Curious about Actual LPIC-3 Mixed Environments (300-300) Exam Questions?

Correct : C

Consistent Copy of LDB Files:

C . ldbbackup: The ldbbackup command is used to create a consistent copy of LDB files. LDB files are used by Samba to store data in a database format. The ldbbackup utility ensures that the data is copied in a consistent state, which is crucial for backup and recovery processes.

Samba documentation on ldbbackup

General LDB management guides

Correct : A

Adding SSSD to /etc/nsswitch.conf:

To include SSSD (System Security Services Daemon) as a source of information in the /etc/nsswitch.conf file, the service name sss must be added. This is specified without any parameters. The sss service allows the system to retrieve information from various sources, such as LDAP, Kerberos, and others, as configured in SSSD.

SSSD documentation

nsswitch.conf configuration guidelines

Correct : A, B

Default Group Policy Objects in AD:

A . Default Domain Policy: This is a built-in GPO that is applied to all users and computers in the domain. It contains security settings, password policies, and other domain-wide configurations.

B . Default Domain Controllers Policy: This GPO is specifically applied to the Domain Controllers organizational unit (OU). It contains settings relevant to domain controllers, such as security settings and audit policies.

Active Directory Group Policy documentation

Best practices for managing Group Policy in Active Directory

Correct : C, D, E

Pluggable Authentication Modules (PAM) provides a system of libraries that handle the authentication tasks of applications (services) on a Linux system. These libraries are loaded dynamically and can be configured in the /etc/pam.d directory or in /etc/pam.conf. The PAM modules are divided into four types:

auth (authentication): This module type is responsible for authenticating the user, setting up user credentials, and initiating a session.

account: This module type manages account policies such as password expiration, access restrictions, and checking user permissions.

password: This module type handles the updating of authentication tokens, such as passwords.

session: This module type manages tasks that need to be performed at the beginning and end of a session, like mounting directories or logging.

Linux PAM Documentation

Understanding PAM

Correct : A

The smbclient command is used to access shared resources on a server running the SMB/CIFS protocol. To authenticate using an existing Kerberos token, the -k option is used. This instructs smbclient to use Kerberos for authentication, assuming that the user already has a valid Kerberos ticket (usually obtained via the kinit command).

Example:

smbclient //server/share -k

smbclient man page

Kerberos Authentication with Samba