LPIC-2 Network Client Management Practice Test 3 — 15 Questions

Question 1

To ensure LDAP communication is encrypted, an administrator configures LDAP over SSL (LDAPS) on port 636. Which configuration file on the client should be modified to specify the LDAP server with TLS?

Accepted Answer

/etc/ldap/ldap.conf. Option D is correct because the LDAP client configuration file on Linux systems is typically located at /etc/ldap/ldap.conf (or /etc/openldap/ldap.conf on some distributions). This file is used by LDAP client libraries (e.g., libldap) to specify the LDAP server URI, including the use of TLS/SSL via the ldaps:// scheme or the TLS_REQCERT directive. Modifying this file allows the client to connect to an LDAP server over port 636 with encryption.

Answer

/etc/pam_ldap.conf

Answer

/etc/openldap/ldap.conf

Answer

/etc/nsswitch.conf

Question 2

Which TWO DHCP options are commonly used to provide network configuration to clients? (Choose two.)

Accepted Answer

routers. Option A (routers) is correct because the DHCP option 3 (Router) provides the default gateway address to clients, enabling them to route traffic outside their local subnet. Option E (domain-name-servers) is correct because DHCP option 6 (Domain Name Server) supplies the DNS server addresses, allowing clients to resolve domain names. Both are essential for basic network connectivity and are almost universally configured in DHCP scopes.

Answer

subnet-mask

Answer

ntp-servers

Answer

host-name

Question 3

Which THREE directives are essential for configuring an OpenLDAP client in /etc/ldap/ldap.conf? (Choose three.)

Accepted Answer

BASE. The BASE directive defines the starting point for LDAP searches (e.g., dc=example,dc=com) and is essential for client configuration to know which subtree to query. Without it, the client cannot determine the search base for directory lookups.

Answer

SIZELIMIT

Answer

BINDDN

Question 4

Which TWO Samba security modes are considered insecure and should be avoided? (Choose two.)

Accepted Answer

share. Samba's 'share' security mode (deprecated in Samba 3.0) and 'server' security mode (removed in Samba 3.6) are both considered insecure. 'share' mode allowed anonymous access without per-user authentication, relying on share-level passwords that were transmitted in plaintext or weak hashes. 'server' mode delegated authentication to another Samba server (e.g., 'security = server' with 'password server = *'), which often fell back to plaintext or LANMAN hashes over an unencrypted connection, exposing credentials to interception.

Answer

domain

Answer

user

Answer

ads

Question 5

A client on the 192.168.2.0/24 network cannot obtain an IP address. Other clients on that subnet work fine. The DHCP server logs show no request from the client's MAC. What is the most likely cause?

Accepted Answer

No DHCP relay agent is configured on the client's subnet.. The client's DHCP request never reaches the DHCP server, as indicated by the server logs showing no request from the client's MAC. Since other clients on the same subnet work fine, the DHCP server and the local subnet are functional. The most likely cause is that the client's subnet (192.168.2.0/24) lacks a DHCP relay agent (e.g., configured on a router or switch using the 'ip helper-address' command) to forward broadcast DHCPDISCOVER messages to the DHCP server located on a different subnet. Without a relay agent, DHCP broadcasts are confined to the local subnet and cannot reach a remote server.

Answer

The range is too small for the number of clients.

Answer

The subnet declaration for 192.168.2.0 is missing option routers.

Answer

The client is configured with a static IP address.

Question 6

A user authenticates via LDAP successfully, but 'getent passwd' only shows local users. What is the problem?

Accepted Answer

The LDAP server is not responding for passwd queries.. Option B is correct because the user can authenticate via LDAP (which typically uses the 'auth' or 'account' NSS modules) but 'getent passwd' only shows local users, indicating that the NSS 'passwd' map is not querying the LDAP server. This means the LDAP server is either unreachable for passwd queries or the NSS configuration for the 'passwd' database is misconfigured (e.g., missing 'ldap' in /etc/nsswitch.conf for passwd). The successful authentication suggests the LDAP server is reachable for authentication purposes, but the passwd map query fails, often due to a separate LDAP server or service issue specific to user/group lookups.

Answer

The ldap entry should be before files.

Answer

The shadow map is missing LDAP.

Answer

The nscd cache needs to be cleared.

Question 7

A client mounts the export with 'mount -t nfs server:/data /mnt/data' and root on the client can write files. Which option in /etc/exports allows root to retain its privileges?

Accepted Answer

no_root_squash. Option B (no_root_squash) is correct because it prevents the NFS server from mapping the client's root user (UID 0) to the anonymous 'nobody' user. By default, NFS exports use root_squash, which maps root to an unprivileged user for security. With no_root_squash, the client's root retains UID 0 on the server, allowing write access to files owned by root on the export.

Answer

root_squash

Answer

rw

Answer

async

Question 8

An administrator needs to mount an NFSv4 export from server:/exports/data onto /mnt/data on a client. The requirement is to use Kerberos security, a hard mount, and ensure that the NFS server does not squash root's privileges. Which line in /etc/fstab correctly implements these requirements?

Accepted Answer

server:/exports/data /mnt/data nfs4 defaults,sec=krb5,hard 0 0. Option D is correct because it specifies NFSv4 with Kerberos security (sec=krb5) and a hard mount, which meets the requirements. The no_root_squash option is not a valid mount option in /etc/fstab for the client side; it is an export option set on the NFS server in /etc/exports. Thus, D correctly omits it, as the client cannot enforce root squashing behavior.

Answer

server:/exports/data /mnt/data nfs4 defaults,sec=none,hard,no_root_squash 0 0

Answer

server:/exports/data /mnt/data nfs4 defaults,sec=krb5,soft 0 0

Answer

server:/exports/data /mnt/data nfs4 defaults,sec=krb5,hard,no_root_squash 0 0

Question 9

A user reports that the command 'smbclient -L //fileserver' fails with a timeout. What is the most likely cause?

Accepted Answer

A firewall on the client or server is blocking TCP port 445.. The command 'smbclient -L //fileserver' uses SMB protocol to list shares. A timeout indicates the client cannot establish a TCP connection to the server on port 445, which is the default SMB port. A firewall blocking TCP 445 would prevent the connection, causing a timeout, while other issues like a stopped smbd service or unreachable server would typically produce different errors (e.g., 'connection refused' or 'no route to host').

Answer

The smbd service on the server is not running.

Answer

The user does not have an account on the server.

Answer

The server is not reachable via ping.

Question 10

Which file on a Linux client determines the order in which different name resolution methods (e.g., hosts file, DNS, LDAP) are consulted?

Accepted Answer

/etc/nsswitch.conf. Option C is correct because /etc/nsswitch.conf (Name Service Switch) controls the order and sources for system databases like 'hosts', 'passwd', and 'group'. For hostname resolution, the 'hosts' line specifies the lookup order (e.g., 'files dns ldap'), meaning the system checks /etc/hosts first, then DNS, then LDAP. This file is the central configuration for name resolution order on Linux systems.

Answer

/etc/host.conf

Answer

/etc/resolv.conf

Answer

/etc/named.conf

Question 11

A Linux client is configured to authenticate users against an LDAP server using PAM. Some users are unable to log in, while others succeed. The admin has verified that the LDAP server is reachable and that the user entries exist. Which of the following is the most likely cause?

Accepted Answer

The pam_ldap configuration has a size limit that restricts search results.. Option B is correct because the pam_ldap configuration can include a size limit (e.g., 'pam_ldap size_limit 500') that restricts the number of entries returned from an LDAP search. When a user logs in, PAM may perform a search that returns multiple matching entries (e.g., due to ambiguous username or group membership lookups), and if the result set exceeds this limit, the search fails for some users. This explains why some users succeed while others fail, even though the LDAP server is reachable and user entries exist.

Answer

The nsswitch.conf file is missing the 'ldap' entry for 'passwd'.

Answer

The LDAP server is using different encryption settings.

Answer

The nslcd service is not running.

Question 12

An administrator notices that an NFS mount on a client becomes unresponsive when the NFS server goes offline. The admin wants the mount to return an error to the application after a short timeout instead of hanging indefinitely. Which mount option should be added to the fstab entry?

Accepted Answer

soft. The `soft` mount option causes the NFS client to return an error to the application after a short timeout (typically 60 seconds by default) if the NFS server becomes unresponsive, rather than hanging indefinitely. This is the correct choice because the administrator specifically wants the mount to return an error after a short timeout instead of hanging.

Answer

intr

Answer

bg

Answer

hard

Question 13

Which command is used to list the NFS exports available from a specific server?

Accepted Answer

showmount -e server. The `showmount -e server` command queries the NFS server's mount daemon (rpc.mountd) to list the exported filesystems that are currently available. This is the standard method for a client to discover which NFS shares a server is offering, as it directly interrogates the server's export list via the RPC protocol.

Answer

mount -t nfs4 server:/export /mnt

Answer

nfsstat

Answer

exportfs -a

Question 14

A laptop user frequently moves between different networks. The administrator wants the DNS configuration to update automatically when the laptop connects to a new network via DHCP. Which service or tool is most appropriate for this task?

Accepted Answer

NetworkManager. NetworkManager is the most appropriate tool because it is designed to manage network connections on modern Linux systems, automatically detecting network changes and reconfiguring DNS settings based on DHCP-provided information. It integrates with various backends (e.g., systemd-resolved, resolvconf) to update the system's DNS configuration dynamically, making it ideal for a laptop that frequently moves between networks.

Answer

systemd-resolved

Answer

dhcpcd

Answer

resolvconf

Question 15

Which protocol does Samba implement to provide file sharing services to Windows clients?

Accepted Answer

SMB. Samba implements the SMB (Server Message Block) protocol, specifically the CIFS variant, to provide file and printer sharing services to Windows clients. SMB operates over TCP port 445 (direct hosting) or NetBIOS over TCP/IP (ports 137-139), enabling cross-platform file access in mixed Linux/Windows environments.

Answer

HTTP

Answer

AFP

Answer

NFS