117-202 Exam Questions

Some users are unable to connect to specific local hosts by name, while accessing hosts in other zones works as expected. Given that the hosts are reachable by their IP addresses,...

A BIND server should never answer queries from certain networks or hosts. Which configuration directive could be used for this purpose?

What is the purpose of a PTR record?

Performing a DNS lookup with dig results in this answer: What might be wrong in the zone definition?

What directive can be used in named.conf to restrict zone transfers to the 192.168.1.0/24 network?

To securely use dynamic DNS updates, the use of TSIG is recommended. Which TWO statements about TSIG are true?

Which option is used to configure pppd to use up to two DNS server addresses provided by the remote server?

A DNS server has the IP address 192.168.0.1. Which TWO of the following need to be done on a client machine to use this DNS server?

The mailserver is currently called fred, while the primary MX record points to mailhost.example.org. What must be done to direct example.org email towards fred?

Which option can be used to allow access to a BIND DNS server from only specified networks/hosts?

There is a restricted area in an Apache site, which requires users to authenticate against the file /srv/www/security/site-passwd. Which command is used to CHANGE the password of e...

Consider the following / srv/www/ default/html/ restricted/.htaccess AuthType Basic AuthUserFile / srv/www/ security/ site-passwd AuthName Restricted Require valid-user Order deny,...

A web server is expected to handle approximately 200 simultaneous requests during normal use with an occasional spike in activity and is performing slowly. Which directives in http...

Which statements about the Alias and Redirect directives in Apache's configuration file are true?

When Apache is configured to use name-based virtual hosts:

Which Apache directive is used to configure the main directory for the site, out of which it will serve documents?

The innd configuration file has been changed and it should be used as soon as possible. What is the fastest way to accomplish that?

What command can be used to add a new newsgroup called LPI that allows posting?

Which TWO of the following commands could be used to add a second IP address to eth0?

If the command arp -f is run, which file will be read by default?

What command must be used to print the kernel's routing table?

What command would be used to configure the interface eth1:1 with the IP address 10 10.34 and the netmask 255.255.255.0?

Which option must be used with ifconfig, to also see interfaces that are down?

What is the command to add another IP address to an interface that already has (at least) one IP address?

route shows the following output: Which of the following statements is correct?

A network client has an ethernet interface configured with an IP address in the subnet 192.168.0.0/24. This subnet has a router, with the IP address 192.168.0.1, that connects this...

A server with 2 network interfaces, eth0 and eth1, should act as a router. eth0 has the IP address 192.168.0.1 in the subnet 192.168.0.1/24 and eth1 has the IP address 10.0.0.1 in...

What command is used to add a route to the 192.168.4.0/24 network via 192.168.0.2?

Considering the following kernel IP routing table now, which of the following commands must be emove the route to the network 10.10.1.0/24?

Which of the following sentences is true, when using the following /etc/pam.d/login file? #%PAM-l.0 auth required /lib/security/pam_securetty.so auth required /lib/security/pam_nol...

LDAP-based authentication against a newly-installed LDAP server does not work as expected. The file /etc/pam.d/login includes the following configuration parameters. Which of them...

What is the advantage of using SASL authentication with OpenLDAP?

In a PAM configuration file, which of the following is true about the required control flag?

As of Linux kernel 2.4, which software is used to configure a VPN?

A program, called vsftpd, running in a chroot jail, is giving the following error: /bin/vsftpd: error while loading shared libraries: libc.so.6: cannot open shared object file: No...

Which of the following can the program tripwire NOT check?

The following is an excerpt from the output of tcpdump -nli eth1 'udp': 13:03:17.277327 IP 192.168.123.5.1065 > 192.168.5.112.53: 43653+ A? lpi.org. (25) 13:03:17.598624 IP 192.168...

A server is being used as a smurf amplifier, whereby it is responding to ICMP Echo-Request packets sent to its broadcast address. To disable this, which command needs to be run?

When the default policy for the iptables INPUT chain is set to DROP, why should a rule allowing traffic to localhost exist?

To be able to access the server with the IP address 10.12.34.56 using HTTPS, a rule for iptables has to be written. Given that the client host's IP address is 192.168.43.12, which...

When connecting to an SSH server for the first time, its fingerprint is received and stored in a file, which is located at:

Which THREE of the following actions should be considered when a FTP chroot jail is created?

Connecting to a remote host on the same LAN using ssh public-key authentication works but forwarding X11 doesn't. The remote host allows access to both services. Which of the follo...

An iptables firewall was configured to use the target MASQUERADE to share a dedicated wireless connection to the Internet with a few hosts on the local network. The Internet connec...

Which command line creates an SSH tunnel for POP and SMTP protocols?

Which of these tools can provide the most information about DNS queries?

Which command would release the current IP address leased by a DHCP server?

Remote access to a CD-RW device on a machine on a LAN must be restricted to a selected user group. Select the TWO correct alternatives that describe the possible solutions for this...

Select the alternative that shows the correct way to disable a user login (except for root)

A new user was created on a master NIS server using useradd but cannot log in from an NIS client. Older users can log in. Which step was probably forgotten, when creating the new u...