[Jan-2022] Use Real 202-450 Dumps Free Sample Questions and Practice Test Engine
Pass Lpi 202-450 exam - questions - convert Tets Engine to PDF
Topic 6: System Security
The examinees should be able to customize a system in order to forward an IP packet as well as execute network address translation (including IP masquerading & NAT). The applicants should also possess the skills in configuring an FTP server for anonymous uploads downloads. The topic also covers their competency in precautions that are to be taken in case anonymous uploads are allowed. Moreover, they should be proficient in configuring and securing an SSH daemon. This subject area also involves your skills in handling keys and customizing SSH for the users. You need to possess the capacity to forward an application protocol over SSH as well as handle the SSH login. You are required to have proficiency in receiving security alerts from different sources, installing, customizing, and operating intrusion detection systems. The individuals need to be capable of applying security patches & bugfixes. Lastly, it is essential that one possesses the expertise in customizing VPN and creating secure site-to-site or point-to-point connections.
NEW QUESTION 32
Which of the following commands can be used to connect and interact with remote TCP network services?
(Choose two.)
- A. telnet
- B. cat
- C. nettalk
- D. nc
- E. netmap
Answer: A,D
NEW QUESTION 33
In order to protect a directory on an Apache HTTPD web server with a password, this configuration was added to an .htaccessfile in the respective directory:
Furthermore, a file /var/www/dir/ .htpasswdwas created with the following content:
usera:S3cr3t
Given that all these files were correctly processed by the web server processes, which of the following statements is true about requests to the directory?
- A. The web server delivers the content of the directory without requesting authentication
- B. Accessing the directory as useraraises HTTP error code 442 (User Not Existent)
- C. The browser prompts the visitor for a username and password but logins for userado not seem to work
- D. The user useracan access the site using the password s3cr3t
- E. Requests are answered with HTTP error code 500 (Internal Server Error)
Answer: D
NEW QUESTION 34
In order to protect a directory on an Apache HTTPD web server with a password, this configuration was added to an .htaccess file in the respective directory:
Furthermore, a file /var/www/dir/ .htpasswd was created with the following content:
usera:S3cr3t
Given that all these files were correctly processed by the web server processes, which of the following statements is true about requests to the directory?
- A. The web server delivers the content of the directory without requesting authentication
- B. The browser prompts the visitor for a username and password but logins for usera do not seem to work
- C. Requests are answered with HTTP error code 500 (Internal Server Error)
- D. The user usera can access the site using the password s3cr3t
- E. Accessing the directory as usera raises HTTP error code 442 (User Not Existent)
Answer: D
NEW QUESTION 35
Which Apache HTTPD configuration directive is used to specify the method of authentication, e.g. None or Basic?
- A. AuthUser
- B. AuthType
- C. AllowedAuthUser
- D. AllowAuth
Answer: B
NEW QUESTION 36
Which of the following DNS records could be a glue record?
- A. ns1.A198.51.100.53
- B. ns1.labA198.51.100.53
- C. labNS198.51.100.53
- D. ns1.labGLUE198.51.100.53
- E. ns1.labNS198.51.100.53
Answer: B
NEW QUESTION 37
Which Apache HTTPD configuration directive is used to specify the method of authentication, e.g. Noneor Basic?
- A. AuthUser
- B. AuthType
- C. AllowedAuthUser
- D. AllowAuth
Answer: B
Explanation:
Explanation
Explanation/Reference: https://httpd.apache.org/docs/2.4/howto/auth.html
NEW QUESTION 38
A user requests a "hidden" Sambashare, named confidential, similar to the Windows Administration Share. How can this be configured?
- A.
- B.
- C.
- D.
- E.
Answer: A
NEW QUESTION 39
What does the samba-tool testparmcommand confirm regarding the Samba configuration?
- A. The service operates as expected.
- B. The netfilter configuration on the Samba server does not block any access to the services defined in the configuration.
- C. The configuration loads successfully.
- D. All running Samba processes use the most recent configuration version.
- E. The Samba services are started automatically when the system boots.
Answer: C
Explanation:
Explanation/Reference:
Reference: https://www.samba.org/samba/docs/current/man-html/testparm.1.html
NEW QUESTION 40
Which of the statements below are correct regarding the following commands, which are executed on a Linux router? (Choose two.)
- A. The rules suppress any automatic configuration through router advertisements or DHCPv6
- B. Packets with source or destination addresses from fe80::/64 will never occur in the FORWARD chain
- C. ip6tables returns an error for the second command because the affected network is already part of another rule
- D. Both ip6tables commands complete without an error message or warning
- E. The rules disable packet forwarding because network nodes always use addresses from fe80::/64 to identify routers in their routing tables
Answer: A,D
NEW QUESTION 41
In which CIFS share must printer drivers be placed to allow Point'n'Print driver deployment on Windows?
- A. The name of the share is specified in the option print driver share within each printable share in smb.
- B. winx64drv$
- C. print$
- D. NETLOGON
- E. conf pnpdrivers$
Answer: C
NEW QUESTION 42
What is DNSSEC used for?
- A. Secondary DNS queries for local zones
- B. Encrypting DNS queries and answers
- C. Authentication of the user that initiated the DNS query
- D. Cryptographic authentication of DNS zones
- E. Encrypted DNS queries between nameservers
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION 43
For what purpose is TCP/IP stack fingerprinting used by nmap?
- A. It is used to masquerade the responses of remote servers.
- B. It is used to identify duplicate responses from the same remote server.
- C. It is used to filter out responses from specific servers.
- D. It is used to uniquely identify servers on the network for forensics.
- E. It is used to determine the remote operating system.
Answer: E
Explanation:
Explanation/Reference:
Reference: https://nmap.org/nmap-fingerprinting-old.html
NEW QUESTION 44
It has been discovered that the company mail server is configured as an open relay. Which of the following actions would help prevent the mail server from being used as an open relay while maintaining the possibility to receive company mails? (Choose two.)
- A. Restrict Postfix to only relay outbound SMTP from the internal network
- B. Restrict Postfix to only accept e-mail for domains hosted on this server
- C. Configure netfilter to not permit port 25 traffic on the public network
- D. Upgrade the mailbox format from mbox to maildir
- E. Configure Dovecot to support IMAP connectivity
Answer: A,C
Explanation:
Explanation/Reference:
NEW QUESTION 45
What does the samba-tool testparm command confirm regarding the Samba configuration?
- A. The service operates as expected.
- B. The netfilter configuration on the Samba server does not block any access to the services defined in the configuration.
- C. The configuration loads successfully.
- D. All running Samba processes use the most recent configuration version.
- E. The Samba services are started automatically when the system boots.
Answer: C
NEW QUESTION 46
FILL BLANK
What is the name of the root element of the LDAP tree holding the configuration of an OpenLDAP server that is using directory based configuration? (Specify ONLY the element's name without any additional information.)
Answer:
Explanation:
slapd
NEW QUESTION 47
Which keyword is used in the Squid configuration to define networks and times used to limit access to the service?
- A. http_allow
- B. acl
- C. allow
- D. permit
Answer: B
Explanation:
Explanation
Explanation/Reference: https://www.tecmint.com/configure-squid-server-in-linux/
NEW QUESTION 48
Which of the following commands displays an overview of the Postfix queue content to help identify remote sites that are causing excessive mail traffic?
- A. postmap
- B. queuequery
- C. mailtraf
- D. poststats
- E. qshape
Answer: E
NEW QUESTION 49
Which statements about the Alias and Redirect directives in Apache HTTPD's configuration file are true?
(Choose two.)
- A. Alias is handled on the server side
- B. Redirect is handled on the client side
- C. Alias is not a valid configuration directive
- D. Redirect works with regular expressions
- E. Alias can only reference files under DocumentRoot
Answer: A,B
NEW QUESTION 50
......
Pass Your 202-450 Exam Easily - Real 202-450 Practice Dump Updated Jan 04, 2022: https://www.practicedump.com/202-450_actualtests.html
2022 Realistic Verified Free Lpi 202-450 Exam Questions : https://drive.google.com/open?id=1XFONeFdzvFjqsBihlXLY5RzbaPp7Sg38