300-100 | A Review Of Certified 300-100 exam question

Question No: 1

Which option for the pam_ldap module specifies a file from which the module's global settings can be read?

A. default

B. global

C. config

D. include

Answer: C

Question No: 2

When integrating Samba and OpenLDAP, what schema needs to be included in the OpenLDAP slapd.conf?

A. samba.schema

B. windows.schema

C. java.schema

D. microsoft.schema

E. nis.schema

Answer: A

Question No: 3

After modifying the indexes for a database in slapd.conf and running slapindex, the slapd daemon refuses to start when its init script is called. What is the most likely cause of this?

A. The indexes are not compatible with the init script.

B. The init script cannot be run after executing slapindex, without first signing the indexes with slapsign.

C. The init script has identified one or more invalid indexes.

D. The init script is starting slapd as an ordinary user, and the index files are owned by root.

Answer: D

Question No: 4

When preparing the delivery of printer drivers from Samba to Windows clients, which of the following requirements have to be fulfilled? (Select TWO correct answers.)

A. The driver must be associated with the printer either by Samba's rpcclient command or by the Windows Add Printer wizard.

B. The driver has to be put on a Samba share called print$.

C. The driver has to be put on the NETLOGON-share in a sub-directory with the same name as the printer.

D. The drivers file name must be specified with the nt driver option in the printers share declaration.

Answer: AB

Question No: 5

What is true about the following share's access properties? (Choose TWO correct answers.) [projects]

path = /data/projects read only = no

admin users = timo, taki, @managers

A. @managers will be resolved as a Winbind group.

B. The timo and taki users can manipulate files regardless of the file system permissions.

C. @managers will be resolved as a Unix group.

D. @managers is a builtin default Samba group.

E. The "admin users" can be applied only to print shares.

Answer: BC

Question No: 6

Which port in TCP/IP communication is used for Kerberos v5?

A. 888

B. 86

C. 88

D. 90

Answer: C

Question No: 7

It is desired to restrict access to the IPC$ share to one specific machine. The setting hosts allow = 192.168.0.3 is added to the share configuration. Later it is discovered that other workstations may still access it. What setting was forgotten in the share configuration?

A. deny hosts = 0.0.0.0/0

B. deny hosts = 255.255.255.255/32

C. hosts deny = 0.0.0.0/0

D. hosts deny = 255.255.255.255/32

Answer: C

Question No: 8

What is true about the Samba configuration options create mask?

A. Each permission bit that is set (1) in create mask cannot be set on a file created by Samba even if the client requests it to be set.

B. Each permission bit that is cleared (0) in create mask is only set on a file created by Samba if the client explicitly sets the bit.

C. Each permission bit that is set (1) in create mask is always set on a file created by Samba regardless of the permissions set by the client.

D. Each permission bit that is cleared (0) in create mask is always cleared on a file created by Samba even if the client explicit sets the bit.

Answer: D

Question No: 9

Below is an ACL entry from a slapd.conf file. Fill in the access control level setting to prevent users from retrieving passwords.

access to attrs=lmPassword,ntPassword by dn="cn=smbadmin,dc=samplenet" write by *

Answer:

none

Question No: 10

Which of the following options can be used to limit access to a share? (Select TWO correct answers)

A. untrusted users

B. write list

C. valid users

D. valid groups

E. accept list

Answer: BC