Explanation DANE stands for DNS-based Authentication of Named Entities. It is a protocol that provides a way to verify the association of X 509 certificates to DNS host names. X 509 certificates are digital documents that contain the public key and identity information of an entity, such as a web server or an email server. They are used to establish secure connections and authenticate the identity of the entity. However, the traditional way of obtaining and validating X 509 certificates relies on a hierarchical system of trusted third parties, called certificate authorities (CAs), which can be vulnerable to attacks or compromise. DANE aims to enhance the security and trust of X 509 certificates by using DNSSEC, which is a set of extensions to DNS that provide cryptographic signatures and validation for DNS records. DANE allows the owner of a domain name to publish the X 509 certificate or its fingerprint in a DNS record, called a TLSA record, which can be verified by the DNSSEC chain of trust. This way, the client can check the authenticity of the certificate directly from the DNS, without relying on external CAs. DANE can also be used to specify which CAs are authorized to issue certificates for a domain name, or to indicate that no CA is needed at all. DANE can be applied to various protocols that use X 509 certificates, such as HTTPS, SMTP, IMAP, POP3, etc. References: DANE - Wikipedia DNS-Based Authentication of Named Entities (DANE) - Internet Society DANE: Taking TLS Authentication to the Next Level Using DNSSEC
Question 127
In which CIFS share must printer drivers be placed to allow Point'n'Print driver deployment on Windows?
Correct Answer: B
Explanation The print$ share is the default location for storing printer drivers on a Samba server. This share allows Windows clients to automatically download and install the drivers when they connect to a printer on the Samba server. This feature is called Point'n'Print driver deployment. The print$ share must be configured in the smb.conf file and the drivers must be uploaded using a Windows client or the rpcclient utility123 References: Setting up Automatic Printer Driver Downloads for Windows Clients - Samba Uploading Printer Drivers to a Samba Server - Engineering Computer Network How do I load Windows printer drivers on a Samba 4 print server? Setting up Automatic Printer Driver Downloads for Windows Clients - Samba1 Setting up Automatic Printer Driver Downloads for Windows Clients - Samba
Question 128
In a PAM configuration file, which of the following is true about the required control flag?
Correct Answer: C
Explanation The required control flag means that the PAM module is essential for the authentication process. If the module fails, the whole authentication fails. However, unlike the requisite control flag, the required control flag does not stop the execution of the remaining modules of the same type. This allows the user to receive feedback from all the modules, such as password expiration warnings or account lockout messages. References: Linux Professional Institute LPIC-2 Exam 202-450 Objectives, Topic 211: System Security, Objective 211.2: Configuring PAM, Weight: 5 PAM Control Flags, System Administration Guide: Security Services, Oracle 10.2. About PAM Configuration Files, System-Level Authentication Guide, Red Hat Enterprise Linux 7, Red Hat Customer Portal 4. The Linux-PAM configuration file, SCO Group
Question 129
In the main Postfix configuration file, how are service definitions continued on the next line?
