Lpi LPIC-3 Exam 300: Mixed Environments, version 1.0

QUESTION NO: 1
It is desired to restrict access to the IPC$ share to one specific machine. The setting hosts allow
192.168.0.3 is added to the share configuration. Later it is discovered that other workstations may still access it. What setting was forgotten in the share configuration?

A. hosts deny = 255.255.255.255/32 B. deny hosts = 0.0.0.0/0 C. deny hosts = 255.255.255.255/32 D. hosts deny = 0.0.0.0/0

Correct Answer: D

QUESTION NO: 2
Which of the following commands sets up Samba 4 as an Active Domain Directory Controller for a new domain?

A. samba-tool domain provision B. net ads prepare domain C. smbcontrol dcpromo D. samldap-domainadd

Correct Answer: A

QUESTION NO: 3
Fill in the blank.
Which Samba command allows the management and manipulation of NT Quotas on samba file shares?
(Specify ONLY the command without any path or parameters.)

Correct Answer:

smbcquotas

QUESTION NO: 4
Which directive in the smb.conf of a Samba 4 Active Directory Domain Controller specifies the name of the Active Directory Domain? (Specify only the option without any values or parameters)

Correct Answer:

realm

QUESTION NO: 5
After adding a remote CIFS share to /etc/fstab, the share is mounted to the correct location in the file system. There, all files belong to the user and group root and are not readable or writable by any other users on the system. What should be done in order to permit distinct local user access to the mounted files?

A. The user should be added to the local user group smbusers, as mount.cifs by default restricts access to all CIFS mounts to member of this group in addition to the root account. B. The mount.cifs command should always be executed by user who will use the mount afterwards. The user should be granted the required permission in /etc/sudoers. C. The mount.cifs options uid, gid, file_mode and dir_mode should be used to specify the ownership and permissions of the mount. D. The option root squash = yes should be added to the share in the Samba server's smb.conf to allow full access by the client.

Correct Answer: A

QUESTION NO: 6
Enter the FOUR parameters (in the correct order) to be set in the name resolve order directive to use the following name resolution order? (Enter only the parameter names with space between them)
1. Use lmhosts file entries
2. Use a server specified in the 'wins server' directive
3. Use broadcast
4. Use default DNS lookup

Correct Answer:

lmhosts wins bcast host

QUESTION NO: 7
The log level parameter in smb.conf should normally not be set higher than 2 becausE.

A. most Samba administrators cannot understand the information presented at higher log levels. B. credentials supplied by the user are logged, which poses a security risk. C. the server flushes the log file after each operation, which affects overall performance. D. the increased verbosity has a negative impact on network bandwidth.

Correct Answer: C

QUESTION NO: 8
Which of the following commands add a forward DNS record named fileserver01 pointing to the IPv6 address 2001: db8: : 190 into the DNS zone samba.private on the Samba 4 server dc1?

A. net dns -S dc1 -U Administrator addrecord fileserver01.samba.private AAAA 2001: db8: : 190 B. samba-dns dynupdate -S dc1 -U Administrator -h fileserver01.samba.private -t AAAA -V 2001: db8: :
190 C. samba-tool dns add dc1 samba.private fileserver01 AAAA 2001: db8: : 190 -U Administrator D. nsupdatesmb -U Administrator //dc1/samba.private/fileserver01 add AAAA 2001: db8: : 190

Correct Answer: C

QUESTION NO: 9
In order to generate individual logfiles for machines connecting to Samba, which of the following statements have to be used in the Samba configuration file?

A. log file = /var/log/samba/log.%M B. log file = /var/log/samba/log.%c C. log file = /var/log/samba/log.%m D. log file = /var/log/samba/log.%I

Correct Answer: C

QUESTION NO: 10
Which of the following procedures will test the TLS configuration of an OpenLDAP server?

A. Run the slapcat command, while watching network traffic with a packet analyzer. B. Verify the TLS negotiation process in the /var/log/ldap_auth.log file. C. Run the ldapsearch command with the -ZZ option, while watching network traffic with a packet analyzer. D. Run the ldapsearch command with the -x option, while watching network traffic with a packet analyzer. E. Verify the TLS negotiation process in the /var/log/auth.log file.

Correct Answer: C

Lpi LPIC-3 Exam 300: Mixed Environments, version 1.0 - 300-100 Exam Questions