Which of the following parameters can be used in a Samba configuration in order to execute scripts on the server? (Choose three.)
- A . add printer script
- B . add user script
- C . add group script
- D . add user to group script
- E . add share script
In the smb.conf, what is the numeric value for the directory mask directive to ensure directories created within a share will have full permissions for all users?
When Samba is configured as an Active Directory Domain Controller, what role does it serve?
- A . It acts as a web server for the domain.
- B . It manages user access to shared folders within Linux.
- C . It authenticates users and manages resources within an Active Directory domain.
- D . It provides DNS services for Windows clients.
It is found that changes made to an OpenLDAP directory are no longer being replicated to the slave server at 192.168.0.3. Tests prove that the slave server is listening on the correct port and changes are being recorded properly to the replication log file.
Which of the following files should be checked for replication errors?
- A . replication.err
- B . replication.rej
- C . 192.168.0.3:389.rej
- D . 192.168.0.3:389.err
Which commands will delete the user account joeuser from a Samba server? (Select TWO correct answers.)
- A . smbadduser -d joeuser
- B . smbdeluser joeuser
- C . smbpasswd -x joeuser
- D . pdbedit -r joeuser
- E . pdbedit -x joeuser
In which section of the smb.conf configuration file is the logon script file name specified?
- A . [homes]
- B . [netlogon]
- C . [global]
- D . [profiles]
For Samba 3 to be able to work as a PDC, some modifications are needed in its main configuration file.
Which of the following options describe the required actions for this task? (Choose three.)
- A . The Samba server has to be a logon server. This can be configured by the domain logons directive.
- B . The Samba server needs to have the logon and the account scripts, to properly setup the PDC environment.
- C . The Samba server must be a Domain Master Browser. To configure this, the domain master directive must be set to yes.
- D . The time server = yes directive needs to be configured, so samba will behave as a WINS server and also a Time server.
- E . the security – user directive must be set.
Which command in the Samba suite provides a means of manipulating NT Quotas on Samba file shares? (Specify only the command with no arguments or options)
Which of the following properties does the configuration option cachesize in slapd.conf refer to?
- A . The number of entries to be cached.
- B . The size of the cache in bytes.
- C . The size of the cache in bits.
- D . The minimum cache size in bytes.
- E . The maximum cache size in bytes.
How can you create home directories automatically for new users?
- A . By manually creating directories for each user.
- B . By using a dedicated home directory server.
- C . By configuring a script to run upon user creation.
- D . Home directories are not a common practice in Linux environments.
Which of the following parameters is used in the database on a slave server to direct clients that want to make changes to the OpenLDAP database to the master server?
- A . updatedn
- B . updateserver
- C . updateref
- D . updateuri
What is the purpose of PAM (Pluggable Authentication Modules) in Linux?
- A . It enforces password complexity policies.
- B . It retrieves information from LDAP directories.
- C . It manages local accounts through SSSD.
- D . It provides a flexible framework for authentication and authorization.
Which of the following are true when considering NetBIOS browsing? (Choose THREE correct answers)
- A . Servers and workstations register their presence to the network.
- B . One or more machines on the network collate the local announcements.
- C . It is not possible to share NetBIOS name information across subnets.
- D . Elections are held to determine the roles of certain servers.
- E . Currently, only Microsoft Windows servers can initiate an election.
When integrating Samba and OpenLDAP, what schema needs to be included in the OpenLDAP slapd.conf?
- A . samba.schema
- B . windows.schema
- C . java.schema
- D . microsoft.schema
- E . nis.schema
What is the main purpose of integrating Samba into an Active Directory domain?
- A . To provide web hosting services.
- B . To enable Linux-only networking.
- C . To allow Linux systems to join and participate in a Windows-based domain.
- D . To create a separate domain for Linux clients.
By configuring Pluggable Authentication Module (PAM) and Name Service Switch (NSS) technologies to use OpenLDAP, what authentication service can be replaced?
- A . Microsoft NT Domain
- B . Samba
- C . Network Information Service (NIS)
- D . Active Directory (AD)
Which parameter must be set in the [global] section of smb.conf in order to make Samba use printers managed by CUPS?
- A . printing = cups
- B . printcap = cups
- C . printcap = /etc/cups/printers.conf
- D . print spooler = cups
The _____________ parameter in the smb.conf file will set hidden files in Linux to also be hidden in windows. (Please specify ONLY the parameter with no value assignment.)
When joining a Samba server to an Microsoft Active Directory domain, what is the correct setting for the security directive of the smb.conf file? (Specify the setting value only without any other keywords)
An administrator has manually migrated local accounts to OpenLDAP, instead of using migration tools. When trying to authenticate as a user, an error is returned about invalid credentials.
What is the most likely cause of this?
- A . The password hash type was not included in the user’s password attribute.
- B . Shadow passwords are incompatible with OpenLDAP.
- C . The original password from /etc/passwd was not included.
- D . The administrator forgot to run slappasswd to convert the hashes in /etc/shadow.
- E . The administrator forgot to run ldappasswd to convert the hashes in /etc/shadow.
In an OpenLDAP masters’s slapd.conf configuration file, a replica configuration option is needed to enable a slave OpenLDAP server to replicate.
What value is required in the following setting: bindmethod=____________ if using passwords for master/slave authentication? (Only specify the missing value)
How can you configure roaming profiles for Active Directory users?
- A . By granting users remote access to Windows servers.
- B . By configuring network drives for users.
- C . By creating a copy of a user’s profile on the local machine.
- D . By allowing users to access their profiles from any computer in the domain.
Which Samba daemon is responsible for resolving user and group IDs between Windows and UNIX-like systems?
- A . winbindd
- B . smbd
- C . nmbd
- D . samba
Which of the following commands show all user accounts as they are currently available to the Linux operating system no matter of their source?
- A . ypcat
- B . getent
- C . wbinfo
- D . showuser
- E . smbpasswd
Which command can be used to validate and backup a TDB file?
- A . pdbedit
- B . tdbbackup
- C . tdbdump
- D . tdblist
Which of the following Samba 4 commands adds the user candidate to group training?
- A . samba-tool user addgroup candidate training
- B . samba-tool group addmembers training candidate
- C . samba-tool groupadd training candidate
- D . samba-tool ad group modify training add candidate
SMB version 3.0 brought what significant improvement to data transfer speeds?
- A . Compression
- B . Multipath I/O
- C . Protocol encryption
- D . Large MTU support
Which of the following Linux commands can be used to log into a remote Microsoft Windows server using RDP?
- A . rlogin
- B . rdesktop
- C . Xnest
- D . rpcdesktop
By default Samba tries to recognize correct charsets between server and client.
Which parameters can be used in smb.conf to set them manually? (Choose TWO correct answers)
- A . unix charset
- B . display charset
- C . dos charset
- D . windows charset
- E . unicode
What command checks the Samba configuration file for syntactical correctness? (Specify ONLY the command without any path or parameters.)
Which of the following steps are performed by the command samba-tool domain provision? (Choose TWO correct answers.)
- A . Samba is configured to serve as an Active Directory Domain Controller, including creation of smb.conf in case it does not exist.
- B . In case the full Samba suite is not yet installed, it is downloaded, compiled and installed.
- C . A basic user database with the accounts required in an Active Directory is provisioned.
- D . The command scans the local subnets and adds machine accounts for all discovered machines.
- E . All users found in the local unix password database are automatically converted into Active Directory user accounts.
Select which groups must map to UNIX GIDs on a Samba server operating as a PDC. (Select TWO correct answers.)
- A . Domain Root
- B . Domain Users
- C . Domain Guests
- D . Domain Controllers
- E . Domain Operators
Microsoft file systems are not case sensitive on file names. Linux file systems are case sensitive to file names.
Which of the following directives defines how Samba handles file name mapping in this situation?
- A . name map
- B . case map
- C . case sensitive
- D . case on
By default, Samba tries to automatically detect the correct character set to use with a connecting client.
Which parameter in smb.conf forces Samba to use only ASCII?
- A . global charset = ASCII
- B . unicode = no
- C . ASCII = yes
- D . force charset = ASCII
- E . reduce charset = yes
Microsoft file system are not case sensitive to file names. Linux file systems are case sensitive to file names.
Which of the following configuration directives defines how Samba handles file name mapping in this situation?
- A . name map
- B . case map
- C . case sensitive
- D . case on
How is the user user01 from DOMA granted the right to manage printers on a Samba print server?
- A . net ads rights ‘DOMAuser01’ +SePrintOperatorPrivilege
- B . net -S server -U domadmin rpc rights grant ‘DOMAuser01’ SePrintOperatorPrivilege
- C . pdbedit –user=user01 -I=DOMA –policies=SePrintOperatorPrivilege
- D . pdbedit DOMAuser01 +PrintOperator
- E . cupsaddsmb DOMAuser01 +PrintOperator
In Samba, what is the role of CTDB (Clustered Trivial DataBase) in a clustered environment?
- A . It manages user authentication.
- B . It handles load balancing for network requests.
- C . It provides centralized DNS services.
- D . It synchronizes file locks and oplocks across cluster nodes.
Which of the following parameters can be used in the file DB_CONFIG? (Select TWO correct answers.)
- A . set_cachesize
- B . set_cachepath
- C . set_db_type
- D . set_db_path
- E . set_lg_max
Which of the following Samba VFS modules can be used to store Windows ACLs? (Choose two.)
- A . vfs_acl_proxy
- B . vfs_acl_fake
- C . vfs_acl_tdb
- D . vfs_acl_xattr
- E . vfs_acl_ramdisc
What does DFS (Distributed File System) offer in terms of file sharing?
- A . It enables sharing of files between different operating systems.
- B . It allows sharing files across multiple servers in a transparent manner.
- C . It provides advanced print sharing options.
- D . It helps manage domain-specific security policies.
Which sub command of net is used to manage group mappings? (Specify ONLY the sub command without any path or parameters.)
A Samba server is configured to use the OpenLDAP password backend. The root DN for the LDAP directory is defined in slapd.conf.
In order to define an alternative account used by the Samba administrator, which steps are necessary? (Select THREE correct answers.)
- A . Make sure the password for the new administrative account matches the UNIX root password.
- B . Add a new Samba administrative account to the LDAP directory.
- C . Make certain that the ldap admin option in smb.conf does not point to the LDAP root DN.
- D . Map the Samba administrator account to the domain administrator.
- E . Change the access attributes in slapd.conf.
What is stored in the secrets.tdb database file?
- A . The password of the Samba user Administrator.
- B . The password of the Samba user root.
- C . Starting with Samba3 this file is no longer used.
- D . The SID of the local machine.
To enable client-specific logging in Samba, you would:
- A . Set the "client_log" parameter in smb.conf.
- B . Configure each client to send logs to the Samba server.
- C . Use the "client_log" command in the Samba terminal.
- D . This feature is not available in Samba.
Which directive in smb.conf ensures a Samba server will win broadcast elections for the master browser?
- A . os level = 255
- B . os level = 31
- C . os level = 15
- D . os level = 0
What samba command generates the following output? (Specify ONLY the command without any path or parameters.)
What is the effect of the following line within a global section of a Samba configuration file?
- A . After its start, nmbd forces an election in order to become the master browser.
- B . The os level is set to the highest possible value 255 in order to become the master browser.
- C . nmbd forces an election every minute in order to become the master browser.
- D . The local nmbd becomes the master browser for all available workgroups in the local network.
- E . The line has no effect as long as local master is not set to no.
By specifying the _________ option in smb.conf and assigning it an appropriate value, Samba will create Machine Trust Accounts automatically when the client joins the domain.
On the Linux command line, which of the following Samba tools lists the available domains, servers and shares?
- A . samba-tool forrest list
- B . smbtree
- C . smbexplore
- D . ip neighbor show
- E . pathbrowse
How can administrators apply GPOs to machines or users in an Active Directory domain?
- A . By manually editing the Windows Registry.
- B . By configuring user permissions in the GPO settings.
- C . By linking GPOs to organizational units (OUs) in Active Directory.
- D . GPOs are automatically applied to all domain objects.
What is the purpose of configuring a file share in Samba?
- A . To allow users to print documents.
- B . To provide a way for users to access web resources.
- C . To share files and folders with other network users.
- D . To set up a centralized email system.
Which of the following daemons are included in Samba 3? (Select THREE correct answers.)
- A . wind
- B . nmbd
- C . winbindd
- D . samba
- E . smbd
Why might administrators enforce periodic password changes for users?
- A . To improve network performance.
- B . To simplify user account management.
- C . To enhance security by reducing the risk of long-term password exposure.
- D . To eliminate the need for password complexity.
What is the default port number used by SMB/CIFS for communication?
- A . 137
- B . 139
- C . 445
- D . 3389
When should you typically perform backups of your Samba configuration and data?
- A . Only when a major update is planned.
- B . During regular maintenance routines.
- C . After encountering a system crash.
- D . Backups are not necessary for Samba.
Which of the following commands are required to join an Active Directory Domain? (Choose two.)
- A . kinit
- B . wbinfo Cu
- C . net ads join
- D . winbind join domain
Which of the following commands delete the user account joeuser from a Samba server? (Choose two.)
- A . ambadduser -d joeuser
- B . smbluser joeuser
- C . smbpasswd -x joeuser
- D . pdbedit -r joeuser
- E . pdbedit -x joeuser
Which option must be specified in smb.conf in order to make Samba create machine accounts automatically when a client joins the domain?
Which port in TCP/IP communication is used for Kerberos v5?
- A . 888
- B . 86
- C . 88
- D . 90
Which type of files will be stored inside the directory specified below?
- A . Configuration files
- B . TDB files
- C . WNS name cache files
- D . Samba print spool files
- E . Content of file shares
When a Windows domain controller is used, which of the following entities is assigned a Windows Security Identifier? (Choose three.)
- A . Users
- B . Servers
- C . Groups
- D . Departments
- E . Companies
How can you configure Samba to log debug information for specific components or classes?
- A . Modify the smb.conf file and set the "log_level" parameter.
- B . Use the "debug" command in the Samba terminal.
- C . Edit the "samba.log" file directly.
- D . Run the "samba-debug" utility.
What is true about the Samba configuration options create mask?
- A . Each permission bit that is set (1) in create mask cannot be set on a file created by Samba even if the client requests it to be set.
- B . Each permission bit that is cleared (0) in create mask is only set on a file created by Samba if the client explicitly sets the bit.
- C . Each permission bit that is set (1) in create mask is always set on a file created by Samba regardless of the permissions set by the client.
- D . Each permission bit that is cleared (0) in create mask is always cleared on a file created by Samba even if the client explicit sets the bit.
There are multiple network interfaces on a server.
Which parameters must you set in smb.conf to limit which interfaces Samba will accept connections? (Choose TWO correct answers.)
- A . listen interfaces
- B . bind interfaces only
- C . interfaces
- D . listen address
Which Samba daemon is responsible for handling file and printer sharing requests from clients?
- A . nmbd
- B . samba
- C . smbd
- D . winbindd
Which of the following commands regenerates slapd indices based on the current database?
- A . slapd index
- B . sindexd
- C . slapindex
- D . There is no index command. Indexing is handled by the slapd daemon.
Which file stores the global Kerberos configuration needed for OpenLDAP integration with Active Directory and Kerberos? (Specify the file name only without any path.)
The showmount command will list the available NFS shares on a server.
What command will provide the same information on a Samba server named FileSrv1?
- A . smbcontrol -L FileSrv1
- B . smbclient -N FileSrv1
- C . smbclient -L FileSrv1
- D . smbmount -L FileSrv1
In order to generate an individual log file for each of the machines connecting to a Samba server, which of the following statements must be used in the Samba configuration file?
- A . log file = /var/log/samba/log.%c
- B . log file = /var/log/samba/log.%M
- C . log file = /var/log/samba/log.%m
- D . log file = /var/log/samba/log.%I
What is the true of the following share’s access properties? (Choose two.)
- A . @managers copies the permissions of the share [managers].
- B . The alice and bob users can manipulate files regardless of the file system permissions.
- C . @managers will be resolved as a Unix group.
- D . @managers is a builtin default Samba group.
- E . the parameter admin users can be applied only to print shares.
Which port must be open in a firewall to allow access to the remote Desktop Protocol (RDP) server running on the standard port?
- A . 3389
- B . 3580
- C . 3288
- D . 3187
What is the NetBIOS equivalent of an /etc/hosts file, equating an IP address to a system NetBIOS name. (Specify only the file name without any path)
How can you control access to a Samba file share based on user credentials?
- A . By allowing anonymous access to all users.
- B . By configuring share-level security without requiring authentication.
- C . By setting permissions for individual users or groups in the smb.conf file.
- D . By using only IP-based restrictions.
When configuring an OpenLDAP system for integration with PAM and NSS the /etc/nsswitch.conf file needs to be modified.
Which of the following parameters completes this line from the /etc/nsswitch.conf file?
- A . pam
- B . ldap
- C . pam_nss
- D . pam_ldap
- E . none
How can the risk of UID/GID inconsistencies be avoided across UNIX/Linux systems that are sharing information over protocols other than SMB/CIFS (eg: NFS)?
- A . Specify a common OpenLDAP idmap backend in smb.conf.
- B . Specify a common Kerberos realm in smb.conf.
- C . Specify a common domain name in smb.conf.
- D . Specify a common password server in smb.conf.
- E . Specify a common winbind ID range in smb.conf.
How can you identify possible corruption in a TDB file?
- A . Use the "tdbverify" command to check for errors.
- B . Open the TDB file in a text editor and look for anomalies.
- C . Run the "tdbchk" command with the file name.
- D . Corruption cannot be detected in TDB files.
Which service unifies Linux and Windows account management by allowing a Linux system to include Windows domain users in the Linux user database?
- A . Winbind
- B . PAM
- C . NIS
- D . OpenLDAP
Which option is used when running smbclient with a file containing user credentials?
- A . -F
- B . -c
- C . -s
- D . -A
What are Group Policy Objects (GPOs) used for in a Windows environment?
- A . To manage user accounts.
- B . To create local user profiles.
- C . To configure Windows services.
- D . To define rules and settings for user and computer objects within an Active Directory domain.
Which command with Samba 3 would be used to search for all available workgroups/domains and NetBIOS names?
- A . nmblookup
- B . findsmb
- C . smbget
- D . winbrowse
What is the purpose of accessing a remote Windows desktop?
- A . To access websites and online resources.
- B . To manage user accounts.
- C . To run Linux commands.
- D . To control and work on a remote Windows computer.
On Microsoft Windows systems, ACLs on the share are set using tools like the Explorer. For example, in Windows 7, right-click on the shared folder, then select Sharing, then click on Permissions.
What Windows group, by default, has full control of the share?
- A . Everyone
- B . Guests
- C . Authenticated Local Users
- D . Samba Share Service
What is the purpose of a Samba VFS (Virtual File System) module?
- A . It enables file sharing over the internet.
- B . It improves Samba’s authentication mechanisms.
- C . It enhances the performance of disk I/O operations.
- D . It provides support for file system-specific operations.
Which commands will dump out the contents of a Samba printer driver’s TDB file? (Select TWO correct answers.)
- A . pdbedit
- B . smbclient
- C . tdbtool dump
- D . tdbdump
- E . tdblist
What is the correct command to regenerate slapd indices based upon the current contents of the database?
- A . slapd index
- B . sindexd
- C . slapindex
- D . There is no index command, indexing is handled by the slapd daemon.
Which of the following statements is true regarding DNS in an Active Directory Domain?
- A . When resolving DNS names? all domain members must query a domain controller or a DNS server that serves the exact same zone content.
- B . It is not possible to use secondary DNS servers in conjunction with an Active Directory domain.
- C . DNS name resolution is not mandatory in an Active Directory Domain, as long as a WINS server can be reached.
- D . Active Directory only uses A and AAAA records no other record types to serve important information regarding the domain.
You receive an error message stating "NT_STATUS_LOGON_FAILURE" when trying to connect to a Samba share.
What could be the issue?
- A . The share is not defined in smb.conf.
- B . The client’s clock is out of sync with the server.
- C . The user’s account is locked.
- D . The Samba server is offline.
Which SMB protocol version introduced support for opportunistic locks and improved security?
- A . SMB 1.0
- B . SMB 2.0
- C . SMB 2.1
- D . SMB 3.0
In order to generate individual logfiles for machines connecting to Samba, which of the following statements have to be used in the Samba configuration file?
- A . log file = /var/log/samba/log.%c
- B . log file = /var/log/samba/log.%M
- C . log file = /var/log/samba/log.%m
- D . log file = /var/log/samba/log.%I
Which of the following procedures will test the TLS configuration of an OpenLDAP server?
- A . Run the ldapsearch command with the -ZZ option, while watching network traffic with a packet analyzer.
- B . Run the ldapsearch command with the -x option, while watching network traffic with a packet analyzer.
- C . Run the slapcat command, while watching network traffic with a packet analyzer.
- D . Verify the TLS negotiation process in the /var/log/ldap_auth.log file.
- E . Verify the TLS negotiation process in the /var/log/auth.log file.