A Samba 4 server provides DNS information regarding an Active Directory Domain. All other DNS information is provided by an additional DNS server. Which of the following solutions ensures that the clients of the Samba server can look up all DNS records including those from the domain?
Answer : E
dns forwarder: This smb.conf option specifies the DNS server to which queries should be forwarded if they cannot be resolved locally by the Samba server.
Configuration:
Add dns forwarder =
Ensure all clients are configured to query the Samba server for DNS information.
Process:
Clients send all DNS queries to the Samba server.
If the Samba server cannot resolve a query locally, it forwards the request to the additional DNS server.
Benefit: This ensures that all DNS records, including those from the Active Directory domain and other DNS information, can be resolved by the clients.
Samba DNS Forwarding
Which of the following groups exists by default in an Active Directory domain?
Answer : B
In an Active Directory domain, the Domain Users group exists by default. This group includes all user accounts created in the domain and is commonly used for assigning permissions and rights to all users.
Microsoft Docs - Active Directory Default Groups
In a Samba configuration file, which of the following variables represents the domain of the current user?
Answer : A
In a Samba configuration file, variables can be used to represent dynamic values.
The %D variable represents the domain of the current user.
This variable can be used in various configuration directives to customize the behavior of Samba services based on the user's domain.
Samba variables documentation: https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html
FILL BLANK
What attribute starts the declaration of an object in an LDIF file? (Specify ONLY the attribute name without any values.)
Answer : A
An LDIF (LDAP Data Interchange Format) file is used to represent directory entries in LDAP (Lightweight Directory Access Protocol).
Each entry in an LDIF file starts with the dn (Distinguished Name) attribute, which uniquely identifies the entry in the directory.
The dn attribute is mandatory and specifies the path to the entry within the LDAP directory.
LDAP documentation: https://ldap.com/ldap-data-interchange-format-ldif/
OpenLDAP LDIF documentation: https://www.openldap.org/doc/admin24/ldif.html
Which of the following statements about automount in a FreeIPA domain are true? (Choose two.)
Answer : C, D
Automounting in a FreeIPA domain involves several key aspects:
Base Configuration File (/etc/auto.master): The auto.master file is the main configuration file for the automounter. It contains the master map which defines mount points and their corresponding maps. This file is crucial for setting up automount points.
Example entry in /etc/auto.master:
plaintext
Copy code
/home /etc/auto.home
SSSD Requirement: In a FreeIPA domain, automount requires the System Security Services Daemon (SSSD) to be installed and configured on each client. SSSD is used to retrieve automount maps from the FreeIPA server, enabling the automount feature to function correctly.
Example configuration in /etc/sssd/sssd.conf:
[sssd] services = nss, pam, autofs config_file_version = 2 domains = example.com [domain/example.com] autofs_provider = ipa ipa_server = _srv_
Automount Configuration
FreeIPA SSSD Integration
FILL BLANK
What service name must be added to a database entry in /etc/nsswitch.conf to include SSSD as a source of information? (Specify ONLY the service name without any parameters.)
Answer : A
Adding SSSD to /etc/nsswitch.conf:
To include SSSD (System Security Services Daemon) as a source of information in the /etc/nsswitch.conf file, the service name sss must be added. This is specified without any parameters. The sss service allows the system to retrieve information from various sources, such as LDAP, Kerberos, and others, as configured in SSSD.
SSSD documentation
nsswitch.conf configuration guidelines
Which of the following FSMO roles exist? (Choose two.)
Answer : C
Flexible Single Master Operations (FSMO) roles, also known as operations master roles, are specialized domain controller tasks in an Active Directory environment. The FSMO roles include:
C . PDC Emulator
The Primary Domain Controller (PDC) Emulator is responsible for synchronizing time and managing password changes.
D . RID Master
The Relative ID (RID) Master allocates blocks of RIDs to each domain controller in the domain.
Microsoft Docs - FSMO Roles