LPIC-2 File Sharing and Samba — All Questions With Answers

A Samba administrator notices that Windows clients cannot access a shared directory. The share is defined in smb.conf as follows:

[shared]

path = /srv/samba/shared valid users = @staff browseable = yes read only = no

The /srv/samba/shared directory has permissions 755 and is owned by root:staff. Which is the most likely cause of the access issue?

Question 2hardmultiple choice

A Samba server is configured as a domain member in an Active Directory environment. Users report that after changing their password on a Windows client, they cannot authenticate to Samba shares. The Samba server is using winbind and the 'idmap_ad' backend. What is the most likely cause?

Question 3hardmultiple choice

A Samba server is configured with 'security = ads' and joined to an Active Directory domain. Users can authenticate but cannot access shares. The smb.conf includes 'winbind use default domain = yes'. What could be the problem?

Question 4mediummulti select

An administrator needs to configure Samba to allow guest access to a share. Which two parameters must be set?

Question 5mediummulti select

Which TWO parameters are used to control Samba's printer sharing? (Choose two.)

Question 6hardmulti select

Which THREE statements about Samba's 'net' command are true? (Choose three.)

Question 7hardmulti select

Which THREE are valid values for the 'security' parameter in smb.conf? (Choose three.)

Question 8hardmultiple choice

Based on the smbstatus output, which statement is true?

Exhibit

Refer to the exhibit.

$ smbstatus
Samba version 4.15.2
PID     Username     Group        Machine                        Protocol Version
12345   alice        staff        win10-pc (192.168.1.10)        SMB3_11
12346   bob          users        win7-pc (192.168.1.11)         SMB2_10

Service      pid     Machine       Connected at
share1       12345   win10-pc      Tue Mar 14 10:00:00 2023
share2       12346   win7-pc       Tue Mar 14 10:05:00 2023

Locked files:
Pid          Uid        DenyMode   Access      R/W        Oplock       SharePath   Name
12345        1001       DENY_NONE  0x100089    RDONLY     NONE         /srv/samba/share1   report.pdf
12346        1002       DENY_NONE  0x100089    RDONLY     NONE         /srv/samba/share2   data.xls

Question 9hardmultiple choice

Your company runs a Samba file server (version 4.15) in a mixed environment with Windows 10 and Linux clients. The server is part of an Active Directory domain. Recently, a new security policy requires that all SMB connections use SMB3 encryption. You have configured 'smb encrypt = required' in the [global] section of smb.conf and restarted smbd. However, Windows clients report that they cannot connect to the server, while Linux clients can connect using mount.cifs with the 'seal' option. You check smb.conf and verify that 'server min protocol = SMB3' is set. What is the most likely cause of the Windows clients' inability to connect?

Question 10easymultiple choice

A system administrator wants to configure a Samba share that grants read-only access to the 'staff' group and full control to the 'managers' group. Which share configuration achieves this?

Question 11mediummulti select

A Linux server running Samba as a domain member is experiencing slow authentication for users. Which two configuration changes are most likely to improve authentication performance?

Question 12hardmultiple choice

A Samba server is configured as a print server. Clients running Windows 10 report that printer drivers cannot be uploaded. The relevant smb.conf section is:

[printers]

comment = All Printers path = /var/spool/samba browseable = no printable = yes

What is the most likely cause?

Question 13mediummulti select

Which TWO of the following are valid ways to map a Windows user to a Linux account in Samba?

Question 14mediummultiple choice

A company runs a mixed Linux/Windows environment. The Samba server (version 4.15) is configured as a domain member using 'security = ADS'. Recently, the IT team enabled 'winbind use default domain = yes' to simplify logins. After the change, users report that they can no longer access Samba shares when authenticating with just their username (e.g., 'jdoe') instead of 'DOMAIN\jdoe'. However, authentication using the full domain-qualified name still works. The smb.conf includes:

[global]

security = ADS workgroup = MYDOM realm = MYDOM.LOCAL winbind use default domain = yes winbind separator = /

Users are in the 'Domain Users' group and the share configuration is:

[share]

path = /srv/share valid users = @"MYDOM\domain users"

Which of the following is the most likely cause and solution?

Question 15easymulti select

Which TWO commands can be used to query a Samba server for its available shares and workgroups?

Question 16mediummultiple choice

Refer to the exhibit. A user reports that they can connect to the 'shared' share from a Windows client and read files, but cannot write any files. The share permissions on the filesystem are set to 777 on /srv/samba/shared. What is the most likely cause of the write failure?

Exhibit

Refer to the exhibit.

[global]
   workgroup = WORKGROUP
   server string = %h server (Samba, Ubuntu)
   security = user
   map to guest = Bad User
   log file = /var/log/samba/log.%m
   max log size = 1000
   load printers = Yes
[printers]
   comment = All Printers
   browseable = no
   path = /var/spool/samba
   printable = yes
   guest ok = yes
   read only = yes
   create mask = 0700
[shared]
   path = /srv/samba/shared
   browseable = yes
   read only = no
   guest ok = yes

Question 17hardmultiple choice

You are the administrator for a small office network with 20 Linux workstations and 5 Windows 10 clients. The company uses a Samba server (version 4.15) running on Ubuntu 22.04 to share a central directory /data with user-level security. Each user has a home directory on the server, and all users are in the 'staff' group. Recently, users have complained that they can access the /data share from Windows but cannot modify any files, even though they could before. The Samba configuration for the share is:

[data]

path = /data browseable = yes read only = no valid users = @staff create mask = 0660 directory mask = 0770 force group = staff

You check the filesystem permissions on /data and find it is owned by root:staff with permissions 775. Files inside are owned by individual users and group staff with permissions 664. You also check smbstatus and see that users are connected as 'guest' rather than their actual username. What is the most likely cause of the problem?

Question 18mediummatching

Match each RAID level to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Striping without redundancy

Mirroring for redundancy

Striping with distributed parity

Striping with double distributed parity

Mirrored stripes combining RAID 1 and RAID 0

Question 19easymultiple choice

An administrator configures a Samba share with guest access. After testing, guests are prompted for a password. Which directive should be added to the [global] section to allow guest access without a password?

Question 20mediummultiple choice

A Samba server is configured with 'security = ads' and joined to an Active Directory domain. Users report that SIDs are not being resolved correctly. Which service and configuration file are critical for ID mapping?

Question 21hardmultiple choice

A Samba share is used by macOS clients. File names with special characters (e.g., ©) appear garbled. Which parameter should be added to the share configuration?

Question 22easymultiple choice

A Samba share is configured with 'writable = no'. What does this mean?

Question 23easymulti select

Which TWO commands can be used to list Samba shares on a remote server?

Question 24mediummulti select

Which TWO parameters in the [global] section are REQUIRED for a Samba server to act as a standalone server (not a member of a domain)?

Question 25hardmulti select

Which THREE configuration directives are necessary to enable Winbind for Active Directory authentication on a Samba domain member?

Question 26easymultiple choice

Refer to the exhibit. A user attempts to access the 'public' share without authentication. What will be the outcome?

Exhibit

[global]
   workgroup = WORKGROUP
   server string = %h server
   security = user
   map to guest = Bad User
   log file = /var/log/samba/log.%m
   max log size = 50

[public]
   path = /srv/samba/public
   guest ok = yes
   read only = yes
   browseable = yes

Question 27mediummultiple choice

Refer to the exhibit. What does the output indicate about the user John Doe's access to the file report.txt?

Exhibit

Samba version 4.15.9
PID     Username     Group        Machine                                   Protocol Version  Encryption           Signing              
----------------------------------------------------------------------------------------------------------------------------------------
12345   johndoe      domain users 192.168.1.100 (ipv4:192.168.1.100:49152)  SMB3_11           -                    partial(AES-128-CMAC)

Service      pid     Machine       Connected at                     Encryption   Signing     
-----------------------------------------------------------------------------------------
share1       12345   192.168.1.100 Mon Oct 25 10:30:45 2024        -            partial      

Locked files:
Pid          Uid        DenyMode   R/W        Oplock           SharePath   Name    Time
-----------------------------------------------------------------------------------------
12345        1002       DENY_NONE  RDONLY     NONE             /srv/samba/share1   report.txt   Mon Oct 25 10:35:00 2024

Question 28hardmultiple choice

Refer to the exhibit. A user cannot connect to the 'share2' Samba share. What is the most likely cause?

Exhibit

[2024/10/25 11:00:00.123456,  0] ../../source3/smbd/service.c:1413(make_connection_snum)
  canonicalize_connect_path failed for service share2, path /srv/samba/share2
[2024/10/25 11:00:00.123457,  0] ../../source3/smbd/service.c:1458(make_connection_snum)
  make_connection_snum: canonicalize_connect_path failed.

Question 29easymultiple choice

A new user needs access to a Samba share. The administrator adds the user to the system with `adduser alice` and then sets up a Samba password. Which command is used to set the Samba password?

Question 30mediummultiple choice

An organization runs a Samba server in standalone mode. They want to allow anonymous (guest) access to a public share. Which configuration option enables guest access for a share?

Question 31hardmultiple choice

A Samba server is configured as a classic PDC (Primary Domain Controller) for a legacy network. The administrator needs to add a new machine account for a client joining the domain. Which command accomplishes this?

Question 32mediummulti select

Which TWO of the following are common symptoms of a misconfigured winbind service when Samba is joined to an Active Directory domain?

Question 33mediummulti select

Which THREE of the following parameters can improve Samba file transfer performance under heavy load?

Question 34mediummultiple choice

A client reports that the [public] share is visible but all files appear read-only. What is the cause?

Exhibit

Refer to the exhibit.

Partial output of testparm -v:
[global]
   workgroup = EXAMPLE
   server string = Samba File Server
   security = USER
   map to guest = Bad User
   guest account = nobody

[public]
   path = /srv/samba/public
   browseable = yes
   read only = yes
   guest ok = yes
   create mask = 0755

Question 35mediummultiple choice

A company recently upgraded their Samba server from version 4.8 to 4.13. Users report that they can connect to shares but cannot write files. The Samba team verified that the share configuration has 'writable = yes' and the Linux filesystem permissions are correct (777). Which global parameter is most likely causing the issue?

Question 36hardmultiple choice

A Samba server is configured to store NT ACLs on a Linux filesystem that does not support them natively. Which VFS module should be used to map NT ACLs to POSIX ACLs?

Question 37hardmultiple choice

An organization is using Samba as a PDC with an LDAP backend for user accounts. Which idmap backend configuration is appropriate for RFC 2307?

Question 38easymultiple choice

A Samba share is intended for guest (anonymous) access. Which global parameter must be set to allow this?

Question 39hardmultiple choice

Samba is integrated with Active Directory using security = ads. Which service is required for Kerberos authentication?

Question 40mediummulti select

Which TWO global parameters can be used to control the security mode of a Samba server?

Question 41mediummultiple choice

A user in group staff (but not admin) tries to write to the share. What is the most likely error?

Exhibit

Refer to the exhibit.

[global]
   workgroup = EXAMPLE
   security = user
   passdb backend = tdbsam

[data]
   path = /srv/samba/data
   valid users = @staff
   write list = @admin
   read only = yes

Question 42easymultiple choice

What is the most likely error in the configuration?

Exhibit

Refer to the exhibit.

$ testparm -s
Load smb config files from /etc/samba/smb.conf
Processing section "[global]"
Unknown parameter encountered: "security mode"
Ignoring unknown parameter "security mode"
Processing section "[share]"
Loaded services file OK.

Question 43easymultiple choice

A Samba share is configured with 'guest ok = yes'. What must also be configured to allow guest access?

Question 44easymulti select

A Linux server provides file sharing to Windows clients via Samba. The administrator notices that Windows clients are unable to resolve the NetBIOS name of the server. Which two services are essential for NetBIOS name resolution? (Choose two.)

Question 45mediummultiple choice

A Samba server is configured to authenticate users against an Active Directory domain using winbind. After joining the domain, some users report that they cannot access shares, while others can. The administrator runs 'wbinfo -u' and sees a list of domain users. However, 'getent passwd' does not show domain users. Which configuration parameter is most likely missing or misconfigured in /etc/samba/smb.conf?

Question 46mediummulti select

An administrator is setting up a Samba share for a project team. The team members are in different UNIX groups. Which three options can be used to restrict access to specific users or groups? (Choose three.)

Question 47hardmultiple choice

A company is migrating from a workgroup environment to an Active Directory domain. The Samba server is already configured as a domain member using winbind. The administrator wants to ensure that files created by domain users on the Samba server are owned by the corresponding UNIX user accounts derived from the domain. Which idmap backend and configuration is recommended for this purpose?

Question 48hardmulti select

A Samba administrator needs to configure a share that allows only the user 'alice' and the group 'developers' to read and write files. Others should have no access. Which two parameters should be set in the share definition? (Choose two.)

Question 49mediummultiple choice

Refer to the exhibit. A user in the group 'staff' attempts to access the share 'share' from a Windows client. The user is prompted for credentials and authenticates successfully, but cannot write any files. What is the most likely reason?

Exhibit

The following output is from 'testparm -v' for a Samba server:

[global]
    workgroup = WORKGROUP
    server string = %h server (Samba, Ubuntu)
    netbios name = SAMBA-SRV
    security = USER
    map to guest = Bad User
    passdb backend = tdbsam
    printing = cups
    printcap name = cups
[share]
    path = /srv/share
    valid users = @staff
    read only = Yes
    guest ok = No

Question 50easymultiple choice

A small office uses a Samba server for file sharing. The server is running Samba 4.9 on Ubuntu 18.04. Recently, the administrator added a new user 'john' to the system and added him to the 'staff' group. However, when John tries to access the share 'docs' from his Windows laptop, he gets an 'Access Denied' error. The share configuration is:

[docs]

path = /srv/docs valid users = @staff read only = No create mask = 0644 directory mask = 0755

The administrator verifies that John is a member of the staff group by running 'groups john' which shows staff. Other users in staff can access the share. What is the most likely cause?

Question 51mediummultiple choice

A company runs a mixed environment with Linux and Windows clients. The Samba server is configured as a domain member for authentication. Users authenticate via Active Directory using winbind. Recently, the IT department implemented a new password policy that requires all users to change passwords every 90 days. After the policy took effect, several users report that they cannot access Samba shares from their Linux clients (using smbclient) even though they can log into their Windows desktops with the same credentials. The error message on Linux is 'session setup failed: NT_STATUS_LOGON_FAILURE'. The administrator runs 'wbinfo -a username%password' and it succeeds. What is the most likely cause?

Question 52easymultiple choice

A Samba share is configured with 'browseable = yes' but Windows clients cannot see it in the network list. However, they can access it by typing the UNC path directly. Which parameter is most likely misconfigured?

Question 53hardmultiple choice

A Samba share uses the 'acl_xattr' VFS module to store NT ACLs in extended attributes. The administrator runs 'getfattr -d /srv/share/file.txt' and sees no system attributes related to NT ACLs. What is the most likely cause?

Question 54easymultiple choice

A small office uses a Linux server running Samba to share documents. The share is accessible but very slow, especially when writing large files. The network is 1 Gbps, and disk performance is fine. The smb.conf has default settings. Which change is most likely to improve write performance?

Question 55mediummultiple choice

An organization uses a Samba server as a standalone file server. The share 'Projects' is configured with browseable = yes and guest ok = no. Users authenticate with local Samba accounts. A new employee needs access but cannot authenticate. The administrator added the user with 'smbpasswd -a newuser' and set a password. When the user tries to connect, they get 'NT_STATUS_LOGON_FAILURE'. The administrator verifies the username and password are correct. smb.conf includes: security = user, passdb backend = tdbsam. What is the most likely cause?

Question 56hardmultiple choice

An enterprise environment uses Samba as an Active Directory domain controller using Samba 4.11. The administrator needs to configure a read-only domain controller (RODC) for a remote branch office. Which of the following steps is correct?

Question 57easymulti select

Which TWO smb.conf parameters can be used to restrict access to a share based on client IP address or network?

Question 58hardmultiple choice

A company uses a Samba server (version 4.12) on Ubuntu 20.04 to provide file sharing for the engineering department. The server has a share [projects] defined in smb.conf with the following parameters: `path = /srv/projects`, `valid users = @engineers`, `read only = no`, `create mask = 0660`, `directory mask = 0770`. All users in the engineers group can authenticate and list the share contents but they report that they cannot create new files or modify existing ones. The command `ls -ld /srv/projects` shows `drwxrwxr-x`, and the directory is owned by root:engineers. The sysadmin has confirmed that the file system permissions on /srv/projects are set to 2775, but the setgid bit does not appear in the ls output. Additionally, users are able to create files in other shares on the same server that are configured similarly. Which of the following is the most likely cause and solution?

Question 59mediummultiple choice

A Samba file server on a Debian host must serve a share whose underlying directory is formatted with the XFS filesystem, and the administrator needs Windows clients to be able to store and retrieve NTFS-style ACLs on files in that share. Which smb.conf share parameter should the administrator add to enable this functionality?

Question 60mediummultiple choice

A Samba server is configured as an AD domain member. After a domain rename, clients authenticate successfully but cannot access shares because Samba cannot map Windows SIDs to local Linux UIDs/GIDs. The smb.conf contains 'idmap config * : backend = tdb' and 'idmap config * : range = 10000-20000'. Which action will resolve the mapping failure?

Question 61mediummultiple choice

A Samba server on Ubuntu 22.04 is configured with a share named [documents] that uses the acl_xattr VFS module. Users report that when they create a new file via SMB, the file's permissions are not inherited from the parent directory's default ACL. The Linux filesystem is ext4 with ACL support enabled. Which smb.conf parameter should be set to ensure that created files inherit the parent directory's permissions?

Question 62mediummultiple choice

A Linux server runs Samba 4.15 as a standalone file server. The administrator needs macOS clients to access shares using the native SMB protocol, but macOS is currently falling back to SMB1 and performance is poor. Which smb.conf global parameter should be set to allow macOS to negotiate the modern SMB2/3 protocol?

Question 63hardmulti select

A Samba server is being tuned for a branch office where Windows clients frequently open and close the same shared documents. The administrator wants to reduce the latency caused by Samba repeatedly stat-ing and re-opening the same files. Which two smb.conf parameters should the administrator consider? (Choose two.)

Question 64hardmultiple choice

A Samba server is configured with a share that uses the recycle VFS module to retain deleted files. The administrator notices that files deleted by users are not appearing in the recycle directory. The share definition includes 'vfs objects = recycle' and 'recycle:repository = .recycle'. What is the most likely cause of the problem?

Question 65easymultiple choice

A Samba server hosts a share that only members of the 'finance' group should be able to access, and the administrator wants to be certain that no other authenticated user can even see the share listed when browsing the server. Which smb.conf share parameter should the administrator set to 'valid users = @finance' to enforce this, while also ensuring the share is hidden from other users?

Question 66easymultiple choice

A Linux server is running Samba 4.13 as a standalone file server. A Windows 10 client attempts to connect to a share but receives the error "The account is not authorized to log in from this station." The Samba logs show the message "ntlmssp_server_check_password: Bad password for user jdoe". Which Samba parameter should the administrator check first to resolve this issue?

Question 67mediummultiple choice

A Samba server is configured as a standalone server with a share that uses the 'acl_xattr' VFS module to store Windows ACLs. Users report that they can see files but cannot modify permissions from Windows Explorer. The administrator verifies that the underlying filesystem is ext4 and has the 'user_xattr' mount option. Which additional smb.conf parameter is required on the share to enable Windows ACL support?

Question 68hardmultiple choice

A Samba server is configured with the following global parameters:

[global]

idmap config * : backend = tdb idmap config * : range = 10000-19999 idmap config AD : backend = ad idmap config AD : range = 20000-29999 idmap config AD : schema_mode = rfc2307

The server is joined to an Active Directory domain named AD. A domain user 'jdoe' has the POSIX attributes uidNumber=30000 and gidNumber=30000 set in AD. When jdoe accesses a Samba share, what will be the resulting UID and GID as seen by the Linux system?

Question 69hardmulti select

A Samba server is configured as a domain member of an Active Directory domain. Users complain that they cannot access a share that should be available to all domain users. The share is defined with 'valid users = @"DOMAIN\Domain Users"'. The administrator runs 'net ads testjoin' and it succeeds. Which two actions should the administrator take to troubleshoot the issue? (Choose two.)

Question 70easymultiple choice

A company wants to use Samba to share files with Windows clients. Which service must be enabled in Samba to support Windows Active Directory domain membership?

Question 71mediummultiple choice

A Samba share is configured with 'force user = jane'. A user 'bob' accesses the share. With what effective user ID will file operations be performed?

Question 72easymultiple choice

Which Samba component provides NetBIOS name resolution and browsing services?

Question 73easymultiple choice

After modifying smb.conf, which command should be used to verify the configuration syntax before restarting Samba?

Question 74easymulti select

Which TWO files are commonly used by Samba for configuration and user authentication? (Choose two.)

Question 75mediummultiple choice

Given the smb.conf exhibit, which share(s) allow write access to user 'alice' who is a member of the 'staff' group?

Exhibit

Refer to the exhibit.

[global]
workgroup = MYGROUP
server string = Samba Server
security = user

[share1]
path = /srv/samba/share1
valid users = alice, bob
read only = no

[share2]
path = /srv/samba/share2
valid users = @staff
read only = yes

[share3]
path = /srv/samba/share3
guest ok = yes
read only = no

Question 76mediumdrag order

Arrange the steps to configure a Linux system as an Apache virtual host.

Drag or tap steps into the slots.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 77easymultiple choice

A user wants to mount a Samba share on a Linux client using the command line. Which utility is used for that purpose?

Question 78mediummultiple choice

An administrator sets up a Samba server with 'security = user'. Users are stored in the local smbpasswd file. After changing a user's Unix password, the user cannot access Samba shares. What should the administrator do?

Question 79hardmultiple choice

A Samba server uses 'security = domain' with an NT4-style domain. After a domain controller outage, users cannot authenticate. Which configuration change would allow fallback to local authentication?

Question 80mediummultiple choice

In a Samba domain member server, which file contains the SID to Unix ID mappings?

Question 81hardmultiple choice

A Samba server is configured with 'vfs objects = recycle' to implement a recycle bin. After some time, users notice that deleted files are not appearing in the recycle bin. Which parameter is likely misconfigured?

Question 82mediummultiple choice

An administrator wants to restrict access to a Samba share based on client IP addresses. Which parameter in the [share] section of smb.conf should be used?

Question 83easymultiple choice

After modifying /etc/samba/smb.conf, an administrator runs a command to validate the configuration. Which command is correct?

Question 84hardmultiple choice

A Samba server configured as an Active Directory domain member is unable to authenticate users from the domain. The administrator verifies that DNS resolution works, but `wbinfo -u` returns no output. What is the most likely cause?

Question 85mediummultiple choice

An administrator needs to create a Samba share that allows all users in the 'staff' group read/write access, but denies access to everyone else. Which configuration achieves this?

Question 86hardmultiple choice

A Samba server experiences slow file transfers for large files. The administrator suspects oplock issues. Which set of parameters should be adjusted to disable opportunistic locking?

Question 87easymultiple choice

In Samba 4, what is the default security mode when no 'security' parameter is set in the [global] section?

Question 88hardmulti select

Which TWO of the following are valid methods to join a Samba server to an Active Directory domain using Samba 4?

Question 89hardmultiple choice

A user 'bob' is unable to save changes to report.doc. Based on the exhibit, what is the most likely reason?

Exhibit

Refer to the exhibit.

Output from smbstatus:
Locked files:
Pid    DenyMode   Access   R/W        Oplock       SharePath   Name
1234   DENY_WRITE  RDONLY   RDONLY     NONE         /srv/samba/share   report.doc

Service      pid     machine       user       connected_at
share        1234    192.168.1.10  alice      Thu Jan 25 10:30:00 2024

Question 90easymultiple choice

What is the purpose of the 'idmap config * : backend = tdb2' line?

Exhibit

Refer to the exhibit.

smb.conf (partial):
[global]
   workgroup = EXAMPLE
   security = user
   idmap config * : backend = tdb2
   idmap config * : range = 10000-20000

[nfs_share]
   path = /srv/nfs/share
   browseable = no
   guest ok = no

Question 91easymultiple choice

An administrator has configured Samba as a domain member for an Active Directory environment. For user authentication via winbind, which daemon must be running?

Question 92mediummultiple choice

A Samba server provides printer sharing using CUPS. Which three global parameters are essential for CUPS integration? (Select THREE)

Question 93easymultiple choice

Which legacy SMB protocol version should be disabled for security best practices on a modern Samba server?

Question 94mediummultiple choice

Windows clients cannot see the Samba server in Network Neighborhood, but they can access shares by typing the UNC path. Which Samba daemon must be running?

Question 95hardmulti select

Which TWO conditions are most likely to cause 'NT_STATUS_ACCESS_DENIED' when accessing a Samba share?

Question 96easymulti select

Which THREE commands are specifically used to diagnose Samba issues?

Question 97hardmultiple choice

A user alice is connected to the 'data' share via smbd, but a file is locked. Which command can forcibly close the file?

Exhibit

Refer to the exhibit.

$ smbstatus -S
Service      pid     machine       Connected at
-------------------------------
data         1234    client1       Mon Jan 20 10:00:00 2025

$ pdbedit -L -v | grep -A5 "Unix username"
Unix username:        alice
NT username:          EXAMPLE\\alice
Account Flags:        [U          ]
User SID:             S-1-5-21-123456789-1001
Primary Group SID:    S-1-5-21-123456789-513
Full Name:            Alice
Home Directory:       \\server\\alice
Home Drive:           H:
Script Path:          \\server\\netlogon\\alice.bat
Profile Path:         \\server\\profiles\\alice

Question 98easymultiple choice

After modifying /etc/samba/smb.conf, which command should be used to verify the syntax before restarting the Samba service?

Question 99mediummultiple choice

A Samba share requires that users must provide valid credentials, but the share should be accessible to any authenticated user without further restrictions. Which security mode should be used?

Question 100hardmultiple choice

A Samba server is experiencing slow authentication for domain users. The logs show repeated winbind connections to the domain controllers. The administrator suspects that winbind is not caching credentials properly. Which parameter should be checked or increased to improve caching?

Question 101hardmultiple choice

An administrator needs to configure Samba to use encrypted passwords via LDAP backend. The LDAP server is already set up with the necessary schema. Which passdb backend should be specified in smb.conf?

Question 102mediummultiple choice

A company uses Samba to share files from a Linux server to Windows clients. After upgrading Samba from version 4.10 to 4.15, some users report they cannot access shares and receive 'Access denied' errors. The smb.conf has been verified and seems correct. What is the most likely cause?

Question 103easymulti select

An administrator wants to configure Samba to allow only specific users to access a share. Which TWO configuration parameters in smb.conf can be used to restrict access based on usernames?

Question 104hardmultiple choice

A company has a Samba server configured as a domain member in an Active Directory domain. The server runs Samba 4.13. Recently, Windows clients have been unable to access shares, and the domain join seems broken. The administrator runs 'net ads testjoin' and gets 'Join to domain is not valid'. The smb.conf includes: security = ads, realm = EXAMPLE.COM, workgroup = EXAMPLE. The administrator can successfully resolve the domain controller via DNS. What should the administrator do to fix the issue?

Question 105mediummultiple choice

A company runs Samba on a Linux server to provide file shares to Windows clients. The server is also a BIND DNS server. After a recent OS upgrade, the Samba service fails to start with the error: 'Failed to create a listening socket for port 445: Permission denied'. The administrator checks that no other service is using port 445. smbd is configured to start as root. What is the most likely cause?

Question 106mediummultiple choice

A Samba server is configured as above. Users alice and bob have local system accounts but neither can connect to the share. What is the most likely cause?

Exhibit

Refer to the exhibit.
Exhibit:
[global]
   workgroup = WORKGROUP
   security = user
   passdb backend = tdbsam
[share]
   path = /srv/share
   valid users = alice, bob
   read only = no

Question 107hardmultiple choice

An administrator configures a Samba share with 'valid users = @sales' and 'invalid users = dave', where dave is a member of the sales group. Dave attempts to connect to the share and is denied. Which statement best explains the outcome?

Question 108mediummulti select

A Linux server runs Samba to share a directory with Windows clients, and the administrator wants to ensure that the share is discoverable in the network neighborhood and that clients can resolve the server by its NetBIOS name. Which two smb.conf global parameters should be configured to achieve this? (Choose two.)

Question 109hardmultiple choice

An administrator configures a Samba share named 'projects' with 'valid users = @design' and 'write list = @design'. A user named priya, who belongs to the design group, reports that she can open files but cannot create new ones. Running 'smbstatus' shows her connected as user priya. Which single configuration change is most likely to resolve the write failure?

Question 110mediummultiple choice

An administrator needs to mount a Samba share on a Linux client at boot and ensure that file ownership on the mounted filesystem reflects a specific local user and group, because the server does not provide Unix extensions. Which mount option combination should be used?

Question 111hardmultiple choice

A Samba server uses the 'acl_xattr' VFS module to store Windows ACLs in extended attributes. Users report that permissions set from Windows are not enforced; they can access files they should not. Running 'getfattr -d /srv/data/file.txt' shows no user.* attributes. Which parameter must be verified in smb.conf to ensure ACLs are stored correctly?

Question 112mediummultiple choice

A Linux administrator runs a Samba server that must expose a share to clients on a network where name resolution is unreliable. The administrator wants clients to discover the server without relying on NetBIOS broadcast resolution. Which smb.conf global parameter should be configured to advertise the server's presence through mDNS?

Question 113mediummultiple choice

A Samba share is configured with 'guest ok = yes' and 'map to guest = bad user'. A Windows client attempts to connect without providing credentials. Which of the following best describes the authentication behavior?

Question 114hardmultiple choice

A Samba server is configured with the recycle VFS module to move deleted files to a .recycle directory. The share is defined as follows:

[projects]

path = /srv/projects vfs objects = recycle recycle:repository = .recycle recycle:keeptree = yes recycle:versions = yes

A user deletes a file named report.docx from a subdirectory called Q1. Where will the file be moved?

Question 115mediummulti select

A Samba server is configured as a standalone file server. The administrator wants to restrict access to a share named [finance] to members of the group 'accounting' and deny access to all other users, including guests. The share is currently accessible to everyone. Which two actions must be taken to achieve this? (Choose two.)

Question 116easymultiple choice