Updated Jan-2024 202-450 Free Exam Files Downloaded Instantly
Practice Exams and Training Solutions for Certifications
NEW QUESTION # 56
Which tool creates a Certificate Signing Request (CSR) for serving HTTPS with Apache HTTPD?
- A. openssl
- B. apachect1
- C. cartool
- D. certgen
- E. httpsgen
Answer: A
NEW QUESTION # 57
How must Samba be configured such that it can check CIFS passwords against those found in /etc/passwd and /etc/shadow?
- A. Set the parameters "encrypt passwords = yes", "password file = /etc/passwd" and
"password algorithm = crypt" - B. Set the parameters "encrypt passwords = yes" and "password file = /etc/passwd"
- C. Delete the smbpasswd file and create a symbolic link to the passwd and shadow file
- D. Run smbpasswd to convert /etc/passwd and /etc/shadow to a Samba password file
- E. It is not possible for Samba to use /etc/passwd and /etc/shadow directly
Answer: E
NEW QUESTION # 58
After running ssh-keygenand accepting the default values, which of the following files are changed or created? (Choose two.)
- A. ~/.ssh/id_rsa.key
- B. ~/.ssh/id_rsa
- C. ~/.ssh/id_rsa.pub
- D. ~/.ssh/id_rsa.prv
- E. ~/.ssh/id_rsa.crt
Answer: B,C
Explanation:
Explanation/Reference: https://www.ssh.com/ssh/keygen/
NEW QUESTION # 59
For what purpose is TCP/IP stack fingerprinting used by nmap?
- A. It is used to filter out responses from specific servers.
- B. It is used to masquerade the responses of remote servers.
- C. It is used to uniquely identify servers on the network for forensics.
- D. It is used to determine the remote operating system.
- E. It is used to identify duplicate responses from the same remote server.
Answer: D
NEW QUESTION # 60
What does the samba-tool testparmcommand confirm regarding the Samba configuration?
- A. The Samba services are started automatically when the system boots.
- B. The configuration loads successfully.
- C. The netfilter configuration on the Samba server does not block any access to the services defined in the configuration.
- D. The service operates as expected.
- E. All running Samba processes use the most recent configuration version.
Answer: B
Explanation:
Explanation/Reference:
Reference: https://www.samba.org/samba/docs/current/man-html/testparm.1.html
NEW QUESTION # 61
To allow X connections to be forwarded from or through an SSH server, what configuration keyword must be set to yesin the sshdconfiguration file?
AllowForwarding
- A. XllForwarding
- B. ForwardingAllow
- C. XllForwardingAllow
Answer: A
Explanation:
Explanation/Reference: https://help.ubuntu.com/community/SSH/OpenSSH/Configuring
NEW QUESTION # 62
Fill in the blank.
In order to specify alterations to an LDAP entry, what keyword is missing from the following LDIF file excerpt?
Specify the keyword only and no other information
Answer:
Explanation:
add
NEW QUESTION # 63
Which option in the Postfix configuration makes Postfix pass email to external destinations to another SMTP-server? (Specify ONLY the option name without any values.)
Answer:
Explanation:
relay server
NEW QUESTION # 64
Which of the following statements are true regarding Server Name Indication (SNI)? (Choose two.)
- A. It submits the host name of the requested URL during the TLS handshake.
- B. It allows multiple SSL/TLS secured virtual HTTP hosts to coexist on the same IP address.
- C. It supports transparent failover of TLS sessions from one web server to another.
- D. It enables HTTP servers to update the DNS of their virtual hosts' names using the X 509 certificates of the virtual hosts.
- E. It provides a list of available virtual hosts to the client during the TLS handshake.
Answer: A,B
Explanation:
Explanation
NEW QUESTION # 65
Which keyword is used in the Squid configuration to define networks and times used to limit access to the service?
- A. acl
- B. permit
- C. http_allow
- D. allow
Answer: A
Explanation:
Explanation
The keyword that is used in the Squid configuration to define networks and times used to limit access to the service is acl. The acl keyword stands for access control list, and it is used to create rules that match certain criteria, such as source or destination IP address, port number, URL, protocol, time, or user name. The acl keyword is followed by a name and a type, and optionally some arguments or a file name. For example, the following lines define two acl rules named localnet and daytime:
acl localnet src 192.168.0.0/16 # match local network acl daytime time 08:00-18:00 # match working hours The acl rules can then be used with other keywords, such as http_access, to allow or deny access to the Squid service based on the matching criteria. For example, the following line allows access to the Squid service only from the local network and only during working hours:
http_access allow localnet daytime
The acl keyword is one of the most important and versatile keywords in the Squid configuration, and it can be used to create complex and flexible access policies. For more information about the acl keyword and its types and arguments, you can refer to the following resources:
1: A Squid documentation page that explains the syntax and usage of the acl keyword and its types and arguments.
2: A Squid documentation page that provides examples of common acl rules and how to use them.
3: A Squid FAQ page that answers some frequently asked questions about acl rules and how they work.
NEW QUESTION # 66
What is the purpose of DANE?
- A. Invalidate name information stored on caching name servers to speed up DNS updates.
- B. Discover which servers within a DNS domain offer a specific service.
- C. Allow secure dynamic DNS updates.
- D. Provide a way to verify the association of X 509 certificates to DNS host names.
- E. Verify the integrity of name information retrieved via DNS.
Answer: D
Explanation:
Explanation/Reference: https://wiki.archlinux.org/index.php/DANE
NEW QUESTION # 67
The program vsftpd, running in a chroot jail, gives the following error:
Which of the following actions would fix the error?
- A. Run the program using the command chrootand the option--static_libs
- B. The file /etc/ld.so.confin the root filesystem must contain the path to the appropriate lib directory in the chroot jail
- C. Create a symbolic link that points to the required library outside the chroot jail
- D. Copy the required library to the appropriate libdirectory in the chroot jail
Answer: D
NEW QUESTION # 68
FILL BLANK
What is the name of the root element of the LDAP tree holding the configuration of an OpenLDAP server that is using directory based configuration? (Specify ONLY the element's name without any additional information.)
Answer:
Explanation:
slapd
NEW QUESTION # 69
Which FTP names are recognized as anonymous users in vsftp when the option anonymous_enable is set to yes in the configuration files? (Choose two.)
- A. anonymous
- B. In the described configuration, any username which neither belongs to an existing user nor has another special meaning is treated as anonymous user.
- C. guest
- D. ftp
- E. nobody
Answer: A,D
Explanation:
Explanation
The FTP names that are recognized as anonymous users in vsftpd when the option anonymous_enable is set to yes in the configuration file are anonymous and ftp. These are the default names that vsftpd accepts as valid anonymous users, and they can be used interchangeably. The anonymous user does not need to enter a password, but can optionally enter an email address as a password. The anonymous user has limited permissions and can only access the directory specified by the anon_root directive, which is usually /var/ftp or
/srv/ftp. The anonymous user can download files from the server, but cannot upload or modify files, unless the anon_upload_enable and anon_mkdir_write_enable directives are also set to yes.
The other options are not recognized as anonymous users in vsftpd. Option C is incorrect, because vsftpd will reject any username that does not belong to an existing user or an anonymous user. Option D is incorrect, because nobody is a system user that has no permissions and is not related to FTP. Option E is incorrect, because guest is not a valid FTP name, unless the guest_enable directive is set to yes, which will make all non-anonymous users log in as the guest_username, which is usually ftp.
References:
vsftpd.conf - config file for vsftpd
How To Set Up vsftpd for Anonymous Downloads on Ubuntu 16.04
How to Configure vsftpd FTP Server on CentOS 8
NEW QUESTION # 70
When are Sieve filters usually applied to an email?
- A. When the email is received by an SMTP smarthost
- B. When the email is sent to the first server by an MUA
- C. When the email is delivered to a mailbox
- D. When the email is retrieved by an MUA
- E. When the email is relayed by an SMTP server
Answer: C
NEW QUESTION # 71
FILL BLANK
According to this LDIF excerpt, which organizational unit is Robert Smith part of? (Specify only the organizational unit.)
Answer:
Explanation:
people
NEW QUESTION # 72
FILL BLANK
What configuration directive of the Apache HTTPD server defines where log files are stored? (Specify ONE of the directives without any other options.)
Answer:
Explanation:
ErrorLog
NEW QUESTION # 73
Which of the following OpenVPN configuration options makes OpenVPN forward network packets between VPN clients itself instead of passing the packets on to the Linux host which runs the OpenVPN server for further processing?
- A. client-pass
- B. client-to-client
- C. client-router
- D. inter-client-traffic
- E. grant-client-traffic
Answer: B
NEW QUESTION # 74
......
Q&As with Explanations Verified & Correct Answers: https://simplilearn.lead1pass.com/Lpi/202-450-practice-exam-dumps.html