LPI 300-300 Exam Practice Test Instant Access

Question 1

FILL BLANK

Which command line option instructs smbclient to authenticate using an existing Kerberos token? (Specify ONLY the option name without any values or parameters.)

Answer : A

The smbclient command is used to access shared resources on a server running the SMB/CIFS protocol. To authenticate using an existing Kerberos token, the -k option is used. This instructs smbclient to use Kerberos for authentication, assuming that the user already has a valid Kerberos ticket (usually obtained via the kinit command).

Example:

smbclient //server/share -k

smbclient man page

Kerberos Authentication with Samba

Question 2

Which of the following groups exists by default in an Active Directory domain?

ADomain Administrators

BDomain Users

CDomain 31aclclisc

DDomain Update Role Accounts

EUnassigned Users

Answer : B

In an Active Directory domain, the Domain Users group exists by default. This group includes all user accounts created in the domain and is commonly used for assigning permissions and rights to all users.

Microsoft Docs - Active Directory Default Groups

Question 3

Which of the following lines is missing in the given [printers] share definition?

Aprintcap name = cups

Bprintable = yes

Cprint script = /usr/bin/lp -d %P %s

Dprint admin = Administrator, root, @lpadmin

Eload printers = yes

Answer : B

In the context of a Samba configuration for printer shares, the [printers] section usually requires the printable = yes directive to indicate that the share is meant for printing. Without this directive, Samba would not treat the share as a printer share, even if other settings like path are configured properly.

The given snippet is:

The line printable = yes is missing and is essential for defining a printer share.

Samba Official Documentation - Printer Sharing

Question 4

Which of the following Samba commands provides comprehensive information and status flags on the user candidate?

Asmbpasswd -l -u candidate

Bnet sam show candidate

Cpdbedit -v -u candidate

Dsamba-tool user list

Egetent smbpasswd candidate

Answer : C

pdbedit: This Samba command is used to manage the user accounts stored in the Samba password database.

-v: The verbose option provides detailed information.

-u candidate: Specifies the user for which to display the information.

Other Commands:

smbpasswd, net sam show, samba-tool user list, getent smbpasswd: These commands do not provide the same comprehensive information and status flags as pdbedit.

Samba pdbedit Documentation

Question 5

In order to generate an individual log file for each of the machines connecting to a Samba server, which of the following statements must be used in the Samba configuration file?

Alog file = /var/log/samba/log.%m

Blog file = /var/log/samba/log.%M

Clog file = /var/log/samba/log.%r

Dlog file = /var/log/samba/log.%I

Elog file = /var/log/samba/log.%c

Answer : A

Individual Log Files:

A . log file = /var/log/samba/log.%m: To generate an individual log file for each machine connecting to a Samba server, the %m variable is used in the log file path. This variable represents the machine name of the connecting client. Thus, the configuration line log file = /var/log/samba/log.%m creates a unique log file for each client machine.

Samba smb.conf manual

Logging configurations in Samba

Question 6

What is a correct statement about FreeIPA ID views?

AID views are used to modify sudo rules on a per host base.

BID views are the FreeIPA equivalent to Active Directory SIDs.

CID views specify new values for attributes of a POSIX user or group.

DID views provide a consecutive numberspace of UIDs and GIDs for FreeIPA users and groups.

EID views always manage IDs from 32768 to 65536.

Answer : C

In FreeIPA, ID views allow administrators to override default POSIX attributes for users and groups. This feature is useful when integrating with other identity management systems, enabling specific attribute values to be used on a per-host basis. This way, different POSIX attributes can be set for the same user or group in different contexts.

FreeIPA: ID Views

FreeIPA Documentation

Question 7

A Samba 4 server provides DNS information regarding an Active Directory Domain. All other DNS information is provided by an additional DNS server. Which of the following solutions ensures that the clients of the Samba server can look up all DNS records including those from the domain?

AThe additional DNS server is configured in the file /etc/resolv.conf on the Samba server and the option dns forwarder = yes is set in smb.conf.

BThe search domain of all clients is set to the Active Directory domain name. All clients query only the additional DNS server and not a domain controller.

CBoth the Samba server and the additional DNS server are configured on the clients. This ensures that the Samba server is listed first in each client's resolv.conf.

DAll clients are configured to send DNS queries to the additional DNS server only. The Samba server's smb.conf contains the option wins dns proxy = yes to provide all domain-related naming information via the NetBIOS name service independently from DNS.

EThe additional DNS server is configured in the option dns forwarder in smb.conf. All clients query the Samba server for any DNS information.

Answer : E

dns forwarder: This smb.conf option specifies the DNS server to which queries should be forwarded if they cannot be resolved locally by the Samba server.

Configuration:

Add dns forwarder = to smb.conf on the Samba server.

Ensure all clients are configured to query the Samba server for DNS information.

Process:

Clients send all DNS queries to the Samba server.

If the Samba server cannot resolve a query locally, it forwards the request to the additional DNS server.

Benefit: This ensures that all DNS records, including those from the Active Directory domain and other DNS information, can be resolved by the clients.

Samba DNS Forwarding

LPI 300-300 LPIC-3: Mixed Environments - Exam 300 - version 3.0 Exam Practice Test