Important LPI 300-300 Exam Questions

Answer: A, B

Explanation:

-x Parameter: This parameter is used to remove (delete) an account from the Samba database.

Example: smbpasswd -x username

-a Parameter: This parameter adds a new account to the Samba database. If the account already exists, it will update the account.

Example: smbpasswd -a username

Other Options:

-d Parameter: Disables (not deletes) an account.

-e Parameter: Enables a previously disabled account.

Password Synchronization: The smbpasswd command does not affect Windows domain controllers; it manages Samba-specific passwords.

smbpasswd Command Documentation

Answer: A, B

Explanation:

Default Group Policy Objects in AD:

A . Default Domain Policy: This is a built-in GPO that is applied to all users and computers in the domain. It contains security settings, password policies, and other domain-wide configurations.

B . Default Domain Controllers Policy: This GPO is specifically applied to the Domain Controllers organizational unit (OU). It contains settings relevant to domain controllers, such as security settings and audit policies.

Active Directory Group Policy documentation

Best practices for managing Group Policy in Active Directory

Answer: C, D, E

Explanation:

Pluggable Authentication Modules (PAM) provides a system of libraries that handle the authentication tasks of applications (services) on a Linux system. These libraries are loaded dynamically and can be configured in the /etc/pam.d directory or in /etc/pam.conf. The PAM modules are divided into four types:

auth (authentication): This module type is responsible for authenticating the user, setting up user credentials, and initiating a session.

account: This module type manages account policies such as password expiration, access restrictions, and checking user permissions.

password: This module type handles the updating of authentication tokens, such as passwords.

session: This module type manages tasks that need to be performed at the beginning and end of a session, like mounting directories or logging.

Linux PAM Documentation

Understanding PAM

Answer: D

Explanation:

force directory mode = 0555: This setting in Samba forces the permissions of any newly created directories to be 0555 regardless of what the client requests.

Client Request: If a client creates a directory with permissions 0750, Samba will override this and set the directory's permissions to 0555.

Permissions Breakdown:

0: No permissions for owner.

5: Read and execute permissions for the group.

5: Read and execute permissions for others.

Enforcement: Samba applies this mode strictly to ensure consistency and security as defined by the administrator.

Samba Force Directory Mode Documentation

Answer: E

Explanation:

The smbclient command is used to access shared resources on a network that uses the SMB (Server Message Block) protocol. To list the available SMB shares on a remote Samba server, the correct invocation is smbclient -L <server_name>. Here, -L stands for 'list' and <server_name> is the name of the Samba server. Therefore, smbclient -L FileSrv1 will list all the available SMB shares on the server named FileSrv1.

smbclient man page

Samba: smbclient Command