Lpi 202-450試験情報と無料練習テスト問題で合格せよ
2024年最新のの問題202-450問題集で更新されたLpi試験問題集を試そう
LPIC-2試験202、パート2/2、バージョン4.5は、LPIC-2認定トラックの2番目の部分です。 LPIC-2試験201の認定または別の組織からの同等の認定をすでに保持しているIT専門家を対象としています。この試験では、ネットワークサービス、セキュリティ、パフォーマンスチューニングの管理など、高度なシステム管理タスクを実行する候補者の能力をテストします。
質問 # 19
On a Linux router, packet forwarding for IPv4 has been enabled. After a reboot, the machine no longer forwards IP packets from other hosts. The command:
echo 1 > /proc/sys/net/ipv4/ip_forward
temporarily resolves this issue.
Which one of the following options is the best way to ensure this setting is saved across system restarts?
- A. Add echo 1 > /proc/sys/net/ipv4/ip_forward to the root user login script
- B. In /etc/sysconfig/iptables-config add ipv4.ip_forward = 1
- C. In /etc/rc.local add net.ipv4.ip_forward = 1
- D. Add echo 1 > /proc/sys/net/ipv4/ip_forward to any user login script
- E. In /etc/sysct1.conf change net.ipv4.ip_forward to 1
正解：E
解説：
Explanation
The /etc/sysct1.conf file is used to configure kernel parameters at runtime. The net.ipv4.ip_forward parameter controls whether IP packet forwarding is enabled for IPv4. Setting it to 1 enables packet forwarding, while setting it to 0 disables it. This setting is applied at boot time and persists across system restarts. The other options are either incorrect or temporary solutions that do not survive a reboot. References: LPIC-2 201 exam objectives, LPIC-2 201-450 Exam Prep: Network Configuration
質問 # 20
Which OpenLDAP client command can be used to change the password for an LDAP entry?
(Specify ONLY the command without any path or parameters.)
正解：
解説：
ldappasswd
Explanation:
The ldappasswd command is an OpenLDAP client tool that can be used to change the password for an LDAP entry. It can be used to change the password of the user who is binding to the LDAP server, or the password of another user if the bind user has sufficient privileges. The ldappasswd command requires the user to specify the LDAP server location, the bind DN and password, the old password, and the new password. The old and new passwords can be given on the command line, through prompts, or from files. The ldappasswd command can also use SASL authentication mechanisms instead of simple authentication. The ldappasswd command follows the general syntax of:
ldappasswd [options] [user]
where user is the DN of the entry whose password is to be changed. If omitted, the bind DN is used.
References:
LPIC-2 Exam 202 Objectives, Objective 207.3: LDAP Operations
How To Change Account Passwords on an OpenLDAP Server, DigitalOcean
ldappasswd: change the password of an LDAP entry, openldap-clients Manual Page How To Change an OpenLDAP Password, Tyler's Guides
質問 # 21
Which of the following PAM modules sets and unsets environment variables?
- A. pam_export
- B. pam-vars
- C. pam_shell
- D. pam_set
- E. pam-env
正解：E
解説：
Explanation
The PAM module that sets and unsets environment variables is pam_env. This module allows the (un)setting of environment variables based on the rules specified in the configuration file /etc/security/pam_env.conf or an alternative file. The module can also read a file with simple KEY=VAL pairs on separate lines (/etc/environment by default) or a user-specific file ($HOME/.pam_environment by default). The pam_env module supports the use of previously set environment variables as well as PAM_ITEMs such as PAM_RHOST. The pam_env module should be the last one on the stack, as setting PAM environment variables can have side effects on other modules. The pam_env module provides the auth and session module types. References:
pam_env - PAM module to set/unset environment variables
pam_env(8) - Linux manual page
質問 # 22
What is the path to the global Postfix configuration file? (Specify the full name of the file, including path.)
正解：
解説：
/etc/postfix/main.cf
質問 # 23
Which command is used to configure which file systems a NFS server makes available to clients?
- A. telinit
- B. nfsservct1
- C. mkfs.nfs
- D. exportfs
- E. mount
正解：D
解説：
Explanation
The command exportfs is used to configure which file systems a NFS server makes available to clients. The exportfs command maintains a table of exported file systems in the /etc/exports file, which specifies the directories to be shared and the options for each host or network. The exportfs command can also be used to add, remove, or refresh the exported file systems without restarting the NFS service123 References:
8.6. Configuring the NFS Server - Red Hat Customer Portal
How to configure NFS on Linux - Learn Linux Configuration
How to configure Network File System on Linux | Enable Sysadmin
質問 # 24
In order to protect a directory on an Apache HTTPD web server with a password, this configuration was added to an .htaccessfile in the respective directory:
Furthermore, a file /var/www/dir/ .htpasswdwas created with the following content:
usera:S3cr3t
Given that all these files were correctly processed by the web server processes, which of the following statements is true about requests to the directory?
- A. The web server delivers the content of the directory without requesting authentication
- B. The browser prompts the visitor for a username and password but logins for userado not seem to work
- C. The user useracan access the site using the password s3cr3t
- D. Requests are answered with HTTP error code 500 (Internal Server Error)
- E. Accessing the directory as useraraises HTTP error code 442 (User Not Existent)
正解：C
質問 # 25
Which statements about the Alias and Redirect directives in Apache HTTPD's configuration file are true?
(Choose two.)
- A. Redirect works with regular expressions
- B. Alias is handled on the server side
- C. Alias is not a valid configuration directive
- D. Redirect is handled on the client side
- E. Alias can only reference files under DocumentRoot
正解：B、D
解説：
Explanation
The Alias and Redirect directives in Apache HTTPD's configuration file have different purposes and effects.
The Alias directive maps a URL path to a file system path, allowing the server to serve content that is not under the DocumentRoot. The Redirect directive instructs the client to make a new request with a different URL, which can be used to redirect requests to another server or location. The Redirect directive can use either a fixed URL or a regular expression to match and replace the original URL.
The difference between Alias and Redirect is that Alias is handled on the server side, meaning that the client does not see the file system path that the server uses to serve the content. The Redirect directive is handled on the client side, meaning that the client sees the new URL that the server sends back as a response. The client then makes a new request with the new URL, which may or may not be handled by the same server.
Therefore, the correct statements are C and D. Statement A is false because Alias can reference files outside of the DocumentRoot. Statement B is false because RedirectMatch is the directive that works with regular expressions, not Redirect. Statement E is false because Alias is a valid configuration directive.
References:
mod_alias - Apache HTTP Server Version 2.4
How to Redirect a Web Page with Apache - W3docs
質問 # 26
In a PAM configuration file, which of the following is true about the required control flag?
- A. If the module returns success, no more modules of the same type will be invoked
- B. The success of the module is needed for the module-type facility to succeed. If it returns a failure, control is returned to the calling application
- C. The module is not critical and whether it returns success or failure is not important
- D. The success of the module is needed for the module-type facility to succeed. However, all remaining modules of the same type will be invoked
- E. If the module returns failure, no more modules of the same type will be invoked
正解：D
質問 # 27
In response to a certificate signing request, a certification authority sent a web server certificate along with the certificate of an intermediate certification authority that signed the web server certificate. What should be done with the intermediate certificate in order to use the web server certificate with Apache HTTPD?
- A. The intermediate certificate should be archived and resent to the certification authority in order to request a renewal of the certificate
- B. The intermediate certificate should be merged with the web server's certificate into one file that is specified in SSLCertificateFile
- C. The intermediate certificate should be improved into the certificate store of the web browser used to test the correct operation of the web server
- D. The intermediate certificate should be used to verify the certificate before its deployment on the web server and can be deleted
- E. The intermediate certificate should be stored in its own file which is referenced in SSLCaCertificateFile
正解：B
解説：
Explanation
When using a web server certificate that is signed by an intermediate certification authority, the web server must also send the intermediate certificate to the client browser, so that the browser can verify the whole chain of trust. To do this, the web server must have both the web server certificate and the intermediate certificate in one file, which is specified in the SSLCertificateFile directive of Apache HTTPD. This way, the web server can send both certificates to the client in one response. The order of the certificates in the file is important: the web server certificate must come first, followed by the intermediate certificate. The file can be created by concatenating the two certificates with a text editor or the cat command. References:
LPIC-2 202 exam objectives, topic 218.1: Implementing HTTPS
Apache HTTPD documentation, section: SSLCertificateFile Directive
How to install an Intermediate SSL Certificate on Apache
質問 # 28
Which of the following options are valid in /etc/exports? (Choose two.)
- A. norootsquash
- B. ro
- C. rw
- D. uid
- E. rootsquash
正解：B、C
質問 # 29
Which of the following statements allow the logical combinations of conditions in Sieve filters? (Choose two.)
- A. anyof
- B. or
- C. allof
- D. and
- E. noneof
正解：A、C
解説：
Explanation
Sieve is a programming language used to filter emails by writing simple rules. To combine multiple conditions in a Sieve filter, you can use the allof or anyof keywords. The allof keyword means that all of the conditions must be true for the filter to apply, while the anyof keyword means that at least one of the conditions must be true. For example, the following Sieve filter will assign the label "Important" to any message that is from
"[email protected]" or has the subject "Urgent":
if anyof (header :contains "From" "[email protected]", header :contains "Subject" "Urgent") { fileinto
"Important"; }
The following Sieve filter will assign the label "Spam" to any message that is not from
"[email protected]" and has the subject "Free offer":
if allof (not header :contains "From" "[email protected]", header :contains "Subject" "Free offer") { fileinto "Spam"; } References: You can learn more about Sieve filters and logical combinations from the following sources:
Sieve filter (advanced custom filters) | Proton
RFC 5228 - Sieve: An Email Filtering Language
質問 # 30
What is the path to the global Postfix configuration file? (Specify the full name of the file, including path.)
正解：
解説：
/etc/postfix/main.cf
Explanation:
The global Postfix configuration file is located at /etc/postfix/main.cf. This file contains the main parameters that control the behavior of the Postfix mail server. It is a plain text file that consists of parameter-value pairs, comments, and blank lines. The syntax of the file is as follows:
parameter = value
commentThe parameter names are case-insensitive, and the values can be enclosed in quotes if they contain spaces or special characters. The values can also reference other parameters by using the $parameter syntax.
The file can be edited manually or by using the postconf command. The postconf command can also be used to display the current values of the parameters, or to set new values. For example:
postconf -d # display default values of all parameters postconf -n # display non-default values of all parameters postconf -e 'parameter = value' # set a new value for a parameter The main.cf file is read by Postfix when it starts or reloads. To reload Postfix after making changes to the file, use the command:
postfix reload
References:
LPIC-2 Exam 202 Objectives, Objective 205.3: Managing a postfix server
Postfix Basic Configuration, Postfix Documentation
Postfix Configuration Parameters, Postfix Documentation
How do I change postfix configuration after installing it?, Server Fault What are the Configuration Files for Postfix, The Geek Search
質問 # 31
Which of the following information has to be submitted to a certification authority in order to request a web server certificate?
- A. The IP address of the web server.
- B. The web server's private key.
- C. The certificate signing request.
- D. The web server's SSL configuration file.
- E. The list of ciphers supported by the web server.
正解：C
解説：
Explanation/Reference: https://help.ubuntu.com/lts/serverguide/certificates-and-security.html.en
質問 # 32
If there is no access directive, what is the default setting for OpenLDAP?
- A. Option D
- B. Option A
- C. Option C
- D. Option B
正解：D
質問 # 33
What does the samba-tool testparmcommand confirm regarding the Samba configuration?
- A. The service operates as expected.
- B. The configuration loads successfully.
- C. The netfilter configuration on the Samba server does not block any access to the services defined in the configuration.
- D. The Samba services are started automatically when the system boots.
- E. All running Samba processes use the most recent configuration version.
正解：B
解説：
Explanation/Reference: https://www.samba.org/samba/docs/current/man-html/testparm.1.html
質問 # 34
The Samba configuration file contains the following lines:
A workstation is on the wired network with an IP address of 192.168.1.177 but is unable to access the Samba server. A wireless laptop with an IP address 192.168.2.93 can access the Samba server. Additional trouble shooting shows that almost every machine on the wired network is unable to access the Samba server.
Which alternate host allowdeclaration will permit wired workstations to connect to the Samba server without denying access to anyone else?
- A. host deny = 192.168.1.100/255.255.255.0 192.168.2.31 localhost
- B. host allow = 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 localhost
- C. host allow = 192.168.1.1-255
- D. host allow = 192.168.1.100 192.168.2.200 localhost
- E. host deny = 192.168.2.200/255.255.255.0 192.168.2.31 localhost
正解：B、E
質問 # 35
Which keyword is used in the Squid configuration to define networks and times used to limit access to the service?
- A. http_allow
- B. allow
- C. permit
- D. acl
正解：D
質問 # 36
A company is transitioning to a new DNS domain name and wants to accept e-mail for both domains for all of its users on a Postfix server.
Which configuration option should be updated to accomplish this?
- A. myhosts
- B. mylocations
- C. mydestination
- D. mydomain
- E. mydomains
正解：C
質問 # 37
......
最新の202-450試験問題集でLpi試験が合格できます：https://www.jpntest.com/shiken/202-450-mondaishu
合格できるLpi 202-450のPDF問題集で最近更新された120問あります：https://drive.google.com/open?id=1g4Ky0WjU5UJEZ9LPhw_yx3ha5Rg0PBZ-