Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

LPI > LPIC-2 > Flashcards

LPIC-2 Flashcards

1
Q

what’s the purpose of an authoritative nameserver

A

holding zone data for domains

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

config dir of sendmail?

A

/etc/mail

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Apache2 SSL relevant options?

A

SSLEngine, SSLCertificateFile, SSLCertificateKeyFile, SSLCACertificateFile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

which kernel module is necessary for a DHCP server?

A

packet socket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What’s the name of the BIND package?

A

bind

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

You can configure a caching-only server in one of three ways. Name them.

A

forwarding only, full recursive or both (full recursive if forward fails)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

use kill(all) to reload the config of BIND

A

kill -s SIGHUP or killall -s SIGHUP named

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

fetch the current root zone file with dig

A

dig . ns @a.root-servers.net > db.cache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

name alternative DNS Servers

A

dnsmasq, djbdns and PowerDNS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

use “net” to join a domain with adminstrative user “adminuser”

A

net join member -U adminuser

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

which binary utility scans your smb.conf for errors?

A

/usr/bin/testparm

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

how to display the current status of samba connections?

A

/usr/bin/smbstatus

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

name the two daemons of samba

A

nmbd and smbd

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

where are the samba logfiles stored and which naming convention is used for client logs?

A

/var/log/samba

client logfiles are either named after their IP or name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

how would you connect to samba share “allusers” on 192.168.1.1 with username “foo” on command line?

A

smbclient “//192.168.1.1/allusers” -U foo

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

how would you show available shares on 192.168.1.1 via command line with user “bar”?

A

smbclient -L 192.168.1.1 -U bar

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

name smbclient’s option to provide user and pw from a file

A

-A

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

if you provide smbclient a auth file, which options does it have to contain and which permissions are necessary?

A

username, password, domain

0440 or 0600

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

configure your OpenVPN CA

A

./vars, ./clean-all, ./build-ca

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

create keys for OpenVPN Server and a client

A

./build-key-server, ./build-key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

how to build the diffie-hellman parameters for OpenVPN?

A

./build-dh

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

specify the file “ca.crt” related to OpenVPN

A

Copy to: server and all clients
Purpose: CA certificate
Secret: No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

specify the file “ca.key” related to OpenVPN

A

Copy to: Key signing machine only
Purpose: CA Key
Secret: yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

specify the file “dh1024.pem” related to OpenVPN

A

Copy to: server only
Purpose: Diffie Hellman parameters
Secret: No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

specify the file “server.crt” related to OpenVPN

A

Copy to: server only
Purpose: Server certificate
Secret: no

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

specify the file “server.key” related to OpenVPN

A

Copy to: server only
Purpose: Server key
Secret: yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

specify the file “client.crt” related to OpenVPN

A

Copy to: client only
Purpose: Client certificate
Secret: no

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

specify the file “client.key” related to OpenVPN

A

Copy to: Client only
Purpose: Client key
Secret: yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

which options of OpenVPN allows communication between different client networks?

A

client-to-client

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

on which port in OpenVPN listening?

A

1194 UDP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

advertise a 10.60.0.0/24 subnet to OpenVPN clients

A

push “route 10.60.0.0 255.255.255.0”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

build a point-to-point connection to remote IP 1.2.3.4 with device tun1, local IP 10.9.8.1 and remote 10.9.8.2

A

openvpn –remote 1.2.3.4 –dev tun1 –ifconfig 10.9.8.2 10.9.8.1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

do a dns lookup on google.com using the caching dns server of the local machine. Provide commands with dig, host and nslookup

A

dig google.com @127.0.0.1
host google.com 127.0.0.1
nslookup google.com 127.0.0.1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

name the 4 main daemons of djbdns

A

dnscache, tinydns, rbldns, axfrdns

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

TSIG?

A

Transaction SIGnature

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

which two commands are used to sign a zone file?

A

dnssec-keygen and dnssec-signzone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

which option is used to tell named to run in a chroot environment?

A

-t

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

In which directory are DNS zone files typically stored?

A

/var/named

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

which 3 options are necessary for squid in order to configure a ACL?

A

auth_param, acl, and http_access, proxy_auth

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

how to enable user web pages in apache?

A

UserDir

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

which two ways of apache can by used to serve virtual domains?

A

VirtualDocumentRoot and VirtualHost

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

name the option of apache to enable SSL

A

SSLEngine On

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

which option is used to force SSL for apache?

A

SSLRequireSSL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

This directive sets the directory where you keep the Certificates of Certification Authorities (CAs)

A

SSLCACertificatePath

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

This directive identifies the SSL certificate file

A

SSLCertificateFile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

show all configured vHosts

A

apachectl -t -D DUMP_VHOSTS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

create a RSA certificate

A

openssl req -new

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

create a RSA private key (server.key) with triple-des encryption and 2048 bit

A

openssl genrsa -des3 -out server.key 2048

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

create a CSR with server.key to server.csr

A

openssl req -new -key server.key -out server.csr

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

PAM management groups

A

auth, account, session, password

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

PAM control flags

A

requisite, required, sufficient, and optional

52
Q

which is the PAM configuration directory?

A

/etc/pam.d

53
Q

describe the PAM module pam_access.so

A

Mgmt Group: account
arguments: accessfile=
Desc: restricts access based on user, host, network name, IP or terminal

54
Q

describe the PAM module pam_cracklib.so

A

Mgmt Group: password
arguments: use_authtok
Dec: check password strength

55
Q

describe the PAM module pam_deny.so

A

Mgmt group: all

Desc: always indicates a failure

56
Q

describe the PAM module pam_echo.so

A

Mgmt group: all
arguments: file=
Desc: displays text for testmode logins

57
Q

describe the PAM module pam_env.so

A

Mgmt Group: auth, session

arguments: conffile, envfile
desc: set env variable

58
Q

describe the PAM module pam_limits.so

A

mgmt group: session

arguments: conf
desc: sets login session limits. if conf is not given, /etc/security/limits.conf is taken

59
Q

describe the PAM module pam_listfile.so

A

mgmt group: all

arguments: item, sense, file
desc: searches the specified filename

60
Q

describe the PAM module pam_mail.so

A

mgmt group: auth, session

arguments: dir
desc: display a message if the user has new mail

61
Q

describe the PAM module pam_mkhomedir.so

A

mgmt group: session

arguments: skel, umask
desc: create home directory

62
Q

describe the PAM module pam_motd.so

A

mgmt group: session

arguments: motd
desc: display motd

63
Q

name bug trackers

A

bugtraq, CERT, CIAC

64
Q

describe the PAM module pam_nologin.so

A

mgmt grou: auth, account

arguments: successok
desc: fails for all users but root and displays content of /etc/nologin

65
Q

describe the PAM module pam_securetty.so

A

mgmt group: auth

desc: fails if user root attempts to login from a device not listed in /etc/securetty

66
Q

describe the PAM module pam_selinux.so

A

mgmt group: session

arguments: various
desc: sets up the security enhanced linux context for the login

67
Q

describe the PAM module pam_stack.so

A

mgmt group: all

arguments: service
desc: calls an external stack

68
Q

describe the PAM module pam_unix.so

A

mgmt group: all

arguments: nullok, likeauth, shadow, try_first_pass, user_first_pass, use_authok
desc: performs traditional linux authentication based on passwd and shadow

69
Q

describe the PAM module pam_unix2.so

A

mgmt group: all

arguments: nullok, likeauth, shadow, try_first_pass, user_first_pass, use_authok
desc: similar to pam_unix.so, but implements additional features such as Network Information Service (NIS)

70
Q

which binary helps the user create an RSA key pair for SSH?

A

ssh-keygen

71
Q

which option tells netcat to do a portscan?

A

-z

72
Q

do a portscan with nmap on localhost

A

nmap -sT localhost

73
Q

what is OpenVAS?

A

The Open Vulnerability Assessment System (OpenVAS) is an open source framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.

74
Q

name 3 proxy servers

A

tinyproxy, squid, privoxy

75
Q

which option defines the port squid3 is listening on?

A

http_port

76
Q

name the 4 options of squid’s auth_param basic in order to maintaine an authentication

A

program, children, realm, credentialsttl

77
Q

windows clients sometimes can’t handle the subnet, that a linux DHCP server delivers. Which command can help?

A

route add -host 255.255.255.255 dev eth0

78
Q

name the option of DHCP to push the subnetmask 255.255.255.0

A

option subnet-mask 255.255.255.0;

79
Q

name the DHCP option to push 2 DNS servers

A

option domain-name-servers 172.27.15.2,10.72.81.2;

80
Q

which option of DHCP helps to resolve NetBIOS names?

A

option netbios-node-type 8;

81
Q

DHCP: declare a /24 subnet

A

subnet 10.60.10.0 netmask 255.255.255.0 { range 10.60.10.2 10.60.10.254; }

82
Q

which DHCP options is meant to check if a IP is free or not?

A

ping-check

83
Q

DHCP: declare a fixed IP address for client demo.example.com with MAC address 12:34:…

A

host demo.example.com { hardware ethernet 12:34:..; fixed_address 10.60.10.2; }

84
Q

LDAP: which two options define the path or path to a directory, in which a certificate can be found for secure communication?

A

TLS_CACERT, TLS_ CACERTDIR

85
Q

LDIF is an abbreviation for?

A

LDAP Data Interchange Format

86
Q

LDAP: which binary is used for encrypting passwords?

A

slappasswd

87
Q

LDAP: which binaries are used to add data from a ldif-file?

A

ldapadd / ldapmodify

88
Q

LDAP: which option for ldapadd (or ldapsearch) sets “dryrun”?

A

-n

89
Q

LDAP: which option for ldapadd (or ldapsearch) logs errors to a file?

A

-S

90
Q

LDAP: which option of slappasswd changes the hashing scheme? And which schemes are available?

A

-h, CRYPT, MD5, SMD5, SSHA, SHA

91
Q

LDAP: there’s a different way, to change a users password than with slappasswd and ldapmodify. name it.

A

ldappasswd

92
Q

LDAP: which binary deletes a user account?

A

ldapdelete

93
Q

LDAP: which binary display information about user accounts?

A

getent

94
Q

name the command to enable IP4-Forwarding for linux systems

A

echo “1” > /proc/sys/net/ipv4/ip_forward

95
Q

what’s pureftpd’s option, to accept only ipv4 or ipv6?

A

-4 or -6

96
Q

which option causes pureftpd to not chroot users of a specific group?

A

-a

97
Q

which option of pureftpd chroot’s everyone?

A

-A

98
Q

which option of pureftpd starts the server daemonized?

A

-B (background)

99
Q

which option of pureftpd only allows anonymous access?

A

-e

100
Q

which option of pureftpd disallow anonymous login?

A

-E

101
Q

which option of pureftpd disallows uploads by anonymous?

A

-i

102
Q

which option of pureftpd allows anonymous to create dirs?

A

-M

103
Q

which option of pureftpd is for NAT mode?

A

-N

104
Q

which option of pureftpd accepts only access for users above a psecific userid?

A

-u uid

105
Q

which option and value needs to be configured, to make vsftpd listen on the default port?

A

listen yes

106
Q

which option of vsftpd defines anonymous logins?

A

anonymous_enable

107
Q

which option of vsftpd defines the root dir of anoymous logins?

A

anon_root

108
Q

which option of vsftpd defines if local users are chrooted?

A

chroot_local_users

109
Q

which option of vsftpd (dis)allows users to up- or download files?

A

write_enable

110
Q

which option grants anonymous users to upload files with vsftpd?

A

anon_upload_enable

111
Q

where is the global procmail configuration located?

A

/etc/procmailrc

112
Q

explain the H-Flag of procmail

A

matching is done to the message headers

113
Q

explain the B-Flag of procmail

A

matching is done to the body

114
Q

explain the D-Flag of procmail

A

matching is done case-sensitive. default is not

115
Q

explain the c-Flag of procmail

A

Matching is done on a “carbon copy” of the message

116
Q

explain the w-Flag of procmail

A

Procmail waits for the action to complete

117
Q

explain the W-Flag of procmail

A

The same as a flag of w, but it suppresses program failure messages.

118
Q

which option of courier sets the address that the daemon should listen on?

A

ADDRESS

119
Q

which option of courier sets the port that the daemon should listen on?

A

PORT

120
Q

Courier: Limits the number of daemons

A

MAXDAEMONS

121
Q

Courier: Limits the number of simultaneous connections from a single client IP address

A

MAXPERIP

122
Q

Courier: Sets the name of the directory in which the server stores emails

A

MAILDIRPATH

123
Q

Dovecot: Specifies the protocols Dovecot should support

A

protocols

124
Q

Dovecot: Specifies whether each login launches its own process

A

login_process_per_ connection

125
Q

Dovecot: Sets the maximum number of Dovecot login processes

A

login_max_processes_count

126
Q

Dovecot: Sets the maximum number of connections per process if login_process_per_connection is set to no.

A

login_max_connections

127
Q

Dovecot: Specifies the location of the mbox files or maildir directories to be used for mail storage

A

mail_location

LPI (9 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions