111.
You want to enable an NFS share where all access to files in the share is anonymous.
Which of the following security options should you use?
- A.You do not have to specify anything; the default setting is based on anonymous access to files.
- B.none
- C.sys
- D.krb5
- Answer & Explanation
- Report
Answer : [B]
Explanation :
Explanation :
| In the default configuration, NFS share access is based on UID matching between the client and server. To enable anonymous user access, you need to specify the sec=none mount option. |
112.
You need to configure a Kerberos-enabled NFS mount. Which of the following
is not a requirement to do so?
- A.Copy the keytab file to /etc/krb5.keytab
- B.Start the nfs-secure service
- C.Use the sec=krb5 (or krb5i or krb5p ) mount option in the mount
- D.Enable the Kerberos service on the client
- Answer & Explanation
- Report
Answer : [D]
Explanation :
Explanation :
| You do not have to enable the Kerberos service on the client to configure a Kerberos-enabled NFS mount. The Kerberos service should be enabled on the NFS server. |
113.
You want to use a Kerberos-enabled NFS mount. Which of the following
mount options should you use to guarantee that a message has not been tampered
with while transmitted. There is no need to encrypt message contents as
well.
- A.krb5
- B.krb5i
- C.krb5p
- D.krb5ip
- Answer & Explanation
- Report
Answer : [B]
Explanation :
Explanation :
| The krb5i mount option guarantees that the message has not been tampered with but does not add encryption. |
114.
You type the command showmount -e to display available mounts on an NFS
server, but you do not get any result. Which of the following is the most likely
explanation?
- A.The NFS client software is not running.
- B.You are using a UID that does not exist on the server.
- C.SELinux is not configured properly.
- D.The firewall does not allow showmount traffic.
- Answer & Explanation
- Report
Answer : [D]
Explanation :
Explanation :
| Showmount is using the NFS portmapper, which is using random UDP ports to make the connection. Portmapper traffic is not automatically allowed when the nfs service is added to the firewall because RPC ports that are needed by showmount are blocked by the firewall. |
115.
You want to log in to an SMB share. Which of the following commands shows
correct syntax for doing so?
- A.mount -o username=sambauser1 //server/share /somewhere
- B.mount -o uname=sambauser1 //server/share /somewhere
- C.mount sambauser1@//server/share /somewhere
- D.mount -o username=sambauser1@//server/share /somewhere
- Answer & Explanation
- Report
Answer : [A]
Explanation :
Explanation :
| To authenticate to a Samba share, you need to use the -o username=sambauser option to specify the username. |
|
|
||||||||||||||||||||||||||||
