202-450 Free Practice Test

Which netfilter table contains built-in chains called INPUT, OUTPUT and FORWARD?

1. A. ipconn
2. B. filter
3. C. nat
4. D. default
5. E. masq

Correct Answer: B

Which tool creates a Certificate Signing Request (CSR) for serving HTTPS with Apache HTTPD?

1. A. apachect1
2. B. certgen
3. C. cartool
4. D. httpsgen
5. E. openssl

Correct Answer: E

How must Samba be configured such that it can check CIFS passwords against those found in
/etc/passwd and /etc/shadow?

1. A. Set the parameters “encrypt passwords = yes” and “password file = /etc/passwd”
2. B. Set the parameters “encrypt passwords = yes”, “password file = /etc/passwd” and “password algorithm = crypt”
3. C. Delete the smbpasswd file and create a symbolic link to the passwd and shadow file
4. D. It is not possible for Samba to use /etc/passwd and /etc/shadow directly
5. E. Run smbpasswd to convert /etc/passwd and /etc/shadow to a Samba password file

Correct Answer: D

What option in the client configuration file would tell OpenVPN to use a dynamic source port when making a connection to a peer?

1. A. src-port
2. B. remote
3. C. source-port
4. D. nobind
5. E. dynamic-bind

Correct Answer: D

It has been discovered that the company mail server is configured as an open relay. Which of the following actions would help prevent the mail server from being used as an open relay while maintaining the possibility to receive company mails? (Choose two.)

1. A. Restrict Postfix to only accept e-mail for domains hosted on this server
2. B. Configure Dovecot to support IMAP connectivity
3. C. Configure netfilter to not permit port 25 traffic on the public network
4. D. Restrict Postfix to only relay outbound SMTP from the internal network
5. E. Upgrade the mailbox format from mbox to maildir

Correct Answer: CD