Key details for this exam, checked against the published exam outline
Each question shows the correct answer and an explanation of why it is right
Which parameter in a user object defines on which share the user's roaming profile is stored?
The profilePath parameter in a user object specifies the path to the user's roaming profile. A roaming profile is a feature in Windows that allows user profile data to be stored on a network share so that users can access their profiles from any workstation within the network. By setting the profilePath, administrators can define where on the network the profile data is stored.
Which of the following options can be used to limit access to a Samba share? (Choose two.)
To limit access to a Samba share, the valid users and valid groups options can be used. These directives specify which users or groups are allowed to access the share.
C . valid groups
This option restricts access to members of specified Unix groups.
D . valid users
This option restricts access to specified Unix users.
Samba smb.conf man page
What is a correct statement about FreeIPA ID views?
In FreeIPA, ID views allow administrators to override default POSIX attributes for users and groups. This feature is useful when integrating with other identity management systems, enabling specific attribute values to be used on a per-host basis. This way, different POSIX attributes can be set for the same user or group in different contexts.
FreeIPA: ID Views
FreeIPA Documentation
FILL BLANK
Which command line option instructs smbclient to authenticate using an existing Kerberos token? (Specify ONLY the option name without any values or parameters.)
The smbclient command is used to access shared resources on a server running the SMB/CIFS protocol. To authenticate using an existing Kerberos token, the -k option is used. This instructs smbclient to use Kerberos for authentication, assuming that the user already has a valid Kerberos ticket (usually obtained via the kinit command).
Example:
smbclient //server/share -k
smbclient man page
Kerberos Authentication with Samba
Which of the following statements is true regarding Samba 4?
Samba 4 Features: Samba 4 introduces major enhancements over Samba 3, including the ability to function as an Active Directory (AD) Domain Controller.
Capability as AD Controller:
Samba 4 includes support for AD protocols, allowing it to manage domain users and computers similar to a Windows AD server.
Incorrect Statements Clarified:
Samba 4 is a significant update with new features.
Windows clients can connect to Samba 4 servers.
Samba 4 does not include a proprietary file system called sambafs.
Samba 4 can integrate with existing AD domains.
Samba Wiki - Samba4
53 questions covering all exam domains
Exam domains verified against: Official LPI 300-300 exam guide, last checked September 2026.
Covers Samba concepts, architecture, configuration, and maintenance. Understand how Samba integrates into mixed environments and the fundamental building blocks needed to deploy file and print services.
Delves into active directory domain controllers, name resolution, and user management. Learn how Samba integrates with Active Directory for both membership and domain control scenarios.
Sample question from this domain above: Q5
Addresses file share configuration, file share security, DFS share configuration, and print share configuration. Master the tools to set up secure shared resources accessible across Windows and Linux systems.
Sample question from this domain above: Q1
Covers Linux authentication clients, Linux CIFS clients, and Windows clients. Learn how to configure systems to consume Samba services reliably across heterogeneous platforms.
Examines FreeIPA installation, entity management, Active Directory integration, and network file systems. Understand how to implement enterprise identity management alongside file sharing in mixed environments.
Delves into configuring Samba daemons through file-based and registry-based methods, managing configuration parameters, and server roles and security modes. Candidates learn to configure TLS for secure communication and troubleshoot configurations using Windows tools.
Covers tools and utilities for managing Samba services, including starting, stopping, and monitoring daemons. Learn backup and restore procedures for TDB files and Active Directory domain controllers, plus considerations for virtualization environments.
Focuses on analyzing and resolving Samba issues through logging configuration and password database management. Candidates learn TDB file structure, LDAP directory access, database integrity verification, and debugging techniques for domain controllers.
Focuses on managing user and group accounts in standalone servers and Samba-based Active Directory. Learn about account management tools, delegation, password policies, and understanding LDAP attributes and Kerberos service principal names.
Sample question from this domain above: Q3
Covers joining a Samba server to an existing Active Directory domain and authorizing domain user access. Learn to configure the Winbind service, including ID mapping and integration with PAM and NSS for seamless authentication.
Sample question from this domain above: Q2
Covers creating and managing local user accounts on standalone Samba servers, including password database setup, synchronization, and different passdb backends. Understand how to maintain user authentication when not connected to a domain.
Sample question from this domain above: Q4
Common questions about the exam itself