EMT Practice Test

1. Question Content...

---

Question1: Which directive in a Nginx server configuration block defines the TCP ports on which the virtual host will be available, and which protocols it will use?
(Specify ONLY the option name without any values.)

Question2: Which Apache HTTPD configuration directive specifies the RSA private key that was used in the generation of the SSL certificate for the server?

Question3: If there is no access directive, what is the default setting for OpenLDAP?

Question4: Which of the following statements is true regarding the NFSv4 pseudo file system on the NFS server?

Question5: Fill in the blank.
What configuration directive of the Apache HTTPD server defines where log files are stored?
(Specify ONE of the directives without any other options.)

Question6: In order to export /usr and /bin via NFSv4, /exports was created and contains working bind mounts to /usr and /bin.
The following lines are added to /etc/exports on the NFC server:

After running mount-tnfsv4 server://mnt of an NFC-Client, it is observed that /mnt contains the content of the server's /usr directory instead of the content of the NFSv4 foot folder.
Which option in /etc/exports has to be changed or removed in order to make the NFSv4 root folder appear when mounting the highest level of the server?
(Specify ONLY the option name without any values or parameters.)

Question7: Which of the following OpenVPN configuration options makes OpenVPN forward network packets between VPN clients itself instead of passing the packets on to the Linux host which runs the OpenVPN server for further processing?

Question8: Which of the following statements is INCORRECT regarding the LDIF file format?

Question9: Which of these tools provides DNS information in the following format?

Question10: Which command is used to administer IPv6 netfilter rules?

Question11: When using mod_authz_core, which of the following strings can be used as an argument to Require in an Apache HTTPD configuration file to specify the authentication provider?
(Choose three.)

Question12: In order to join a file server to the Active Directory domain intra.example.com, the following smb.confhas been created:

The command net ads joinraises an error and the server is not joined to the domain. What should be done to successfully join the domain?

Question13: When trying to reverse proxy a web server through Nginx, what keyword is missing from the following configuration sample?

Question14: Which of the following nmap parameters scans a target for open TCP ports? (Choose two.)

Question15: With fail2ban, what is a 'jail'?

Question16: How are PAM modules organized and stored?

Question17: What option in the client configuration file would tell OpenVPN to use a dynamic source port when making a connection to a peer?

Question18: Which Linux user is used by vsftpd to perform file system operations for anonymous FTP users?

Question19: Which of these tools provides DNS information in the following format?

Question20: What is the purpose of DANE?

Question21: Which of the following sshd configuration should be set to no in order to fully disable password based logins? (Choose two.)

Question22: Using its standard configuration, how does fail2ban block offending SSH clients?

Question23: The content of which local file has to be transmitted to a remote SSH server in order to be able to log into the remote server using SSH keys?

Question24: For what purpose is TCP/IP stack fingerprinting used by nmap?

Question25: Which of the following information has to be submitted to a certification authority in order to request a web server certificate?

Question26: Which of the following services belongs to NFSv4 and does not exist in NFSv3?

Question27: The Samba configuration file contains the following lines:

A workstation is on the wired network with an IP address of 192.168.1.177 but is unable to access the Samba server. A wireless laptop with an IP address 192.168.2.93 can access the Samba server. Additional trouble shooting shows that almost every machine on the wired network is unable to access the Samba server.
Which alternate host allow declaration will permit wired workstations to connect to the Samba server without denying access to anyone else?

Question28: Which Postfix command can be used to rebuild all of the alias database files with a single invocation and without the need for any command line arguments?

Question29: A host, called lpi, with the MAC address 08:00:2b:4c:59:23 should always be given the IP address of
192.168.1.2 by a DHCP server running ISC DHCPD.
Which of the following configurations will achieve this?

Question30: Select the alternative that shows the correct way to disable a user login for all users except root.

Question31: To allow X connections to be forwarded from or through an SSH server, what configuration keyword must be set to yes in the sshd configuration file?

Question32: What word is missing from the following excerpt of a named.conf file?

Question33: Which OpenLDAP client command can be used to change the password for an LDAP entry?
(Specify ONLY the command without any path or parameters.)

Question34: After running ssh-keygenand accepting the default values, which of the following files are changed or created? (Choose two.)

Question35: When the default policy for the netfilter INPUT chain is set to DROP, why should a rule allowing traffic to localhost exist?

Question36: Performing a DNS lookup with dig results in this answer:

Question37: CORRECT TEXT
In order to specify alterations to an LDAP entry, what keyword is missing from the following LDIF file excerpt?

Specify the keyword only and no other information.

Question38: CORRECT TEXT
What configuration directive of the Apache HTTPD server defines where log files are stored? (Specify ONE of the directives without any other options.)

Question39: In order to protect a directory on an Apache HTTPD web server with a password, this configuration was added to an .htaccessfile in the respective directory:

Furthermore, a file /var/www/dir/ .htpasswdwas created with the following content:
usera:S3cr3t
Given that all these files were correctly processed by the web server processes, which of the following statements is true about requests to the directory?

Question40: Which of the following DNS records could be a glue record?

Question41: Which configuration parameter on a Postfix server modifies only the sender address and not the recipient address?

Question42: What configuration directive of the Apache HTTPD server defines where log files are stored?
(Specify ONE of the directives without any other options.)

Question43: CORRECT TEXT
According to this LDIF excerpt, which organizational unit is Robert Smith part of? (Specify only the organizational unit.)

Question44: In a PAM configuration file, which of the following is true about the required control flag?

Question45: The Samba configuration file contains the following lines:

A workstation is on the wired network with an IP address of 192.168.1.177 but is unable to access the Samba server. A wireless laptop with an IP address 192.168.2.93 can access the Samba server. Additional trouble shooting shows that almost every machine on the wired network is unable to access the Samba server.
Which alternate host allowdeclaration will permit wired workstations to connect to the Samba server without denying access to anyone else?

Question46: Given the following Squid configuration excerpt:
cache_dir ufs /var/spool/squid3/ 1024 16 256
Which of the following directories will exist directly within the directory:
/var/spool/squid3/? (Choose two.)

Question47: How is the LDAP administrator account configured when the rootdnand rootpwdirectives are not present in the slapd.conffile?

Question48: Performing a DNS lookup with digresults in this answer:

Question49: Which of the following actions are available in Sieve core filters? (Choose three.)

Question50: Which Linux user is used by vsftpd to perform file system operations for anonymous FTP users?

Question51: Which of the following DNS records could be a glue record?

Question52: Which option in named.conf specifies which host are permitted to ask for domain name information from the server?

Question53: Which Apache HTTPD configuration directive specifies the RSA private key that was used in the generation of the SSL certificate for the server?

Question54: Which of the following is correct about this excerpt from an LDIF file?

Question55: A user requests a "hidden" Sambashare, named confidential, similar to the Windows Administration Share. How can this be configured?

Question56: Which of the following PAM modules sets and unsets environment variables?

Question57: Which of these tools provides DNS information in the following format?

Question58: Which of the following statements allow the logical combinations of conditions in Sieve filters? (Choose two.)

Question59: To allow X connections to be forwarded from or through an SSH server, what configuration keyword must be set to yesin the sshdconfiguration file?

Question60: With Nginx, which of the following directives is used to proxy requests to a FastCGI application?

Question61: Which of the following types of IPv6 address assignments does DHCPv6 support? (Choose three.)

Question62: Which option within the ISC DHCPD configuration file defines the IPv4 DNS server address(es) to be sent to the DHCP clients?

Question63: What is the path to the global Postfix configuration file? (Specify the full name of the file, including path.)

Question64: There is a restricted area in a site hosted by Apache HTTPD, which requires users to authenticate against the file /srv/www/security/sitepasswd.
Which command is used to CHANGE the password of existing users, without losing data, when Basic authentication is being used?

Question65: For what purpose is TCP/IP stack fingerprinting used by nmap?

Question66: What is the standard port used by OpenVPN?

Question67: Which BIND option should be used to limit the IP addresses from which slave name servers may connect?

Question68: After the installation of Dovecot, it is observed that the dovecot processes are shown in ps ax like this:

In order to associate the processes with users and peers, the username, IP address of the peer and the connection status, which of the following options must be set?

Question69: Fill in the blank.
Which directive in a Nginx server configuration block defines the TCP ports on which the virtual host will be available, and which protocols it will use?
(Specify ONLY the option name without any values.)

Question70: Which of the following actions synchronizes UNIX passwords with the Samba passwords when the encrypted Samba password is changed using smbpasswd?

Question71: The program vsftpd, running in a chroot jail, gives the following error:

Which of the following actions would fix the error?

Question72: What is DNSSEC used for?

Question73: A host, called lpi, with the MAC address 08:00:2b:4c:59:23 should always be given the IP address of 192.168.1.2 by a DHCP server running ISC DHCPD. Which of the following configurations will achieve this?

Question74: When trying to reverse proxy a web server through Nginx, what keyword is missing from the following configuration sample?

Question75: There is a restricted area in a site hosted by Apache HTTPD, which requires users to authenticate against the file /srv/www/security/site*passwd.
Which command is used to CHANGE the password of existing users, without losing data, when Basic authentication is being used?

Question76: Which of the following statements are true regarding Server Name Indication (SNI)? (Choose two.)

Question77: Which of the following services belongs to NFSv4 and does not exist in NFSv3?

Question78: Which global option in squid.confsets the port number or numbers that Squid will use to listen for client requests?