LPI 300-300 Practice Exam Questions & Answers

Default Group Policy Objects in AD:

A . Default Domain Policy: This is a built-in GPO that is applied to all users and computers in the domain. It contains security settings, password policies, and other domain-wide configurations.

B . Default Domain Controllers Policy: This GPO is specifically applied to the Domain Controllers organizational unit (OU). It contains settings relevant to domain controllers, such as security settings and audit policies.

Active Directory Group Policy documentation

Best practices for managing Group Policy in Active Directory

Samba is a suite of programs that allows SMB/CIFS clients to interact with file and print services on a Linux/UNIX server.

smbd is the Samba daemon responsible for handling SMB/CIFS requests.

The smbcontrol utility is used to send messages to running Samba daemons.

The correct way to terminate all running instances of the Samba daemon handling SMB shares is to send a shutdown message to smbd using the command smbcontrol smbd shutdown.

This command ensures that only the smbd processes, which are responsible for handling SMB shares, are terminated without affecting other Samba components like nmbd (NetBIOS name server daemon).

Samba documentation: https://www.samba.org/samba/docs/current/man-html/smbcontrol.1.html

Automounting in a FreeIPA domain involves several key aspects:

Base Configuration File (/etc/auto.master): The auto.master file is the main configuration file for the automounter. It contains the master map which defines mount points and their corresponding maps. This file is crucial for setting up automount points.

Example entry in /etc/auto.master:

plaintext

Copy code

/home /etc/auto.home

SSSD Requirement: In a FreeIPA domain, automount requires the System Security Services Daemon (SSSD) to be installed and configured on each client. SSSD is used to retrieve automount maps from the FreeIPA server, enabling the automount feature to function correctly.

Example configuration in /etc/sssd/sssd.conf:

[sssd] services = nss, pam, autofs config_file_version = 2 domains = example.com [domain/example.com] autofs_provider = ipa ipa_server = _srv_

Automount Configuration

FreeIPA SSSD Integration

In smb.conf, the realm option specifies the Kerberos realm for the Active Directory of which the server is a member. This option is crucial for integrating the Samba server into an AD environment.

Samba smb.conf man page - realm

In FreeIPA, ID views allow administrators to override default POSIX attributes for users and groups. This feature is useful when integrating with other identity management systems, enabling specific attribute values to be used on a per-host basis. This way, different POSIX attributes can be set for the same user or group in different contexts.

FreeIPA: ID Views

FreeIPA Documentation

Global Catalog: The Global Catalog is a distributed data repository that contains a searchable, partial representation of every object in every domain in a multi-domain Active Directory forest.

Access Method: It is accessed through LDAP queries to specific ports:

Port 3268: For plain text (unencrypted) LDAP queries.

Port 3269: For LDAP queries encrypted with TLS.

Other Options:

GCS SMB share, GCS records, SRV records, CN=GC in LDAP: These do not provide the correct method to access the Global Catalog.

Microsoft Documentation on Active Directory Global Catalog

The profilePath parameter in a user object specifies the path to the user's roaming profile. A roaming profile is a feature in Windows that allows user profile data to be stored on a network share so that users can access their profiles from any workstation within the network. By setting the profilePath, administrators can define where on the network the profile data is stored.

Roaming User Profiles

User Account Properties