nerdexam
CompTIA

LX0-104 · Question #228

The local system administrator has created a configuration entry for apache version 2 that isn't working. What is wrong with the following configuration? <Location /members> AuthName Members AuthType

The correct answer is A. The directive require validuser is missing.. The Apache configuration for basic authentication is incomplete because it defines how to authenticate users but does not specify that authentication is actually required for access.

Administrative Tasks

Question

The local system administrator has created a configuration entry for apache version 2 that isn't working. What is wrong with the following configuration? <Location /members> AuthName Members AuthType Basic AuthUserFile /www/passwd </Location>

Options

  • AThe directive require validuser is missing.
  • BBasic Authentication has been removed from Apache 2.x.
  • CThe format of the password file is not specified.
  • DThe AuthUserFile must be in the apache configuration directory.

How the community answered

(39 responses)
  • A
    87% (34)
  • C
    5% (2)
  • D
    8% (3)

Why each option

The Apache configuration for basic authentication is incomplete because it defines how to authenticate users but does not specify that authentication is actually required for access.

AThe directive require validuser is missing.Correct

The `require valid-user` directive is necessary to enforce that a successfully authenticated user must be a valid user recognized by the `AuthUserFile` for access to be granted. Without this directive, Apache performs the authentication checks but does not actually block unauthenticated access.

BBasic Authentication has been removed from Apache 2.x.

Basic Authentication remains a fully supported and commonly used authentication method in Apache 2.x and subsequent versions.

CThe format of the password file is not specified.

Apache implicitly understands the format of password files created for Basic Authentication (e.g., via `htpasswd`); the format does not need explicit configuration.

DThe AuthUserFile must be in the apache configuration directory.

The `AuthUserFile` can be located anywhere on the file system, provided the Apache process has appropriate read permissions to access it, not just within the Apache configuration directory.

Concept tested: Apache Basic Authentication configuration

Source: https://httpd.apache.org/docs/2.4/howto/auth.html

Topics

#Apache configuration#HTTP Basic Auth#authentication directives#web server

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice