[Apr-2024] Get 100% Real 202-450 Exam Questions, Accurate & Verified ExamsLabs Dumps in the Real Exam! [Q18-Q32] : Exams Labs Braindumps : http://blog.examslabs.com

NEW QUESTION 18
It has been discovered that the company mail server is configured as an open relay. Which of the following actions would help prevent the mail server from being used as an open relay while maintaining the possibility to receive company mails? (Choose two.)

Restrict Postfix to only accept e-mail for domains hosted on this server

Configure Dovecot to support IMAP connectivity

Configure netfilter to not permit port 25 traffic on the public network

Restrict Postfix to only relay outbound SMTP from the internal network

Upgrade the mailbox format from mbox to maildir

NEW QUESTION 19
Select the Samba option below that should be used if the main intention is to setup a guest printer service?

security = cups

security = ldap

security = pam

security = share

security = printing

NEW QUESTION 20
In which CIFS share must printer drivers be placed to allow Point’n’Print driver deployment on Windows?

winx64drv$

print$

The name of the share is specified in the option print driver share within each printable share in smb.

conf pnpdrivers$

NETLOGON

NEW QUESTION 21
What word is missing from the following excerpt of a named.conf file?

networks

net

list

acl

group

NEW QUESTION 22
Which of the following sshd configuration should be set to no in order to fully disable password based logins?
(Choose two.)

PAM Authentication

Challenge Response Authentication

Permit Plaintext Login

Use Passwords

Password Authentication

NEW QUESTION 23
Which of the following Samba services handles the membership of a file server in an Active Directory domain?

winbindd

nmbd

msadd

admemb

samba

NEW QUESTION 24
In order to protect a directory on an Apache HTTPD web server with a password, this configuration was added to an .htaccessfile in the respective directory:

Furthermore, a file /var/www/dir/ .htpasswdwas created with the following content:
usera:S3cr3t
Given that all these files were correctly processed by the web server processes, which of the following statements is true about requests to the directory?

The user useracan access the site using the password s3cr3t

Accessing the directory as useraraises HTTP error code 442 (User Not Existent)

Requests are answered with HTTP error code 500 (Internal Server Error)

The browser prompts the visitor for a username and password but logins for userado not seem to work

The web server delivers the content of the directory without requesting authentication

NEW QUESTION 25
FILL BLANK
Which OpenLDAP client command can be used to change the password for an LDAP entry? (Specify ONLY the command without any path or parameters.)

NEW QUESTION 26
Fill in the blank.
Which directive in a Nginx server configuration block defines the TCP ports on which the virtual host will be available, and which protocols it will use?
(Specify ONLY the option name without any values.)

NEW QUESTION 27
A BIND server should be upgraded to use TSIG. Which configuration parameters should be added if the server should use the algorithm hmac-md5 and the key skrKc4DoTzi/takIlPi7JZA==?

Option A

Option B

Option C

Option D

Option E

NEW QUESTION 28
What is the name of the network security scanner project which, at the core, is a server with a set of network vulnerability tests?

NetMap

OpenVAS

Smartscan

Wireshark

NEW QUESTION 29
With fail2ban, what is a ‘jail’?

A netfilter rules chain blocking offending IP addresses for a particular service

A group of services on the server which should be monitored for similar attack patterns in the log files

A filter definition and a set of one or more actions to take when the filter is matched

The chroot environment in which fail2ban runs

NEW QUESTION 30
Using its standard configuration, how does fail2ban block offending SSH clients?

By rejecting connections due to its role as a proxy in front of SSHD.

By modifying and adjusting the SSHD configuration.

By creating and maintaining netfilter rules.

By creating null routes that drop any answer packets sent to the client.

By modifying and adjusting the TCP Wrapper configuration for SSHD.

NEW QUESTION 31
Which of the following authentication mechanisms are supported by Dovecot? (Choose three.)

ldap

digest-md5

cram-md5

plain

krb5

NEW QUESTION 32
Which of the following OpenVPN configuration options makes OpenVPN forward network packets between VPN clients itself instead of passing the packets on to the Linux host which runs the OpenVPN server for further processing?

inter-client-traffic

client-to-client

client-router

client-pass

grant-client-traffic