2022 Update LPIC-2 Exam 202-450 Actual Test Questions

test2022-03-01T06:14:22+00:00

To become LPIC-2 certified,you should pass both 201 and 202 exams, the latest 202-450 questions and answers are new updated recently. Are you preparing for LPIC-2 202-450 exam now? FreeTestShare 100% real 202-450 dumps cover 100% real exam questions and answers to help you pass the 202-450 exam fast! Here are 202-450 actual exam questions with correct answers for you to test yourself! Get started now!

Page 1 of 3

1. There is a restricted area in a site hosted by Apache HTTPD, which requires users to authenticate against the file /srv/www/security/sitepasswd.

Which command is used to CHANGE the password of existing users, without losing data, when Basic authentication is being used?

htpasswd Cc /srv/www/security/sitepasswd user

htpasswd /srv/www/security/sitepasswd user

htpasswd Cn /srv/www/security/sitepasswd user

htpasswd CD /srv/www/security/sitepasswd user

2. Which of the following statements is true regarding the NFSv4 pseudo file system on the NFS server?

It must be called /exports

It usually contains bind mounts of the directory trees to be exported

It must be a dedicated partition on the server

It is defined in the option Nfsv4-Root in /etc/pathmapd.conf

It usually contains symlinks to the directory trees to be exported

3. Which of these tools provides DNS information in the following format?

dig

nslookup

host

named-checkconf

named-checkzone

4. CORRECT TEXT

What is the path to the global Postfix configuration file? (Specify the full name of the file, including path.)

5. What is the name of the Dovecot configuration variable that specifies the location of user mail?

mbox

mail_location

user_dir

maildir

user_mail_dir

6. Which of the following are logging directives in Apache HTTPD? (Choose two.)

TransferLog

CustomLog

ErrorLog

ServerLog

VHostLog

7. What information can be found in the file specified by the status parameter in an OpenVPN server configuration file? (Choose two.)

Errors and warnings generated by the openvpn daemon

Routing information

Statistical information regarding the currently running openvpn daemon

A list of currently connected clients

A history of all clients who have connected at some point

8. With fail2ban, what is a ‘jail’?

A netfilter rules chain blocking offending IP addresses for a particular service

A group of services on the server which should be monitored for similar attack patterns in the log files

A filter definition and a set of one or more actions to take when the filter is matched

The chroot environment in which fail2ban runs

9. Which Apache HTTPD configuration directive is used to specify the method of authentication, e.g. None or Basic?

AuthUser

AllowedAuthUser

AuthType

AllowAuth

10. CORRECT TEXT

Which doveadm sub-command displays a list of connections of Dovecot in the following format? (Specify ONLY the command without any parameters.)

Page 2 of 3

11. To which destination will a route appear in the Linux routing table after activating IPv6 on a router’s network interface, even when no global IPv6 addresses have been assigned to the interface?

fe80::/10

0::/128

0::/0

fe80::/64

2000::/3

12. Which FTP names are recognized as anonymous users in vsftp when the option anonymous_enable is set to yes in the configuration files? (Choose two.)

anonymous

ftp

In the described configuration, any username which neither belongs to an existing user nor has another special meaning is treated as anonymous user.

nobody

guest

13. Which of the following nmap parameters scans a target for open TCP ports? (Choose two.)

-sO

-sZ

-sT

-sU

-sS

14. Which Apache HTTPD configuration directive specifies the RSA private key that was used in the generation of the SSL certificate for the server?

SSLCertificateKeyFile

SSLKeyFile

SSLPrivateKeyFile

SSLRSAKeyFile

15. Which option within the ISC DHCPD configuration file defines the IPv4 DNS server address(es) to be sent to the DHCP clients?

domain-name-servers

domain-server

name-server

servers

16. Which of the following statements is INCORRECT regarding the LDIF file format?

It contains a dn line that indicates where the attributes listed in the following lines of the file must be added.

In the file, a blank line separates one entry from another one.

If an attribute contains binary data, some specific configurations must be made for this entry.

The LDIF file accepts any type of file encoding.

17. Which of the following information has to be submitted to a certification authority in order to request a web server certificate?

The web server’s private key.

The IP address of the web server.

The list of ciphers supported by the web server.

The web server’s SSL configuration file.

The certificate signing request.

18. Which of the following lines is valid in a configuration file in /etc/pam.d/?

authrequired pam_unix.sotry_first_pass nullok

authtry_first_pass nullok, require pam_unix.so

authrequired:pam_unix.so(try_first_pass nullok)

authpam_unix.so(required try_first_pass nullok)

19. In response to a certificate signing request, a certification authority sent a web server certificate along with the certificate of an intermediate certification authority that signed the web server certificate.

What should be done with the intermediate certificate in order to use the web server certificate with Apache HTTPD?

The intermediate certificate should be merged with the web server’s certificate into one file that is specified in SSLCertificateFile

The intermediate certificate should be used to verify the certificate before its deployment on the web server and can be deleted

The intermediate certificate should be stored in its own file which is referenced in SSLCaCertificateFile

The intermediate certificate should be improved into the certificate store of the web browser used to test the correct operation of the web server

The intermediate certificate should be archived and resent to the certification authority in order to request a renewal of the certificate

20. CORRECT TEXT

In order to specify alterations to an LDAP entry, what keyword is missing from the following LDIF file excerpt?

Specify the keyword only and no other information.

Page 3 of 3

21. A BIND server should be upgraded to use TSIG.

Which configuration parameters should be added if the server should use the algorithm hmac-md5 and the key skrKc4DoTzi/takIlPi7JZA==?

Option A

Option B

Option C

Option D

Option E

22. What is the standard port used by OpenVPN?

1723

4500

500

1194

23. After running ssh-keygen and accepting the default values, which of the following files are changed or created? (Choose two.)

~/.ssh/id_rsa.key

~/.ssh/id_rsa.pub

~/.ssh/id_rsa.prv

~/.ssh/id_rsa.crt

~/.ssh/id_rsa

24. CORRECT TEXT

Which option in the Postfix configuration makes Postfix pass email to external destinations to another SMTP-server? (Specify ONLY the option name without any values.)

25. CORRECT TEXT

According to this LDIF excerpt, which organizational unit is Robert Smith part of? (Specify only the organizational unit.)

26. When the default policy for the netfilter INPUT chain is set to DROP, why should a rule allowing traffic to localhost exist?

All traffic to localhost must always be allowed

It doesn’t matter; netfilter never affects packets addressed to localhost

Some applications use the localhost interface to communicate with other applications

syslogd receives messages on localhost

The iptables command communicates with the netfilter management daemon netfilterd on localhost to create and change packet filter rules

27. Which BIND option should be used to limit the IP addresses from which slave name servers may connect?

allow-zone-transfer

allow-transfer

allow-secondary

allow-slaves

allow-queries

28. Which of the following statements allow the logical combinations of conditions in Sieve filters? (Choose two.)

allof

anyof

noneof

and

29. Which of the following authentication mechanisms are supported by Dovecot? (Choose three.)

ldap

digest-md5

cram-md5

plain

krb5

30. In order to prevent all anonymous FTP users from listing uploaded file names, what security precaution can be taken when creating an upload directory?

The directory must not have the execute permission set.

The directory must not have the read permission set.

The directory must not have the read or execute permission set.

The directory must not have the write permission set.

The directory must not contain other directories.