Lpi 202-450 問題集

質問 1：
In order to export /usr and /bin via NFSv4, /exports was created and contains working bind mounts to /usr and
/bin. The following lines are added to /etc/exports on the NFC server:

After running
Explanation
mount-tnfsv4 server://mnt
of an NFC-Client, it is observed that /mnt contains the content of the server's /usr directory instead of the content of the NFSv4 foot folder.
Which option in /etc/exports has to be changed or removed in order to make the NFSv4 root folder appear when mounting the highest level of the server? (Specify ONLY the option name without any values or parameters.)
正解：
fsid
The fsid option in /etc/exports is used to specify a unique identifier for each exported filesystem.
For NFSv4, there is a distinguished filesystem which is the root of all exported filesystems, and it is specified with fsid=root or fsid=0, both of which mean the same thing. If this option is used for the /exports directory, then it will be the root of the NFSv4 hierarchy, and any subdirectories under it will be mounted relative to it. This means that when mounting the highest level of the server, the client will see the content of /exports instead of the NFSv4 root folder. To avoid this, the fsid option should be removed or changed to a different value for the /exports directory, so that it is not the NFSv4 root. The other options in /etc/exports are not relevant for this question.

質問 2：
What is the purpose of DANE?
A. Provide a way to verify the association of X 509 certificates to DNS host names.
B. Allow secure dynamic DNS updates.
C. Invalidate name information stored on caching name servers to speed up DNS updates.
D. Discover which servers within a DNS domain offer a specific service.
E. Verify the integrity of name information retrieved via DNS.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Which command is used to administer IPv6 netfilter rules?
A. iptables6
B. iptablesv6
C. ipv6tables
D. ip6tables
E. iptables
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
The following Apache HTTPD configuration has been set up to create a virtual host available at www.example.com and www2.example.com:

Even though Apache HTTPD correctly processed the configuration file, requests to both names are not handled correctly. What should be changed in order to ensure correct operations?
A. Only one Server name declaration may exist, but additional names can be declared in ServerAlias options.
B. Both virtual host names have to be placed as comma separated values in one ServerName declaration.
C. Both virtual host names have to be mentioned in the opening VirtualHost tag.
D. The port mentioned in opening VirtualHost tag has to be appended to the ServerName declaration's values.
E. The configuration must be split into two VirtualHost sections since each virtual host may only have one name.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
What configuration directive of the Apache HTTPD server defines where log files are stored?
(Specify ONE of the directives without any other options.)
正解：
ErrorLog
Explanation:
The ErrorLog directive of the Apache HTTPD server defines the location and name of the file where the server will log any errors it encounters. The default value of this directive is logs/error_log, which means that the error log file will be stored in the logs subdirectory of the server root directory. The ErrorLog directive can also accept a filename relative to the server root, an absolute filename, or a pipe to a program that will handle the logging. For example, ErrorLog logs/my_error_log will store the error log file in the logs subdirectory with the name my_error_log, ErrorLog /var/log/httpd/error_log will store the error log file in the /var/log/httpd directory with the name error_log, and ErrorLog "|bin/rotatelogs logs/error_log 86400" will pipe the error log to the rotatelogs program that will rotate the log file every 86400 seconds. References: Log Files - Apache HTTP Server Version 2.4, Directive Quick Reference - Apache HTTP Server Version 2.4, How do I find Apache http server log files? - Code A Site Blog, mod_log_config - Apache HTTP Server Version 2.2

質問 6：
According to the configuration below, what is the full e-mail address of the administrator for this domain?

正解：
[email protected]
Explanation:
According to the configuration, the postmaster address is set to [email protected]. This means that any system-generated messages or notifications sent to the administrator of this domain will use this address as the sender. The postmaster address is also used to receive messages from external senders who need to contact the administrator for any reason, such as reporting spam or abuse. The postmaster address is a mandatory requirement for any mail server, as specified by the RFC 5321 standard. References:
LPIC-2 exam 202 objectives, topic 207.3, Manage the postfix mail system RFC 5321, section 4.5.1, Postmaster Role

質問 7：
Select the alternative that shows the correct way to disable a user login for all users except root.
A. The use of the pam_block module along with the /etc/login configuration file.
B. The use of the pam_nologin module along with the /etc/nologin configuration file.
C. The use of the pam_pwdb module along with the /etc/pwdv.conf configuration file.
D. The use of the pam_deny module along with the /etc/deny configuration file.
正解：B
解説: (Topexam メンバーにのみ表示されます)