps 
D)  sender_rewrite_maps 
A)  alias_maps 
B)  alias_rewrite_maps 
C)  sender_canonical_maps 
D)  sender_rewrite_maps

Question 20

Which BIND option should be used to limit the IP addresses from which slave name servers may connect?

Accepted Answer

A)  allow-zone-transfer 
B)  allow-transfer 
C)  allow-secondary 
D)  allow-slaves 
E)  allow-queries 
A)  allow-zone-transfer 
B)  allow-transfer 
C)  allow-secondary 
D)  allow-slaves 
E)  allow-queries

In a BIND zone file, what does the @ character indicate?

Fill in the blank. Which directive in a Nginx server configuration block defines the TCP ports on which the virtual host will be available, and which protocols it will use? (Specify ONLY the option name without any values.)

Which of the following OpenVPN configuration options makes OpenVPN forward network packets between VPN clients itself instead of passing the packets on to the Linux host which runs the OpenVPN server for further processing?

Fill in the blank. What command creates a SSH key pair? (Specify ONLY the command without any path or parameters)

A host, called lpi , with the MAC address 08:00:2b:4c:59:23 should always be given the IP address of 192.168.1.2 by a DHCP server running ISC DHCPD. Which of the following configurations will achieve this?

Which of the following statements allow the logical combinations of conditions in Sieve filters?

Which of the following DNS records could be a glue record?

A user requests a "hidden" Samba share, named confidential , similar to the Windows Administration Share. How can this be configured?

Which tool creates a Certificate Signing Request (CSR) for serving HTTPS with Apache HTTPD?

Which Apache HTTPD configuration directive specifies the RSA private key that was used in the generation of the SSL certificate for the server?

In order to prevent all anonymous FTP users from listing uploaded file names, what security precaution can be taken when creating an upload directory?

Which of the following DNS record types is used for reverse DNS queries?

Which option within the ISC DHCPD configuration file defines the IPv4 DNS server address(es) to be sent to the DHCP clients?

Which statements about the Alias and Redirect directives in Apache HTTPD's configuration file are true?

With fail2ban, what is a 'jail'?

Which of these tools, without any options, provides the most information when performing DNS queries?

Which of the following lines is valid in a configuration file in /etc/pam.d/?

Which of these tools provides DNS information in the following format?

Which configuration parameter on a Postfix server modifies only the sender address and not the recipient address?

Which BIND option should be used to limit the IP addresses from which slave name servers may connect?

Entry Level Linux Essentials Certificate of Achievement

Linux Essentials Certificate Exam, version 1.6

LPI Level 1 Exam 101, Junior Level Linux Certification, Part 1 of 2

LPIC-1 Exam 101

LPI Level 1 Exam 102, Junior Level Linux Certification, Part 2 of 2

LPI Level 1

LPIC-2 Exam 201

LPIC-3 Exam 300: Mixed Environments

Security

LPIC-3 Virtualization & High Availability

LPIC-OT Exam 701: DevOps Tools Engineer

Filters

Exam 8: LPIC-2 Exam 202

In a BIND zone file, what does the @ character indicate?

Fill in the blank. Which directive in a Nginx server configuration block defines the TCP ports on which the virtual host will be available, and which protocols it will use? (Specify ONLY the option name without any values.)

Which of the following OpenVPN configuration options makes OpenVPN forward network packets between VPN clients itself instead of passing the packets on to the Linux host which runs the OpenVPN server for further processing?

Fill in the blank. What command creates a SSH key pair? (Specify ONLY the command without any path or parameters)

A host, called lpi , with the MAC address 08:00:2b:4c:59:23 should always be given the IP address of 192.168.1.2 by a DHCP server running ISC DHCPD. Which of the following configurations will achieve this?

Which of the following statements allow the logical combinations of conditions in Sieve filters?

Which of the following DNS records could be a glue record?

A user requests a "hidden" Samba share, named confidential , similar to the Windows Administration Share. How can this be configured?

Which tool creates a Certificate Signing Request (CSR) for serving HTTPS with Apache HTTPD?

Which Apache HTTPD configuration directive specifies the RSA private key that was used in the generation of the SSL certificate for the server?

In order to prevent all anonymous FTP users from listing uploaded file names, what security precaution can be taken when creating an upload directory?

Which of the following DNS record types is used for reverse DNS queries?

Which option within the ISC DHCPD configuration file defines the IPv4 DNS server address(es) to be sent to the DHCP clients?

Which statements about the Alias and Redirect directives in Apache HTTPD's configuration file are true?

With fail2ban, what is a 'jail'?

Which of these tools, without any options, provides the most information when performing DNS queries?

Which of the following lines is valid in a configuration file in /etc/pam.d/?

Which of these tools provides DNS information in the following format?

Which configuration parameter on a Postfix server modifies only the sender address and not the recipient address?

Which BIND option should be used to limit the IP addresses from which slave name servers may connect?

Entry Level Linux Essentials Certificate of Achievement

Linux Essentials Certificate Exam, version 1.6

LPI Level 1 Exam 101, Junior Level Linux Certification, Part 1 of 2

LPIC-1 Exam 101

LPI Level 1 Exam 102, Junior Level Linux Certification, Part 2 of 2

LPI Level 1

LPIC-2 Exam 201

LPIC-3 Exam 300: Mixed Environments

Security

LPIC-3 Virtualization & High Availability

LPIC-OT Exam 701: DevOps Tools Engineer

Filters