Question 1

In case the following parameters are set in a Samba file share configuration: create mask = 711 force create mode = 750 What are the effective permissions of a file created with the permissions 777?

Accepted Answer

E

Explanation: The effective permissions of a file created with the permissions 777 can be calculated considering the create mask and force create mode. create mask = 711 implies that the permission bits are ANDed with 0711, i.e., only the owner can read, write, and execute. force create mode = 750 implies that certain permission bits are always set, specifically 0750, i.e., read, write, and execute for the owner, and read and execute for the group. The create mask reduces the permissions to 0711, and then force create mode adds the 0750 mask to the result. Original permission: 777 AND with create mask (711): 711 OR with force create mode (750): 751 Thus, the effective permission is 751. Reference: Samba smb.conf man page - create mask

Question 2

Which of the following commands adds a forward DNS record named fileserver01 pointing to the IPv6 address 2001:db8::190 into the DNS zone samba.private on the Samba 4 server dc1?

Accepted Answer

E

Explanation: Command The samba-tool dns add command is used to add DNS records in Samba. Parameters: dc1: Specifies the Samba DNS server. samba.private: The DNS zone. fileserver01: The hostname for the new DNS record. AAAA: Specifies that the record is for an IPv6 address. 2001:db8::190: The IPv6 address to be assigned to the hostname. -U Administrator: Specifies the user performing the operation, in this case, the Administrator. Usage: This command properly adds a forward DNS record for fileserver01 with the specified IPv6 address into the samba.private zone on the server dc1. Reference: Samba DNS Administration

Question 3

Which of the following commands terminates all running instances of the Samba daemon handling for SMB shares?

Accepted Answer

D

Explanation: Samba is a suite of programs that allows SMB/CIFS clients to interact with file and print services on a Linux/UNIX server. smbd is the Samba daemon responsible for handling SMB/CIFS requests. The smbcontrol utility is used to send messages to running Samba daemons. The correct way to terminate all running instances of the Samba daemon handling SMB shares is to send a shutdown message to smbd using the command smbcontrol smbd shutdown. This command ensures that only the smbd processes, which are responsible for handling SMB shares, are terminated without affecting other Samba components like nmbd (NetBIOS name server daemon). Reference: Samba documentation: https://www.samba.org/samba/docs/current/man-html/smbcontrol.1.html

Question 4

Given a proper network and name resolution setup, which of the following commands establishes a trust between a FreeIPA domain and an Active Directory domain?

Accepted Answer

D

Explanation: To establish a trust between a FreeIPA domain and an Active Directory domain, the correct command is ipa trust-add. This command is used to add a trust relationship with an Active Directory (AD) domain. The --type ad specifies the type of the trust, addom is the domain name, --admin Administrator specifies the AD administrator account, and --password prompts for the administrator's password. The complete command looks like this: a trust-add --type ad addom --admin Administrator --password This command will initiate the trust creation process, which involves providing the credentials of the AD administrator. Reference: FreeIPA Trusts FreeIPA Trust Management

Question 5

Which smbclient invocation displays a list of the available SMB shares on the remote Samba server FileSrv1?

Accepted Answer

E

Explanation: The smbclient command is used to access shared resources on a network that uses the SMB (Server Message Block) protocol. To list the available SMB shares on a remote Samba server, the correct invocation is smbclient -L . Here, -L stands for "list" and is the name of the Samba server. Therefore, smbclient -L FileSrv1 will list all the available SMB shares on the server named FileSrv1. Reference: smbclient man page Samba: smbclient Command

Question 6

Which of the following lines is missing in the given [printers] share definition? https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/_LPI_300-300/page_5_img_1.jpg

Accepted Answer

B

Explanation: In the context of a Samba configuration for printer shares, the [printers] section usually requires the printable = yes directive to indicate that the share is meant for printing. Without this directive, Samba would not treat the share as a printer share, even if other settings like path are configured properly. The given snippet is: The line printable = yes is missing and is essential for defining a printer share. Reference: Samba Official Documentation - Printer Sharing

Question 7

Which of the following statements are true regarding the smbpasswd command? (Choose two.)

Accepted Answer

A, B

Explanation: x Parameter: This parameter is used to remove (delete) an account from the Samba database. Example: smbpasswd -x username -a Parameter: This parameter adds a new account to the Samba database. If the account already exists, it will update the account. Example: smbpasswd -a username Other Options: -d Parameter: Disables (not deletes) an account. -e Parameter: Enables a previously disabled account. Password Synchronization: The smbpasswd command does not affect Windows domain controllers; it manages Samba-specific passwords. Reference: smbpasswd Command Documentation

Question 8

Which of the following names identify services within a SSSD configuration file? (Choose three.)

Accepted Answer

A, D, E

Explanation: In the SSSD (System Security Services Daemon) configuration file, various services can be defined to handle different types of access and authentication. The services listed in the SSSD configuration file under the [sssd] section can include: kerberos: This service allows SSSD to handle Kerberos authentication. nss (Name Service Switch): This service provides name resolution and manages user and group information. sudo: This service enables SSSD to provide sudo rules based on the identity provider. These services are specified in the services attribute of the [sssd] section of the sssd.conf file. Example: [sssd] services = nss, pam, sudo domains = LDAP [nss] filter_users = root filter_groups = root [sudo] sudo_provider = ldap Reference: SSSD Services SSSD Man Pages

Question 9

FILL BLANK What service name must be added to a database entry in /etc/nsswitch.conf to include SSSD as a source of information? (Specify ONLY the service name without any parameters.)

Accepted Answer

SSS

Explanation: Adding SSSD to /etc/nsswitch.conf: To include SSSD (System Security Services Daemon) as a source of information in the /etc/nsswitch.conf file, the service name sss must be added. This is specified without any parameters. The sss service allows the system to retrieve information from various sources, such as LDAP, Kerberos, and others, as configured in SSSD. Reference: SSSD documentation nsswitch.conf configuration guidelines

Question 10

FILL BLANK What command checks the Samba configuration file for syntactical correctness? (Specify ONLY the command without any path or parameters.)

Accepted Answer

TESTPARM

Explanation: Purpose of the Command: testparm is used to check the Samba configuration file (smb.conf) for syntax errors. Command Running testparm will read the smb.conf file, parse it, and display any syntax errors or warnings. This helps ensure that the configuration is valid before restarting the Samba service. Usage Example: Simply execute testparm in the terminal, and it will automatically check the default configuration file. Reference: Samba.org - testparm

Question 11

FILL BLANK What attribute starts the declaration of an object in an LDIF file? (Specify ONLY the attribute name without any values.)

Accepted Answer

DN

Explanation: An LDIF (LDAP Data Interchange Format) file is used to represent directory entries in LDAP (Lightweight Directory Access Protocol). Each entry in an LDIF file starts with the dn (Distinguished Name) attribute, which uniquely identifies the entry in the directory. The dn attribute is mandatory and specifies the path to the entry within the LDAP directory. Reference: LDAP documentation: https://ldap.com/ldap-data-interchange-format-ldif/ OpenLDAP LDIF documentation: https://www.openldap.org/doc/admin24/ldif.html

Question 12

FILL BLANK Which command line option instructs smbclient to authenticate using an existing Kerberos token? (Specify ONLY the option name without any values or parameters.)

Accepted Answer

-K

Explanation: The smbclient command is used to access shared resources on a server running the SMB/CIFS protocol. To authenticate using an existing Kerberos token, the -k option is used. This instructs smbclient to use Kerberos for authentication, assuming that the user already has a valid Kerberos ticket (usually obtained via the kinit command). Example: smbclient //server/share -k Reference: smbclient man page Kerberos Authentication with Samba

Question 13

FILL BLANK What option in sms.conf defines where the data of a file share is stored? (Specify ONLY the option name without any values.)

Accepted Answer

PATH

Explanation: path Option: This parameter in smb.conf specifies the directory on the server where the shared data is stored. Usage: Within a share definition, the path option points to the actual location on the filesystem that Samba will share. Example Configuration: [example_share] path = /srv/samba/share Importance: Defining the correct path is crucial for ensuring that the share points to the intended directory with the appropriate data and permissions. Reference: Samba smb.conf man page

Question 14

FILL BLANK Which sub command of net groups commands related to an AD membership, as in the following example? (Specify ONLY the subcommand without any path or parameters.) net ___ join

Accepted Answer

ADS

Explanation: The net command is used to administer Samba and Windows servers. The subcommand ads is used in conjunction with the join command to join a Samba server to an Active Directory domain. The correct subcommand that fits the pattern net ___ join is ads. Reference: Samba net command man page

Question 15

Which parameter within a share definition in the Samba configuration makes Samba only show files and directories on a file share which a user can access?

Accepted Answer

A

Explanation: hide unreadable: This smb.conf option ensures that only files and directories that the user has permissions to access are visible in the file share. Functionality: When set to yes, files and directories that the user cannot read (due to permissions) will be hidden from their view. Security and Usability: This helps in enhancing both security and usability by preventing users from seeing files they cannot access, reducing clutter and potential confusion. Example Configuration: [example_share] hide unreadable = yes Reference: Samba smb.conf Documentation

Free LPI 300-300 Actual Exam Questions