202-450 Practice Test

202-450 Practice Test practice questions, page 2 of 5, with answer review and explanations.

Question 6

What option in the client configuration file would tell OpenVPN to use a dynamic source port when making a connection to a peer?

  1. src-port
  2. remote
  3. source-port
  4. nobind
  5. dynamic-bind

Question 7

Which Linux user is used by vsftpd to perform file system operations for anonymous FTP users?

  1. The Linux user which runs the vsftpd process
  2. The Linux user that owns the root FTP directory served by vsftpd
  3. The Linux user with the same user name that was used to anonymously log into the FTP server
  4. The Linux user root, but vsftpd grants access to anonymous users only to globally read-/writeable files
  5. The Linux user specified in the configuration option ftp_username

Question 8

Which of the following sshd configuration should be set to no in order to fully disable password based logins? (Choose two.)

  1. PAMAuthentication
  2. ChallengegeResponseAuthentication
  3. PermitPlaintextLogin
  4. UsePasswords
  5. PasswordAuthentication

Question 9

When the default policy for the netfilter INPUT chain is set to DROP, why should a rule allowing traffic to localhost exist?

  1. All traffic to localhost must always be allowed
  2. It doesn't matter; netfilter never affects packets addressed to localhost
  3. Some applications use the localhost interface to communicate with other applications
  4. syslogd receives messages on localhost
  5. The iptables command communicates with the netfilter management daemon netfilterd on localhost to create and change packet filter rules

Question 10

FILL BLANK - What command creates a SSH key pair? (Specify ONLY the command without any path or parameters)