202-450 Exam Questions
302 real 202-450 exam questions with expert-verified answers and explanations. Page 5 of 7.
- Question #271209 Web Services
Which subcommands to the openssl command are used in the process of generating a private key and a Certificate Signing Request (CSR)? (Choose TWO correct answers.)
opensslCSR generationprivate keySSL/TLS - Question #272209 Web Services
Which Apache directive is used to specify the RSA private key that was used in the generation of the SSL certificate for the server?
Apache SSLSSLCertificateKeyFileRSA private keySSL configuration - Question #273209 Web Services
In which Apache context should SSL support be activated?
Apache SSLVirtualHostSSL contextHTTPS configuration - Question #274209 Web Services
Which global option in squid.conf sets the port number or numbers that Squid will use to listen for client requests?
Squid proxyhttp_portsquid.confproxy configuration - Question #275213 System Security
In a PAM configuration file, which of the following is true about the sufficient control flag in the following line? Auth sufficient pam_module.so
PAMsufficient flagcontrol flagsauthentication - Question #276212 E-Mail Services
Which Postfix command can be used to rebuild all of the alias database files with a single invocation?
Postfixnewaliasesalias databasemail administration - Question #277212 E-Mail Services
A company is transitioning to a new domain name and wants to accept e-mail for both domains for all of its users on a Postfix server. Which configuration option should be updated t...
Postfixmydestinationmultiple domainsemail routing - Question #278212 E-Mail Services
Why should the Postfix parameter disable_vrfy_command be set to yes on a publicly accessible mail server?
Postfix securityVRFY commandemail harvestingmail server hardening - Question #279213 System Security
Which command is used to administer IPv6 netfilter rules?
ip6tablesIPv6netfilterfirewall - Question #280213 System Security
Which of the following are predefined targets for netfilter rules? (Choose TWO correct answers.)
netfilter targetsACCEPTRETURNiptables - Question #281213 System Security
With netfilter, which packet matching table contains built-in chains called INPUT, OUTPUT and FORWARD?
netfilterfilter tableiptables chainspacket filtering - Question #282213 System Security
What command is used to reload a set of saved netfilter rules?
iptables-restorenetfilter rulesfirewall managementiptables - Question #283213 System Security
Which of the following daemons will monitor log files for inappropriate activity, such as login attempts, from remote IP addresses and will add netfilter rules to block the offendi...
fail2banlog monitoringintrusion preventionnetfilter - Question #284213 System Security
With fail2ban what is a 'jail'?
fail2banjail configurationintrusion preventionfilter actions - Question #285214 Troubleshooting
Which command can be used when writing scripts which perform tests against remote services?
netcatnetwork testingscriptingremote services - Question #286214 Troubleshooting
Which of the following commands can be used to connect and interact with remote services? (Choose TWO correct answers.)
netcattelnetremote servicesnetwork tools - Question #287HTTP Services
Which configuration block in Nginx is used to define settings for a reverse proxied web server?
Nginxreverse proxylocation blockconfiguration - Question #288HTTP Services
When trying to reverse proxy a web server through Nginx, what keyword is missing from the following configuration sample? location / { }
Nginxproxy_passreverse proxyconfiguration directive - Question #289HTTP Services
When trying to reverse proxy a web server through Nginx, what keyword is required to pass the Host header from the original request to the proxied server? ... { _________ Host $hos...
Nginxproxy_set_headerHost headerreverse proxy - Question #290HTTP Services
With Nginx, which of the following directives is used to proxy requests to a FastCGI application?
NginxFastCGIfastcgi_passproxy directive - Question #292213 System Security
Which of the following sshd configuration settings should be set to no in order to fully disable password based logins? (Choose THREE correct answers.)
sshd_configpassword authenticationPAMSSH hardening - Question #293214 Troubleshooting
After having a laptop assigned to a new subnet, a user is no longer able to login to the SSH server with an error message like Connection closed by remote host. Which of the follow...
SSH troubleshootinghosts.allownetfilteraccess control - Question #294213 System Security
Unlike many other services, OpenSSH cannot be configured to hide its version information without recompiling from source code. What is the primary reason for this disclosure of ver...
OpenSSHversion disclosureprotocol compatibilitysecurity by obscurity - Question #295208 Domain Name Server
Which of these tools, without any options, provides the most information when performing DNS queries?
digDNS query toolsnslookupDNS lookup - Question #296208 Domain Name Server
Which of the following DNS record types is used to allow users and applications to make reverse DNS queries?
PTR recordreverse DNSDNS record typesin-addr.arpa - Question #297HTTP Services
Which Apache HTTP Server directive specifies the types of directives that are allowed in .htaccess files?
ApacheAllowOverride.htaccessconfiguration directives - Question #298HTTP Services
Given that all users have their home directory in /home and the following directive is present in the Apache HTTPD Server configuration file, what is the full filesystem path to th...
ApacheUserDirpublic_htmluser home directories - Question #299HTTP Services
When the Apache HTTP Server is configured to use name-based virtual hosts:
Apachename-based virtual hostsNameVirtualHostVirtualHost - Question #300HTTP Services
Which of the following are commonly used log file directives in Apache? (Choose TWO correct answers.)
ApacheCustomLogErrorLoglogging directives - Question #301213 System Security
Which tool can be used to create Certificate Signing Requests (CSR) for running an Apache server with HTTPS?
opensslCSRcertificate signing requestHTTPS - Question #302HTTP Services
Why are different IP addresses recommended when hosting multiple HTTPS virtual hosts? (Choose TWO correct answers.)
HTTPSSNISSL/TLSvirtual hosting - Question #303HTTP Services
Which Squid configuration keyword is used to define networks and times that the service may be accessed?
SquidACLproxy access controlhttp_access - Question #304HTTP Services
In order to protect a directory on an Apache HTTPD web server with a password, this configuration was added to an .htaccess file in the respective directory: Furthermore, a file /v...
Apache HTTPD.htaccessHTTP authentication.htpasswd - Question #305213 System Security
Which of the following nmap parameters scans a target for open TCP ports? (Choose two.)
nmapport scanningTCPnetwork security - Question #306211 Network Client Management
A host, called lpi, with the MAC address 08:00:2b:4c:59:23 should always be given the IP address of 192.168.1.2 by a DHCP server running ISC DHCPD. Which of the following configura...
ISC DHCPDstatic IP assignmentMAC address bindingDHCP - Question #307HTTP Services
Which tool creates a Certificate Signing Request (CSR) for serving HTTPS with Apache HTTPD?
opensslCSRSSL/TLSHTTPS - Question #308208 Domain Name Server
Which of the following DNS records could be a glue record?
glue recordDNSnameserverzone delegation - Question #309212 E-Mail Services
Which of the following authentication mechanisms are supported by Dovecot? (Choose three.)
DovecotSASLIMAPauthentication mechanisms - Question #310213 System Security
How are PAM modules organized and stored?
PAMshared objectsLinux securityauthentication - Question #311210 File Sharing
Which command is used to configure which file systems a NFS server makes available to clients?
NFSexportfsserver configurationfile sharing - Question #312210 File Sharing
Which of the following statements is true regarding the NFSv4 pseudo file system on the NFS server?
NFSv4pseudo filesystembind mountsNFS exports - Question #313HTTP Services
Which Apache HTTPD directive enables HTTPS protocol support?
Apache HTTPDSSLEngineSSL/TLSHTTPS - Question #314212 E-Mail Services
Which Postfix command can be used to rebuild all of the alias database files with a single invocation and without the need for any command line arguments?
Postfixnewaliasesalias databaseMTA - Question #315HTTP Services
In response to a certificate signing request, a certification authority sent a web server certificate along with the certificate of an intermediate certification authority that sig...
SSL/TLSintermediate CAcertificate chainApache HTTPD - Question #316213 System Security
Which of the following sshd configuration should be set to no in order to fully disable password based logins? (Choose two.)
SSHsshdPasswordAuthenticationChallengeResponseAuthentication - Question #317213 System Security
Which of the statements below are correct regarding the following commands, which are executed on a Linux router? (Choose two.)
ip6tablesIPv6link-local addressesfirewall rules - Question #318210 File Sharing
How must Samba be configured such that it can check CIFS passwords against those found in /etc/passwd and /etc/shadow?
SambaCIFSpassword authenticationsmbpasswd - Question #319211 Network Client Management
Which of the following statements in the ISC DHCPD configuration is used to specify whether or not an address pool can be used by nodes which have a corresponding host section in t...
ISC DHCPDunknown-clientsaddress poolDHCP configuration - Question #320208 Domain Name Server
Which BIND option should be used to limit the IP addresses from which slave name servers may connect?
BINDallow-transferzone transferDNS security - Question #321210 File Sharing
Which Linux user is used by vsftpd to perform file system operations for anonymous FTP users?
vsftpdFTPanonymous accessftp_username