Latest 300-300 Study Guides 2025 - With Test Engine PDF
Get New 300-300 Practice Test Questions Answers
The LPIC-3 Exam 300 consists of 60 multiple-choice and fill-in-the-blank questions, and candidates are given 90 minutes to complete the exam. 300-300 exam covers a range of topics, including virtualization, network management, storage management, and security. Candidates are expected to have a strong understanding of Linux-based systems and be able to manage and maintain these systems in complex mixed environments.
NEW QUESTION # 16
The configuration of a Samba share contains the following line:
force directory mode = 0555
If a client creates a new directory with the permissions 0750, which permissions will the resulting directory have in the Samba server's file system?
- A. 0555
- B. 0777
- C. 0750
- D. 0755
- E. 0750
Answer: A
Explanation:
force directory mode = 0555: This setting in Samba forces the permissions of any newly created directories to be 0555 regardless of what the client requests.
Client Request: If a client creates a directory with permissions 0750, Samba will override this and set the directory's permissions to 0555.
Permissions Breakdown:
0: No permissions for owner.
5: Read and execute permissions for the group.
5: Read and execute permissions for others.
Enforcement: Samba applies this mode strictly to ensure consistency and security as defined by the administrator.
Reference:
Samba Force Directory Mode Documentation
NEW QUESTION # 17
Which parameter in a user object defines on which share the user's roaming profile is stored?
- A. driveMap
- B. profilePath
- C. logonDrive
- D. homePath
- E. autoMount
Answer: B
Explanation:
The profilePath parameter in a user object specifies the path to the user's roaming profile. A roaming profile is a feature in Windows that allows user profile data to be stored on a network share so that users can access their profiles from any workstation within the network. By setting the profilePath, administrators can define where on the network the profile data is stored.
Reference:
Roaming User Profiles
User Account Properties
NEW QUESTION # 18
Which of the following commands adds a forward DNS record named fileserver01 pointing to the IPv6 address 2001:db8::190 into the DNS zone samba.private on the Samba 4 server dc1?
- A. net dns -S dc1 -U Administrator addrecord fileserver01.samba.private AAAA 2001:db8::190
- B. samba-dns dynupdate -S dc1 -U Administrator -h fileserver01.samba.private -t AAAA -V 2001:db8::190
- C. dnstool -f dns.tdb add fileserver01.samba.private AAAA 2001:db8::190 -U Administrator
- D. nsupdatesmb -U Administrator //dc1/samba.private/fileserver01 add AAAA 2001:db8::190
- E. samba-tool dns add dc1 samba.private fileserver01 AAAA 2001:db8::190 -U Administrator
Answer: E
Explanation:
Command The samba-tool dns add command is used to add DNS records in Samba.
Parameters:
dc1: Specifies the Samba DNS server.
samba.private: The DNS zone.
fileserver01: The hostname for the new DNS record.
AAAA: Specifies that the record is for an IPv6 address.
2001:db8::190: The IPv6 address to be assigned to the hostname.
-U Administrator: Specifies the user performing the operation, in this case, the Administrator.
Usage: This command properly adds a forward DNS record for fileserver01 with the specified IPv6 address into the samba.private zone on the server dc1.
Reference:
Samba DNS Administration
NEW QUESTION # 19
Which of the following FSMO roles exist? (Choose two.)
- A. PDC Emulator
- B. RID Master
- C. File Server
- D. Directory Server
- E. Global Catalog
Answer: A
Explanation:
Flexible Single Master Operations (FSMO) roles, also known as operations master roles, are specialized domain controller tasks in an Active Directory environment. The FSMO roles include:
C . PDC Emulator
The Primary Domain Controller (PDC) Emulator is responsible for synchronizing time and managing password changes.
D . RID Master
The Relative ID (RID) Master allocates blocks of RIDs to each domain controller in the domain.
Reference:
Microsoft Docs - FSMO Roles
NEW QUESTION # 20
Which of the following commands can be used to join the local Samba server as a member to the domain samba.private?
- A. samba-tool join samba.private member
- B. samba-tool node set-domain samba.private
- C. samba-tool member add samba.private
- D. samba-tool domain join samba.private member
- E. samba-tool domjoin samba.private
Answer: D
Explanation:
Understanding Samba Domain Join: Joining a Samba server to a domain allows it to authenticate and provide resources to users of that domain.
Command Breakdown: The correct command format for joining a Samba server as a member of a domain involves the "domain join" action followed by the domain name and the role. In this case, "samba.private" is the domain name, and "member" specifies the role.
Command
samba-tool domain join samba.private member:
samba-tool: A command-line utility for managing Samba.
domain join: Specifies the action of joining a domain.
samba.private: The domain to join.
member: The role within the domain.
Reference:
Samba Wiki - Samba Tool
NEW QUESTION # 21
Which of the following statements is true about raw printing with Samba?
- A. Printing jobs are rendered on the client and passed on to the printer by Samba.
- B. Print jobs are submitted as vector files, including font files, which are rendered and printed by Samba.
- C. Printing jobs are always submitted to Samba in raw postscript.
- D. Any printed file, e.g. an office document, is submitted to the printer without any further processing in exactly the same bit sequence as it is stored on disk.
- E. Samba converts printer-specific jobs to raw data to make them printable on an arbitrary printer.
Answer: A
Explanation:
Client-Side Rendering: In Samba, raw printing means that the client machine renders the print job, which includes converting it to a printer-ready format.
Transmission to Printer: This rendered print job is then sent to the Samba server without further processing or alteration. Samba acts merely as a pass-through, sending the job directly to the printer.
Advantages: This method offloads the rendering process from the server to the client, which can be beneficial in environments with diverse printer types and models, reducing the processing load on the server.
Conclusion: Thus, the correct answer is that printing jobs are rendered on the client and passed on to the printer by Samba.
Reference:
Samba Printing Documentation
NEW QUESTION # 22
A Samba 4 server provides DNS information regarding an Active Directory Domain. All other DNS information is provided by an additional DNS server. Which of the following solutions ensures that the clients of the Samba server can look up all DNS records including those from the domain?
- A. The search domain of all clients is set to the Active Directory domain name. All clients query only the additional DNS server and not a domain controller.
- B. Both the Samba server and the additional DNS server are configured on the clients. This ensures that the Samba server is listed first in each client's resolv.conf.
- C. All clients are configured to send DNS queries to the additional DNS server only. The Samba server's smb.conf contains the option wins dns proxy = yes to provide all domain-related naming information via the NetBIOS name service independently from DNS.
- D. The additional DNS server is configured in the file /etc/resolv.conf on the Samba server and the option dns forwarder = yes is set in smb.conf.
- E. The additional DNS server is configured in the option dns forwarder in smb.conf. All clients query the Samba server for any DNS information.
Answer: E
Explanation:
dns forwarder: This smb.conf option specifies the DNS server to which queries should be forwarded if they cannot be resolved locally by the Samba server.
Configuration:
Add dns forwarder = <additional_DNS_server_IP> to smb.conf on the Samba server.
Ensure all clients are configured to query the Samba server for DNS information.
Process:
Clients send all DNS queries to the Samba server.
If the Samba server cannot resolve a query locally, it forwards the request to the additional DNS server.
Benefit: This ensures that all DNS records, including those from the Active Directory domain and other DNS information, can be resolved by the clients.
Reference:
Samba DNS Forwarding
NEW QUESTION # 23
What are benefits of registry based Samba configuration compared to file based configuration? (Choose three.)
- A. Specific attributes of LDAP objects in Active Directory can be overwritten in the configuration registry.
- B. The registry can be edited remotely without logging into the server.
- C. Server processes require less time to start because they do not have to parse the configuration file.
- D. Registry based configuration supports advanced options which do not exist in smb.conf.
- E. Configuration changes become effective immediately without a daemon reload.
Answer: B,C,E
Explanation:
Remote Editing:
A . The registry can be edited remotely without logging into the server: One of the benefits of registry-based Samba configuration is that the registry can be edited remotely. This means administrators can make changes without needing to log into the server directly, facilitating easier and more flexible management.
Improved Startup Time:
C . Server processes require less time to start because they do not have to parse the configuration file: Registry-based configurations can reduce startup time because the Samba server processes do not need to parse a potentially complex smb.conf file. Instead, they access the configuration directly from the registry, which can be faster.
Immediate Effect of Configuration Changes:
D . Configuration changes become effective immediately without a daemon reload: Changes made in the registry are applied immediately and do not require a daemon reload. This can be very advantageous for administrators who need to make quick adjustments without interrupting the service.
Reference:
Samba documentation
Various Samba configuration tutorials and best practice guides
NEW QUESTION # 24
Which of the following commands open NFSv4 ACLs in an editor? (Choose two.)
- A. nfs4_setfacl -e
- B. nfs4_stat -e --acl
- C. nfs4_chmod -i
- D. nfs4_conf
- E. nfs4_editfacl
Answer: A,E
Explanation:
To open NFSv4 ACLs in an editor, the following commands can be used:
nfs4_setfacl -e: This command is used to set NFSv4 ACLs, and the -e option opens the ACLs in an editor for modification. The command usage is:
This opens the ACL editor where the user can modify the ACLs for the specified file.
nfs4_editfacl: This command is a more intuitive way to edit NFSv4 ACLs directly in an editor. It provides a user-friendly interface for managing ACLs.
Reference:
NFSv4 ACL Tools Documentation
NFSv4 ACLs
NEW QUESTION # 25
Which smbclient invocation displays a list of the available SMB shares on the remote Samba server FileSrv1?
- A. smbcontrol -L FileSrv1
- B. smbshares --server FileSrv1
- C. smbmount -L FileSrv1
- D. smbstatus -S FileSrv1
- E. smbclient -L FileSrv1
Answer: E
Explanation:
The smbclient command is used to access shared resources on a network that uses the SMB (Server Message Block) protocol. To list the available SMB shares on a remote Samba server, the correct invocation is smbclient -L <server_name>. Here, -L stands for "list" and <server_name> is the name of the Samba server. Therefore, smbclient -L FileSrv1 will list all the available SMB shares on the server named FileSrv1.
Reference:
smbclient man page
Samba: smbclient Command
NEW QUESTION # 26
FILL BLANK
What service name must be added to a database entry in /etc/nsswitch.conf to include SSSD as a source of information? (Specify ONLY the service name without any parameters.)
Answer:
Explanation:
sss
Explanation:
Adding SSSD to /etc/nsswitch.conf:
To include SSSD (System Security Services Daemon) as a source of information in the /etc/nsswitch.conf file, the service name sss must be added. This is specified without any parameters. The sss service allows the system to retrieve information from various sources, such as LDAP, Kerberos, and others, as configured in SSSD.
Reference:
SSSD documentation
nsswitch.conf configuration guidelines
NEW QUESTION # 27
In an LDIF file using changetype: modify, which of the following options can be used? (Choose two.)
- A. replace
- B. overwrite
- C. patch
- D. add
- E. generate
Answer: A,D
Explanation:
In an LDIF file, changetype: modify is used to specify modifications to an existing LDAP entry.
The add option is used to add new attributes or values to an existing attribute.
The replace option is used to replace existing attribute values with new ones.
These options are used to update the directory information according to the LDAP protocol.
Reference:
LDAP modification operations: https://ldap.com/the-ldif-format/
OpenLDAP modify documentation: https://www.openldap.org/doc/admin24/modify.html
NEW QUESTION # 28
What are benefits of registry based Samba configuration compared to file based configuration? (Choose three.)
- A. Specific attributes of LDAP objects in Active Directory can be overwritten in the configuration registry.
- B. The registry can be edited remotely without logging into the server.
- C. Server processes require less time to start because they do not have to parse the configuration file.
- D. Registry based configuration supports advanced options which do not exist in smb.conf.
- E. Configuration changes become effective immediately without a daemon reload.
Answer: B,C,E
NEW QUESTION # 29
How is the Global Catalog of an Active Directory domain accessed?
- A. Through the share GCS SMB which is available on each domain controller.
- B. Through SRV records in the DNS sub zone _msgc in the domain's DNS zone.
- C. Through LDAP queries to the ports 3268 (plain text) and 3269 (TLS encrypted).
- D. Through GCS records in the DNS sub zone _gc in the domain's DNS zone.
- E. Through LDAP queries to the base dn CN=GC in the standard LDAP directory.
Answer: C
Explanation:
Global Catalog: The Global Catalog is a distributed data repository that contains a searchable, partial representation of every object in every domain in a multi-domain Active Directory forest.
Access Method: It is accessed through LDAP queries to specific ports:
Port 3268: For plain text (unencrypted) LDAP queries.
Port 3269: For LDAP queries encrypted with TLS.
Other Options:
GCS SMB share, GCS records, SRV records, CN=GC in LDAP: These do not provide the correct method to access the Global Catalog.
Reference:
Microsoft Documentation on Active Directory Global Catalog
NEW QUESTION # 30
FILL BLANK
Which command line option instructs smbclient to authenticate using an existing Kerberos token? (Specify ONLY the option name without any values or parameters.)
Answer:
Explanation:
k
Explanation:
The smbclient command is used to access shared resources on a server running the SMB/CIFS protocol. To authenticate using an existing Kerberos token, the -k option is used. This instructs smbclient to use Kerberos for authentication, assuming that the user already has a valid Kerberos ticket (usually obtained via the kinit command).
Example:
smbclient //server/share -k
Reference:
smbclient man page
Kerberos Authentication with Samba
NEW QUESTION # 31
Which parameters are available for samba-tool group add? (Choose two.)
- A. --sid
- B. --group-type
- C. --default-gpo
- D. --login-script
- E. --groupou
Answer: A,B
Explanation:
The samba-tool group add command is used to add a new group to the Samba Active Directory. This command has several parameters to customize the group creation process. Two of the available parameters are --sid and --group-type.
--sid:
The --sid parameter allows you to specify a Security Identifier (SID) for the new group.
Example usage:
samba-tool group add mygroup --sid=S-1-5-21-1234567890-123456789-1234567890-1234 This command will create a new group named mygroup with the specified SID.
--group-type:
The --group-type parameter allows you to specify the type of the group being created. This can be a security group or a distribution group.
Example usage:
samba-tool group add mygroup --group-type=security
This command will create a new security group named mygroup.
Reference:
Samba Official Documentation: samba-tool
Samba Active Directory Management: Managing Groups
NEW QUESTION # 32
Which of the following Samba commands provides comprehensive information and status flags on the user candidate?
- A. pdbedit -v -u candidate
- B. smbpasswd -l -u candidate
- C. getent smbpasswd candidate
- D. samba-tool user list
- E. net sam show candidate
Answer: A
Explanation:
pdbedit: This Samba command is used to manage the user accounts stored in the Samba password database.
-v: The verbose option provides detailed information.
-u candidate: Specifies the user for which to display the information.
Other Commands:
smbpasswd, net sam show, samba-tool user list, getent smbpasswd: These commands do not provide the same comprehensive information and status flags as pdbedit.
Reference:
Samba pdbedit Documentation
NEW QUESTION # 33
Which of the following groups exists by default in an Active Directory domain?
- A. Unassigned Users
- B. Domain Administrators
- C. Domain Update Role Accounts
- D. Domain 31aclclisc
- E. Domain Users
Answer: E
Explanation:
In an Active Directory domain, the Domain Users group exists by default. This group includes all user accounts created in the domain and is commonly used for assigning permissions and rights to all users.
Reference:
Microsoft Docs - Active Directory Default Groups
NEW QUESTION # 34
Which of the following names identify services within a SSSD configuration file? (Choose three.)
- A. smb
- B. sudo
- C. ssh
- D. nss
- E. kerberos
Answer: B,D,E
Explanation:
In the SSSD (System Security Services Daemon) configuration file, various services can be defined to handle different types of access and authentication. The services listed in the SSSD configuration file under the [sssd] section can include:
kerberos: This service allows SSSD to handle Kerberos authentication.
nss (Name Service Switch): This service provides name resolution and manages user and group information.
sudo: This service enables SSSD to provide sudo rules based on the identity provider.
These services are specified in the services attribute of the [sssd] section of the sssd.conf file.
Example:
[sssd] services = nss, pam, sudo domains = LDAP [nss] filter_users = root filter_groups = root [sudo] sudo_provider = ldap Reference:
SSSD Services
SSSD Man Pages
NEW QUESTION # 35
FILL BLANK
Which sub command of net groups commands related to an AD membership, as in the following example? (Specify ONLY the subcommand without any path or parameters.) net ___ join
Answer:
Explanation:
ads
Explanation:
The net command is used to administer Samba and Windows servers. The subcommand ads is used in conjunction with the join command to join a Samba server to an Active Directory domain. The correct subcommand that fits the pattern net ___ join is ads.
Reference:
Samba net command man page
NEW QUESTION # 36
Which of the following sections is always present in sssd.conf?
- A. [local]
- B. [ad]
- C. [sssd]
- D. [autn]
- E. [krb5]
Answer: C
Explanation:
The sssd.conf file is the configuration file for the System Security Services Daemon (SSSD). SSSD provides access to different identity and authentication providers. The configuration file typically contains multiple sections, but the [sssd] section is always present. This section provides global options that apply to all other sections of the file.
Example:
[sssd] config_file_version = 2 services = nss, pam domains = LDAP
Reference:
SSSD Configuration
SSSD Man Pages
NEW QUESTION # 37
The [homes] section of smb.conf contains the parameter browseable = no. What are the resulting consequences? (Choose two.)
- A. When browsing the Samba server, there is no visible share named after the current user.
- B. The homes share can be directly accessed by specifically opening this share by its UNC path.
- C. When browsing the Samba server, there is no visible share called homes.
- D. If the Samba server is part of an Active Director/ Domain, only users in the qroup Se3rowsingUsers can browse the homes share.
- E. When browsing the Samba server, users can open the homes share but they cannot see the content of their home directories.
Answer: A,B
Explanation:
When browseable = no is set in the [homes] section of smb.conf, it prevents the share from appearing in the list of available shares when users browse the server. However, users can still access their home directories if they specify the correct UNC path directly.
A . When browsing the Samba server, there is no visible share named after the current user.
The share will not appear in the list of shares visible to the user during browsing.
D . The homes share can be directly accessed by specifically opening this share by its UNC path.
Users can still access the share by directly typing the path in the form \\servername\username.
Reference:
Samba Official Documentation - Home Directories
NEW QUESTION # 38
......
300-300 Dumps and Exam Test Engine: https://www.itpassleader.com/Lpi/300-300-dumps-pass-exam.html