Check the Free demo of our 300-300 Exam Dumps with 55 Questions [Q11-Q33]

February 4, 2025 latestexam 0 Comments

Rate this post

Check the Free demo of our 300-300 Exam Dumps with 55 Questions

Clear your concepts with 300-300 Questions Before Attempting Real exam

The LPI 300-300 (LPIC-3 Exam 300: Mixed Environments, version 3.0) exam is a certification exam that is designed for professionals who want to demonstrate their skills and knowledge in mixed IT environments. 300-300 exam is intended for individuals who have already earned the LPIC-2 certification and are looking to further enhance their skills and expertise in mixed environments. 300-300 exam tests the candidate’s knowledge of advanced Linux administration skills, including configuration of various network services, such as DNS, DHCP, and NFS, among others.

NO.11 Which parameter within a share definition in the Samba configuration makes Samba only show files and directories on a file share which a user can access?

hide unreadable = yes

valid files = read,write

browse mask = 000

browseable = readable

display mode = 100

hide unreadable: This smb.conf option ensures that only files and directories that the user has permissions to access are visible in the file share.
Functionality: When set to yes, files and directories that the user cannot read (due to permissions) will be hidden from their view.
Security and Usability: This helps in enhancing both security and usability by preventing users from seeing files they cannot access, reducing clutter and potential confusion.
Example Configuration:
[example_share] hide unreadable = yes
Reference:
Samba smb.conf Documentation

NO.12 How is the Global Catalog of an Active Directory domain accessed?

Through LDAP queries to the ports 3268 (plain text) and 3269 (TLS encrypted).

Through the share GCS SMB which is available on each domain controller.

Through GCS records in the DNS sub zone _gc in the domain’s DNS zone.

Through LDAP queries to the base dn CN=GC in the standard LDAP directory.

Through SRV records in the DNS sub zone _msgc in the domain’s DNS zone.

Global Catalog: The Global Catalog is a distributed data repository that contains a searchable, partial representation of every object in every domain in a multi-domain Active Directory forest.
Access Method: It is accessed through LDAP queries to specific ports:
Port 3268: For plain text (unencrypted) LDAP queries.
Port 3269: For LDAP queries encrypted with TLS.
Other Options:
GCS SMB share, GCS records, SRV records, CN=GC in LDAP: These do not provide the correct method to access the Global Catalog.
Reference:
Microsoft Documentation on Active Directory Global Catalog

NO.13 Which of the following statements is true regarding Samba 4?

Samba 4 is only a minor update to Samba 3, which fixes smaller bugs and contains no new features.

Microsoft Windows clients cannot connect to Samba 4 servers.

Samba 4 can serve as an Active Directory Domain Controller.

Samba 4 includes an own file system, sambafs, to format block devices.

Integration of Samba 4 in an existing Active Directory Domain is not possible.

Samba 4 Features: Samba 4 introduces major enhancements over Samba 3, including the ability to function as an Active Directory (AD) Domain Controller.
Capability as AD Controller:
Samba 4 includes support for AD protocols, allowing it to manage domain users and computers similar to a Windows AD server.
Incorrect Statements Clarified:
Samba 4 is a significant update with new features.
Windows clients can connect to Samba 4 servers.
Samba 4 does not include a proprietary file system called sambafs.
Samba 4 can integrate with existing AD domains.
Reference:
Samba Wiki – Samba4

NO.14 In a Samba configuration file, which of the following variables represents the domain of the current user?

In a Samba configuration file, variables can be used to represent dynamic values.
The %D variable represents the domain of the current user.
This variable can be used in various configuration directives to customize the behavior of Samba services based on the user’s domain.
Reference:
Samba variables documentation: https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html

NO.15 Which of the following keywords are module types for PAM? (Choose three.)

cache

authentication

password

session

account

Pluggable Authentication Modules (PAM) provides a system of libraries that handle the authentication tasks of applications (services) on a Linux system. These libraries are loaded dynamically and can be configured in the /etc/pam.d directory or in /etc/pam.conf. The PAM modules are divided into four types:
auth (authentication): This module type is responsible for authenticating the user, setting up user credentials, and initiating a session.
account: This module type manages account policies such as password expiration, access restrictions, and checking user permissions.
password: This module type handles the updating of authentication tokens, such as passwords.
session: This module type manages tasks that need to be performed at the beginning and end of a session, like mounting directories or logging.
Reference:
Linux PAM Documentation
Understanding PAM

NO.16 Which option in smb.conf defines the domain of which the server is a member?

member domain

basedn

domain

realm

In smb.conf, the realm option specifies the Kerberos realm for the Active Directory of which the server is a member. This option is crucial for integrating the Samba server into an AD environment.
Reference:
Samba smb.conf man page – realm

NO.17 When logging into a windows workstation which is member of an Active Directory domain, which of the following user names refers to the local account bob instead of the domain-wide account bob?

bob@local

%bob%

.bob

“bob”

bob$

When logging into a Windows workstation that is a member of an Active Directory domain, the .\ prefix is used to specify a local user account rather than a domain account. Therefore, to refer to the local account bob, you would use .\bob.
Reference:
How to Log On to Your Computer if You Are a Domain User
Windows Logon Naming Conventions

NO.18 FILL BLANK
Which sub command of net groups commands related to an AD membership, as in the following example? (Specify ONLY the subcommand without any path or parameters.) net ___ join

ads
Explanation:
The net command is used to administer Samba and Windows servers. The subcommand ads is used in conjunction with the join command to join a Samba server to an Active Directory domain. The correct subcommand that fits the pattern net ___ join is ads.
Reference:
Samba net command man page

NO.19 Which Samba utility, when launched with the appropriate parameters, generates the following output?

smbcacls

smbclient

getfacl

smbxattr

smbfacl

The smbcacls utility is used to manage Windows ACLs on Samba shares. The output format shown in the image suggests it relates to detailed ACL information, which is typically generated by smbcacls.
Reference:
Samba smbcacls man page

NO.20 Which of the following groups exists by default in an Active Directory domain?

Domain Administrators

Domain Users

Domain 31aclclisc

Domain Update Role Accounts

Unassigned Users

In an Active Directory domain, the Domain Users group exists by default. This group includes all user accounts created in the domain and is commonly used for assigning permissions and rights to all users.
Reference:
Microsoft Docs – Active Directory Default Groups

NO.21 Which service unifies Linux and Windows account management by allowing a Linux system to include Windows domain users in the Linux user database?

smbpasswdd

sudo

NIS

Winbind

OpenLDAP

Winbind: This service is used to unify Linux and Windows account management by allowing a Linux system to include Windows domain users in the Linux user database.
Functionality: Winbind enables Linux systems to retrieve user and group information from a Windows NT-based domain or Active Directory.
Other Services:
smbpasswdd, sudo, NIS, OpenLDAP: These services do not provide the same functionality for unifying account management between Linux and Windows.
Reference:
Samba Winbind Documentation

NO.22 Which of the following lines is missing in the given [printers] share definition?

printcap name = cups

printable = yes

print script = /usr/bin/lp -d %P %s

print admin = Administrator, root, @lpadmin

load printers = yes

In the context of a Samba configuration for printer shares, the [printers] section usually requires the printable = yes directive to indicate that the share is meant for printing. Without this directive, Samba would not treat the share as a printer share, even if other settings like path are configured properly.
The given snippet is:
The line printable = yes is missing and is essential for defining a printer share.
Reference:
Samba Official Documentation – Printer Sharing

NO.23 Which parameters are available for samba-tool group add? (Choose two.)

–default-gpo

–groupou

–login-script

–sid

–group-type

The samba-tool group add command is used to add a new group to the Samba Active Directory. This command has several parameters to customize the group creation process. Two of the available parameters are –sid and –group-type.
–sid:
The –sid parameter allows you to specify a Security Identifier (SID) for the new group.
Example usage:
samba-tool group add mygroup –sid=S-1-5-21-1234567890-123456789-1234567890-1234 This command will create a new group named mygroup with the specified SID.
–group-type:
The –group-type parameter allows you to specify the type of the group being created. This can be a security group or a distribution group.
Example usage:
samba-tool group add mygroup –group-type=security
This command will create a new security group named mygroup.
Reference:
Samba Official Documentation: samba-tool
Samba Active Directory Management: Managing Groups

NO.24 Which of the following commands adds a forward DNS record named fileserver01 pointing to the IPv6 address 2001:db8::190 into the DNS zone samba.private on the Samba 4 server dc1?

net dns -S dc1 -U Administrator addrecord fileserver01.samba.private AAAA 2001:db8::190

dnstool -f dns.tdb add fileserver01.samba.private AAAA 2001:db8::190 -U Administrator

samba-dns dynupdate -S dc1 -U Administrator -h fileserver01.samba.private -t AAAA -V 2001:db8::190

nsupdatesmb -U Administrator //dc1/samba.private/fileserver01 add AAAA 2001:db8::190

samba-tool dns add dc1 samba.private fileserver01 AAAA 2001:db8::190 -U Administrator

Command The samba-tool dns add command is used to add DNS records in Samba.
Parameters:
dc1: Specifies the Samba DNS server.
samba.private: The DNS zone.
fileserver01: The hostname for the new DNS record.
AAAA: Specifies that the record is for an IPv6 address.
2001:db8::190: The IPv6 address to be assigned to the hostname.
-U Administrator: Specifies the user performing the operation, in this case, the Administrator.
Usage: This command properly adds a forward DNS record for fileserver01 with the specified IPv6 address into the samba.private zone on the server dc1.
Reference:
Samba DNS Administration

NO.25 Which group of commands manages the directory replication in an active directory domain?

samba-tool repl

samba-tool directory

samba-tool drs

samba-tool domain

samba-tool sync

samba-tool drs: This set of commands is used to manage directory replication in an Active Directory domain. DRS stands for Directory Replication Service.
Functionality: It provides various subcommands to monitor, manage, and troubleshoot replication issues.
Other Commands:
samba-tool repl, directory, domain, sync: These do not specifically manage directory replication in the same way as samba-tool drs.
Reference:
Samba DRS Command Documentation

NO.26 FILL BLANK
What attribute starts the declaration of an object in an LDIF file? (Specify ONLY the attribute name without any values.)

dn
Explanation:
An LDIF (LDAP Data Interchange Format) file is used to represent directory entries in LDAP (Lightweight Directory Access Protocol).
Each entry in an LDIF file starts with the dn (Distinguished Name) attribute, which uniquely identifies the entry in the directory.
The dn attribute is mandatory and specifies the path to the entry within the LDAP directory.
Reference:
LDAP documentation: https://ldap.com/ldap-data-interchange-format-ldif/ OpenLDAP LDIF documentation: https://www.openldap.org/doc/admin24/ldif.html

NO.27 A Samba 4 server provides DNS information regarding an Active Directory Domain. All other DNS information is provided by an additional DNS server. Which of the following solutions ensures that the clients of the Samba server can look up all DNS records including those from the domain?

The additional DNS server is configured in the file /etc/resolv.conf on the Samba server and the option dns forwarder = yes is set in smb.conf.

The search domain of all clients is set to the Active Directory domain name. All clients query only the additional DNS server and not a domain controller.

Both the Samba server and the additional DNS server are configured on the clients. This ensures that the Samba server is listed first in each client’s resolv.conf.

All clients are configured to send DNS queries to the additional DNS server only. The Samba server’s smb.conf contains the option wins dns proxy = yes to provide all domain-related naming information via the NetBIOS name service independently from DNS.

The additional DNS server is configured in the option dns forwarder in smb.conf. All clients query the Samba server for any DNS information.

dns forwarder: This smb.conf option specifies the DNS server to which queries should be forwarded if they cannot be resolved locally by the Samba server.
Configuration:
Add dns forwarder = <additional_DNS_server_IP> to smb.conf on the Samba server.
Ensure all clients are configured to query the Samba server for DNS information.
Process:
Clients send all DNS queries to the Samba server.
If the Samba server cannot resolve a query locally, it forwards the request to the additional DNS server.
Benefit: This ensures that all DNS records, including those from the Active Directory domain and other DNS information, can be resolved by the clients.
Reference:
Samba DNS Forwarding

NO.28 The configuration of a Samba share contains the following line:
force directory mode = 0555
If a client creates a new directory with the permissions 0750, which permissions will the resulting directory have in the Samba server’s file system?

0755

0750

0555

0777

force directory mode = 0555: This setting in Samba forces the permissions of any newly created directories to be 0555 regardless of what the client requests.
Client Request: If a client creates a directory with permissions 0750, Samba will override this and set the directory’s permissions to 0555.
Permissions Breakdown:
0: No permissions for owner.
5: Read and execute permissions for the group.
5: Read and execute permissions for others.
Enforcement: Samba applies this mode strictly to ensure consistency and security as defined by the administrator.
Reference:
Samba Force Directory Mode Documentation

NO.29 Which of the following statements about automount in a FreeIPA domain are true? (Choose two.)

In a FreeIPA domain, mount points for automount are always directories.

The command ipa automount up mounts all file systems handled by automount on a FreeIPA client.

The base configuration file for automount is /etc/auto.master.

In a FreeIPA domain, automount requires SSSD to be installed on each client.

In a FreeIPA domain, automount can only mount NFS shares from FreeIPA servers.

Automounting in a FreeIPA domain involves several key aspects:
Base Configuration File (/etc/auto.master): The auto.master file is the main configuration file for the automounter. It contains the master map which defines mount points and their corresponding maps. This file is crucial for setting up automount points.
Example entry in /etc/auto.master:
plaintext
Copy code
/home /etc/auto.home
SSSD Requirement: In a FreeIPA domain, automount requires the System Security Services Daemon (SSSD) to be installed and configured on each client. SSSD is used to retrieve automount maps from the FreeIPA server, enabling the automount feature to function correctly.
Example configuration in /etc/sssd/sssd.conf:
[sssd] services = nss, pam, autofs config_file_version = 2 domains = example.com [domain/example.com] autofs_provider = ipa ipa_server = _srv_ Reference:
Automount Configuration
FreeIPA SSSD Integration

NO.30 Which of the following commands open NFSv4 ACLs in an editor? (Choose two.)

nfs4_setfacl -e

nfs4_editfacl

nfs4_stat -e –acl

nfs4_chmod -i

nfs4_conf

To open NFSv4 ACLs in an editor, the following commands can be used:
nfs4_setfacl -e: This command is used to set NFSv4 ACLs, and the -e option opens the ACLs in an editor for modification. The command usage is:
This opens the ACL editor where the user can modify the ACLs for the specified file.
nfs4_editfacl: This command is a more intuitive way to edit NFSv4 ACLs directly in an editor. It provides a user-friendly interface for managing ACLs.
Reference:
NFSv4 ACL Tools Documentation
NFSv4 ACLs

NO.31 Which of the following FSMO roles exist? (Choose two.)

File Server

Directory Server

PDC Emulator

RID Master

Global Catalog

Flexible Single Master Operations (FSMO) roles, also known as operations master roles, are specialized domain controller tasks in an Active Directory environment. The FSMO roles include:
C . PDC Emulator
The Primary Domain Controller (PDC) Emulator is responsible for synchronizing time and managing password changes.
D . RID Master
The Relative ID (RID) Master allocates blocks of RIDs to each domain controller in the domain.
Reference:
Microsoft Docs – FSMO Roles

NO.32 FILL in BLANK
What option in sms.conf defines where the data of a file share is stored? (Specify ONLY the option name without any values.)

path
Explanation:
path Option: This parameter in smb.conf specifies the directory on the server where the shared data is stored.
Usage: Within a share definition, the path option points to the actual location on the filesystem that Samba will share.
Example Configuration:
[example_share] path = /srv/samba/share
Importance: Defining the correct path is crucial for ensuring that the share points to the intended directory with the appropriate data and permissions.
Reference:
Samba smb.conf man page

Loading …

Lpi 300-300 exam consists of 60 multiple-choice and fill-in-the-blank questions, and candidates are given 90 minutes to complete the exam. 300-300 exam is available in English, German, Portuguese, and Spanish, and it can be taken at any Pearson VUE testing center around the world. 300-300 exam fee varies depending on the location, but it is generally around $200.

Get professional help from our 300-300 Dumps PDF: https://www.latestcram.com/300-300-exam-cram-questions.html

Related Certifications

E-BW4HANA207 (1)
C_HRHPC_2205 (1)
C-S4CWM-2302 (1)
C_TS452_2021 (1)
C_BOWI_42 (1)
C_HRHPC_2305 (1)
C_C4H420_13 (1)
C_IBP_2211 (1)
C-TS422-2020 (1)
C-HCADM-02 (1)

Free Cram & Latest Exams Dumps

Check the Free demo of our 300-300 Exam Dumps with 55 Questions [Q11-Q33]

leave a comment Cancel reply

Related Certifications

Recent Posts

Archives

Categories