The LPIC-3 certification marks the pinnacle of the Linux Professional Institute’s (LPI) multi-tiered professional certification program. Aimed at enterprise-level Linux professionals, LPIC-3 stands as the highest distribution-neutral Linux certification in the industry. The LPIC-3 Virtualization and Containerization certification focuses on the administration of Linux systems across an organization, emphasizing virtualization and containerization technologies.

Exam Prerequisites

To obtain the LPIC-3 certification, candidates must hold a valid LPIC-2 certification.

Exam Details

The LPIC-3 Virtualization and Containerization (305-300) exam, currently at version 3.0, requires candidates to pass the 305 exam, which consists of 60 multiple-choice and fill-in-the-blank questions to be completed in 90 minutes. The certification is valid for five years and is offered in English and Japanese at VUE test centers, as well as online via OnVUE.

Course Outline

The LPIC-3 Virtualization and Containerization Exam 305 includes a set of objectives, each with an assigned weight. These weights represent the significance of each objective within the exam. Higher-weighted objectives will feature more prominently, resulting in more related questions.

Topic 351: Full Virtualization

351.1 Virtualization Concepts and Theory (weight: 6)

Candidates should understand the foundational concepts, theories, and terminology associated with virtualization, including terms related to Xen, QEMU, and libvirt.

Key Knowledge Areas:

• Grasp the terminology of virtualization.
• Recognize the advantages and disadvantages of virtualization.
• Understand the different types of Hypervisors and Virtual Machine Monitors.
• Comprehend key aspects of transitioning physical machines to virtual environments.
• Understand key factors in moving virtual machines between host systems.
• Know the features and impacts of virtualization for virtual machines, such as snapshotting, pausing, cloning, and resource limitations.
• Awareness of tools like oVirt, Proxmox, systemd-machined, and VirtualBox.
• Familiarity with Open vSwitch.

The following is a partial list of relevant files, terms, and utilities:

• Hypervisor
• Hardware Virtual Machine (HVM)
• Paravirtualization (PV)
• Emulation and Simulation
• CPU flags
• /proc/cpuinfo
• Migration (P2V, V2V)

351.2 Xen (weight: 3)

Candidates should be capable of installing, configuring, maintaining, migrating, and troubleshooting Xen installations, with a focus on Xen version 4.x.

Key Knowledge Areas:

• Understand the architecture of Xen, including networking and storage components.
• Perform basic configuration of Xen nodes and domains.
• Manage Xen nodes and domains at a basic level.
• Troubleshoot common issues in Xen installations.
• Awareness of XAPI (Xen API).
• Awareness of XenStore.
• Awareness of Xen Boot Parameters.
• Awareness of the xm utility.

The following is a partial list of relevant files, terms, and utilities:

• Domain0 (Dom0), DomainU (DomU)
• PV-DomU, HVM-DomU
• /etc/xen/
• xl
• xl.cfg
• xl.conf
• xentop

351.3 QEMU (weight: 4)

Candidates should be proficient in installing, configuring, maintaining, migrating, and troubleshooting QEMU installations.

Key Knowledge Areas:

• Understand the architecture of QEMU, including KVM, networking, and storage.
• Launch QEMU instances using command-line commands.
• Manage snapshots through the QEMU monitor.
• Install the QEMU Guest Agent and VirtIO drivers.
• Troubleshoot issues in QEMU installations, focusing on networking and storage.
• Awareness of key QEMU configuration parameters.

The following is a partial list of relevant files, terms, and utilities:

• Kernel modules: kvm, kvm-intel, and kvm-amd
• /dev/kvm
• QEMU monitor
• qemu
• qemu-system-x86_64
• ip
• brctl
• tunctl

351.4 Libvirt Virtual Machine Management (weight: 9)

Candidates should be able to manage virtualization hosts and virtual machines (“libvirt domains”) using libvirt and associated tools.

Key Knowledge Areas:

• Understand the architecture of libvirt.
• Manage libvirt connections and hosts.
• Create and manage QEMU and Xen domains, including handling snapshots.
• Monitor and analyze resource usage of domains.
• Create and administer storage pools and volumes.
• Set up and manage virtual networks.
• Migrate domains between different hosts.
• Understand the interaction between libvirt and virtualization platforms like Xen and QEMU.
• Understand libvirt’s integration with network services such as dnsmasq and radvd.
• Comprehend libvirt XML configuration files.
• Awareness of virtlogd and virtlockd.

The following is a partial list of relevant files, terms, and utilities:

• libvirtd
• /etc/libvirt/
• virsh (including relevant subcommand)

351.5 Virtual Machine Disk Image Management (weight: 3)

Candidates should be proficient in managing virtual machine disk images, including converting these images across different formats and hypervisors, as well as accessing data stored within them.

Key Knowledge Areas:

• Understand the characteristics of various virtual disk image formats, such as raw images, qcow2, and VMDK.
• Manage virtual machine disk images using qemu-img.
• Use libguestfish to mount partitions and access files within virtual machine disk images.
• Copy data from physical disks to virtual machine disk images.
• Migrate disk content between different virtual machine disk image formats.
• Awareness of the Open Virtualization Format (OVF).

The following is a partial list of relevant files, terms, and utilities:

• qemu-img
• guestfish (including relevant subcommand)
• guestmount
• guestumount
• virt-cat
• virt-copy-in
• virt-copy-out
• virt-diff
• virt-inspector
• virt-filesystems
• virt-rescue
• virt-df
• virt-resize
• virt-sparsify
• virt-p2v
• virt-p2v-make-disk
• virt-v2v
• virt-sysprep

Topic 352: Container Virtualization

352.1 Container Virtualization Concepts (weight: 7)

Candidates should have a thorough understanding of container virtualization concepts, including the Linux components that facilitate container virtualization, as well as the use of standard Linux tools for troubleshooting these components.

Key Knowledge Areas:

• Understand the concepts of system and application containers.
• Analyze and understand kernel namespaces.
• Analyze and understand control groups (cgroups).
• Analyze and understand Linux capabilities.
• Understand the role of seccomp, SELinux, and AppArmor in container virtualization.
• Understand how LXC and Docker use namespaces, cgroups, capabilities, seccomp, and Mandatory Access Control (MAC).
• Comprehend the principles behind runc.
• Comprehend the principles of CRI-O and containerd.
• Awareness of OCI runtime and image specifications.
• Awareness of the Kubernetes Container Runtime Interface (CRI).
• Awareness of tools like podman, buildah, and skopeo.
• Awareness of alternative container virtualization methods in Linux and other free operating systems, such as rkt, OpenVZ, systemd-nspawn, or BSD Jails.

The following is a partial list of relevant files, terms, and utilities:

• nsenter
• unshare
• ip (including relevant subcommand)
• capsh
• /sys/fs/cgroups
• /proc/[0-9]+/ns
• /proc/[0-9]+/status

352.2 LXC (weight: 6)

Candidates should be proficient in working with system containers using LXC and LXD, focusing on LXC version 3.0 or newer.

Key Knowledge Areas:

• Understand the architecture of LXC and LXD.
• Manage LXC containers using LXD, including handling networking and storage based on existing images.
• Configure properties of LXC containers.
• Limit resource usage for LXC containers.
• Utilize LXD profiles.
• Understand the concept of LXC images.
• Awareness of traditional LXC management tools.

The following is a partial list of relevant files, terms, and utilities:

• lxd
• lxc (including relevant subcommand)

352.3 Docker (weight: 9)

Candidates should be skilled in managing Docker nodes and containers, including a thorough understanding of Docker’s architecture and its interactions with the underlying Linux system.

Key Knowledge Areas:

• Understand the architecture and components of Docker.
• Manage Docker containers using images from a Docker registry.
• Understand and manage Docker container images and volumes.
• Understand and manage Docker container logging.
• Understand and configure Docker networking.
• Create container images using Dockerfiles.
• Set up and manage a Docker registry using the registry Docker image.

The following is a partial list of relevant files, terms, and utilities:

• dockerd
• /etc/docker/daemon.json
• /var/lib/docker/
• docker
• Dockerfile

352.4 Container Orchestration Platforms (weight: 3)

Candidates should recognize the significance of container orchestration and the fundamental concepts provided by Docker Swarm and Kubernetes for its implementation.

Key Knowledge Areas:

• Understand the importance of container orchestration.
• Grasp the key concepts of Docker Compose and Docker Swarm.
• Comprehend the essential principles of Kubernetes and Helm.
• Awareness of platforms like OpenShift, Rancher, and Mesosphere DC/OS.

Topic 353: VM Deployment and Provisioning

353.1 Cloud Management Tools (weight: 2)

Candidates should have an understanding of the typical offerings in public cloud environments and possess fundamental knowledge of commonly used cloud management tools.

Key Knowledge Areas:

• Understand the common offerings available in public clouds.
• Have a basic understanding of OpenStack features.
• Have a basic understanding of Terraform features.
• Awareness of other cloud management platforms like CloudStack, Eucalyptus, and OpenNebula.

The following is a partial list of relevant files, terms, and utilities:

• IaaS, PaaS, SaaS
• OpenStack
• Terraform

353.2 Packer (weight: 2)

Candidates should be capable of using Packer to create system images, including running Packer in various public and private cloud environments and building container images for LXC/LXD.

Key Knowledge Areas:

• Understand the functionality and features of Packer.
• Create and manage template files.
• Build images from template files using various builders.

The following is a partial list of relevant files, terms, and utilities:

• packer

353.3 cloud-init (weight: 3)

Candidates should be proficient in using cloud-init to configure virtual machines created from standardized images. This includes optimizing virtual machines to align with their available hardware resources, particularly disk space and volumes. Additionally, candidates should be capable of configuring instances for secure SSH logins and installing a specific set of software packages. Furthermore, they should be able to create new system images that support cloud-init.

Key Knowledge Areas:

• Understand the features and concepts of cloud-init, including user-data, initialization, and configuration.
• Use cloud-init to create, resize, and mount file systems; configure user accounts, including login credentials such as SSH keys; and install software packages from the distribution’s repository.
• Integrate cloud-init into system images.
• Utilize config drive data sources for testing.

The following is a partial list of relevant files, terms, and utilities:

• cloud-init
• user-data
• /var/lib/cloud/

353.4 Vagrant (weight: 3)

Candidates should be adept at using Vagrant to manage virtual machines, including the provisioning process.

Key Knowledge Areas:

• Understand the architecture and concepts of Vagrant, including storage and networking.
• Retrieve and utilize boxes from Atlas.
• Create and execute Vagrantfiles.
• Access Vagrant virtual machines.
• Share and synchronize folders between a Vagrant virtual machine and the host system.
• Comprehend Vagrant provisioning, including file and shell provisioners.
• Understand multi-machine setups.

The following is a partial list of relevant files, terms, and utilities:

• vagrant
• Vagrantfile

LPIC-3 Virtualization and Containerization (305-300): FAQs

Click here for FAQs!

LPIC-3 Virtualization and Containerization (305-300) Study Guide

1. Get Familiar with Exam Objectives

To effectively prepare for the LPIC-3 Virtualization and Containerization (305-300) exam, candidates must familiarize themselves with the key exam objectives that encompass a broad range of virtualization and containerization concepts. This includes understanding virtualization theories, technologies, and architectures, such as hypervisors like Xen and KVM, as well as containerization tools like LXC and Docker.

Candidates should be able to manage virtual machines and containers, including their provisioning, configuration, and migration, while also comprehending the networking and storage aspects involved. Furthermore, knowledge of cloud infrastructure and orchestration tools like Kubernetes and Docker Swarm is essential. A strong grasp of automation tools such as Packer and cloud-init, along with security best practices, will be crucial for effective deployment and management.

2. Become Part of “Linux Professional Institute – Learning”

Learning is an initiative of the Linux Professional Institute (LPI) designed to assist you in preparing for our Linux and open-source certifications. Through the Learning Materials, LPI consistently provides free resources for both educators and students. The Linux Professional Institute Publishing Partner (LPP) program establishes transparent collaboration with both commercial and open-source publishing platforms. This initiative combines the Linux Professional Institute’s efforts to develop and supply materials for exam preparation, emphasizing the Learning Materials and the LPP program.

3. Use LPI Training Partners

Find a training partner to enhance your learning experience. Collaborating with a Linux Professional Institute training partner offers you access to a wealth of resources and expertise in Linux and other open-source topics. These partners provide structured training programs, hands-on labs, and expert guidance tailored to your needs, ensuring you grasp key concepts effectively. Engaging with a training partner also facilitates networking opportunities, allowing you to connect with fellow learners and industry professionals.

Whether you are preparing for certifications or simply expanding your knowledge, a training partner can help you stay motivated and accountable throughout your learning journey. Take the next step towards mastering Linux and open-source technologies by exploring the training options available through our accredited partners.

4. Join Study Groups

Joining study groups is an invaluable strategy for preparing for the LPIC-3 Virtualization and Containerization (305-300) exam. These collaborative environments allow candidates to engage with peers who share similar goals, facilitating the exchange of knowledge and resources. In study groups, members can discuss complex topics, clarify doubts, and explore different perspectives on virtualization and containerization technologies.

This interaction not only enhances understanding but also creates a supportive network that keeps participants motivated and accountable throughout their study journey. By participating in group discussions, candidates can reinforce their learning, share valuable insights, and stay on track with their exam preparation.

5. Take Practice Exams

Taking practice exams is a crucial component of effective preparation for the LPIC-3 Virtualization and Containerization (305-300) exam. These practice tests simulate the actual exam environment, providing candidates with the opportunity to familiarize themselves with the exam format and question types. By regularly completing practice exams, candidates can build their confidence, identify strengths and weaknesses, and refine their understanding of key concepts. Analyzing performance on these tests allows for targeted study sessions focused on areas that need improvement.

Additionally, practice exams help develop essential time management skills, ensuring candidates can complete the actual exam within the designated timeframe. By incorporating practice exams into their study routine, candidates significantly enhance their readiness for the LPIC-3 certification.

The post LPIC-3 Virtualization and Containerization (305-300) appeared first on Testprep Training Tutorials.

1. What is the LPIC-3 Virtualization and Containerization (305-300) exam?

The LPIC-3 certification marks the pinnacle of the Linux Professional Institute’s (LPI) multi-tiered professional certification program. Aimed at enterprise-level Linux professionals, LPIC-3 stands as the highest distribution-neutral Linux certification in the industry. The certification focuses on the administration of Linux systems across an organization, emphasizing virtualization and containerization technologies.

2. What are the prerequisites for taking the exam?

To be eligible for the LPIC-3 Virtualization and Containerization (305-300) exam, you must have an active LPIC-2 certification.

3. What are the topics covered in the LPIC-3 305-300 exam?

The exam covers a wide range of topics, including:

• Full virtualization
• Container virtualization
• VM deployment and provisioning

4. How many questions are on the exam?

The exam consists of 60 multiple-choice and fill-in-the-blank questions.

5. How long is the LPIC-3 Virtualization and Containerization (305-300) exam?

The exam has a duration of 90 minutes.

6. What is the passing score for the LPIC-3 (305-300) exam?

The passing score for the exam is 50% or higher.

7. What is the language of the exam?

The exam is offered in English and Japanese language.

8. How can I prepare for the LPIC-3 Virtualization and Containerization (305-300) exam?

There are a number of ways to prepare for the exam, including:

• Taking a practice exam
• Studying the exam objectives
• Reading books and articles on virtualization and containerization
• Taking an online course or attending a training class

9. What are the benefits of obtaining the LPIC-3 305-300 certification?

Obtaining the LPIC-3 305-300 certification can have a number of benefits, including:

• Increased job opportunities
• Higher salary
• Improved career prospects
• Recognition as a skilled Linux professional

10. How long is the certification valid?

The LPIC-3 Virtualization and Containerization (305-300) certification is valid for five years.

Check Here for More

Go Back To The Tutorial

The post LPIC-3 Virtualization and Containerization (305-300) Exam FAQs appeared first on Testprep Training Tutorials.

Question 1 – NFSv4 provides which of the following services that do not exist in NFSv3?

• A. rpc.idmapd
• B. rpc.statd
• C. nfsd
• D. rpc.mountd

Correct Answer: A

Reference: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/5/html/deployment_guide/ch-nfs

Question 2 – When smb passwd is used to change the encrypted Samba password, which of the following actions synchronizes UNIX passwords with Samba passwords?

• A. There are no actions to accomplish this since is not possible.
• B. Run net vamp regularly, to convert the passwords.
• C. Run winbind “”sync, to synchronize the passwords.
• D. Add Unix password sync = yes to smb.conf
• E. Add smb Unix password = sync to smb.conf

Correct Answer: D

Reference: https://www.oreilly.com/openbook/samba/book/ch06_04.html

Question 3 – Using the samba-tool test parm command, what does it confirm about the Samba configuration?

• A. The configuration loads successfully.
• B. The service operates as expected.
• C. The Samba services are started automatically when the system boots.
• D. Netfilter is not blocking access to the services specified in the configuration on the Samba server.
• E. All running Samba processes use the most recent configuration version.

Correct Answer: A

Reference: https://www.samba.org/samba/docs/current/man-html/testparm.1.html

Question 4 – If the main goal is to set up a guest printer service, which Samba option should be selected?

• A. security = cups
• B. security = ldap
• C. security = pam
• D. security = share
• E. security = printing

Correct Answer: D

Question 5 – What command is used for displaying NFC kernel statistics?

Correct Answer: nfsstat

Reference: https://www.systutorials.com/docs/linux/man/8-nfsstat/

Question 6 – In Squid configuration, which keyword is used to define networks and times used to limit access?

• A. acl
• B. allow
• C. http_allow
• D. permit

Correct Answer: A

Reference: https://www.tecmint.com/configure-squid-server-in-linux/

Question 7 – Given the following Squid configuration excerpt: cache_dir ufs /var/spool/squid3/ 1024 16 256

Directly within the directory will exist the following directories: /var/spool/squid3/?

• A. 0F
• B. A0
• C. 0b
• D. FF
• E. 00

Correct Answer: AC

Question 8 – What is true about Server Name Indication (SNI)? (Choose two.)

• A. supports transparent failover of TLS sessions from one web server to another.
• B. allows multiple SSL/TLS secured virtual HTTP hosts to coexist on the same IP address.
• C. enables HTTP servers for updating the DNS of their virtual hosts’ names using the X 509 certificates of the virtual hosts.
• D. provides a list of available virtual hosts to the client during the TLS handshake.
• E. submits the hostname of the requested URL during the TLS handshake.

Correct Answer: BE

Question 9 – When the SSL certificate for the server was generated, which Apache HTTPD configuration directive used the RSA private key?

• A. SSLCertificateKeyFile
• B. SSLKeyFile
• C. SSLPrivateKeyFile
• D. SSLRSAKeyFile

Correct Answer: A

Reference: https://httpd.apache.org/docs/2.4/ssl/ssl_faq.html#aboutcerts

Question 10 – On a site hosted by Apache HTTPD, users are required to authenticate against the /srv/www/security/sitepasswd file in order to access a restricted area. If Basic authentication is used, how can existing users change their passwords without losing data?

• A. htpasswd “”c /srv/www/security/sitepasswd user
• B. htpasswd /srv/www/security/sitepasswd user
• C. htpasswd “”n /srv/www/security/sitepasswd user
• D. htpasswd “”D /srv/www/security/sitepasswd user

Correct Answer: A

Reference: https://httpd.apache.org/docs/2.4/howto/auth.html

Question 11 – What Apache HTTPD configuration directive specifies the authentication method, eg, Basic or None?

• A. AuthUser
• B. AllowedAuthUser
• C. AuthType
• D. AllowAuth

Correct Answer: C

Reference: https://httpd.apache.org/docs/2.4/howto/auth.html

Question 12 – The IPv4 packet forwarding for a Linux router has been enabled. Rebooting the machine stops it from forwarding IP packets from other hosts. The command: echo 1 > /proc/sys/net/ipv4/ip_forward can temporarily resolve this issue. In order to keep this setting across system restarts, which of the following options is best?

• A. Adding echo 1 > /proc/sys/net/ipv4/ip_forward to the root user login script
• B. Adding echo 1 > /proc/sys/net/ipv4/ip_forward to any user login script
• C. In /etc/sysct1.conf change net.ipv4.ip_forward to 1
• D. In /etc/rc.local add net.ipv4.ip_forward = 1
• E. In /etc/sysconfig/iptables-config add ipv4.ip_forward = 1

Correct Answer: C

Question 13 – When an OpenVPN server configuration file specifies a status parameter, what information can be found in that file? (Choose two.)

• A. Errors and warnings generated by the OpenVPN daemon
• B. Routing information
• C. Statistical information regarding the currently running OpenVPN daemon
• D. A list of currently connected clients
• E. A history of all clients who have connected at some point

Correct Answer: BD

Question 14 – To increase the security of the server, which of the following lines should be changed in the sshd configuration file? (Choose two.)

• A. Protocol 2, 1
• B. PermitEmptyPasswords no
• C. Port 22
• D. PermitRootLogin yes
• E. IgnoreRhosts yes

Correct Answer: AD

Question 15 – In which Nmap parameter does Nmap scan a target for open TCP ports? (Choose two.)

• A. -sO
• B. -sZ
• C. -sT
• D. -sU
• E. -sS

Correct Answer: CE

Question 16 – Is there an option in the client configuration file that would permit OpenVPN to connect to a peer using a dynamic source port?

• A. src-port
• B. remote
• C. source-port
• D. nobind
• E. dynamic-bind

Correct Answer: D

Question 17 – In order to provide anonymous FTP users with file system operations, which Linux user is used by vsftpd?

• A. The Linux user which runs the vsftpd process
• B. The Linux user that owns the root FTP directory served by vsftpd
• C. The Linux user having the same user name that was used to anonymously log into the FTP server
• D. The Linux user root, but vsftpd grants access to anonymous users only to globally read-/writeable files
• E. The Linux user specified in the configuration option ftp_username

Correct Answer: E

Question 18 – If you want to disable password-based logins altogether, what sshd configuration should be set to no? (Choose two.)

• A. PAMAuthentication
• B. ChallengegeResponseAuthentication
• C. PermitPlaintextLogin
• D. UsePasswords
• E. PasswordAuthentication

Correct Answer: BE

Question 19 – DROP is the default policy for the Netfilter INPUT chain, so why would a rule allowing traffic to localhost is necessary?

• A. All traffic to localhost must always be allowed
• B. It doesn’t matter; Netfilter never affects packets addressed to localhost
• C. Some applications use the localhost interface to communicate with other applications
• D. syslogd receives messages on localhost
• E. Via iptables, packet filter rules can be created and changed using the Netfiltered daemon on localhost

Correct Answer: C

Question 20 – SSH key pairs are created with what command? (Specify ONLY the command without any path or parameters)

Correct Answer: ssh-keygen

The post LPIC-2 (202-450) Certified Linux Engineer Sample Questions appeared first on Testprep Training Tutorials.

The LPIC-1 (102-500): Certified Linux Administrator course is designed to match the real world of system administration: with its job task analysis surveys, the Linux Professional Institute determine what real sysadmins do on the job, and what skills they need. Therefore, to pass the interview round, you must showcase your ability to run Linux from a shell prompt, set up a Linux machine from scratch, and configure basic networking. Further, you need to have expertise in performing such tasks as running basic system administration commands on the command line, installing and configuring a Linux operating system, and setting up a network. 

You may also go through our LPIC-1 (102-500): Certified Linux Administrator Online tutorial to further strengthen your knowledge base. Our Free Practice Tests will further help attain your desired certification and become competent to your employers in an ever-changing job market. 

Everyone gets grilled during interviews. Even if you’re a seasoned expert, the questions you get asked at each new job will invariably be unique. But this doesn’t mean you’ll have to wing it when the time comes for your next interview. To help ease your post-interview nerves here’s a list of some of the more popular LPIC-1 (102-500): Certified Linux Administrator Interview Questions you may get asked. Let’s get started!

1. What is a Linux shell script?

 A shell script is a text file containing a sequence of commands for a UNIX-based operating system. The name comes from the fact that it combines a sequence of commands that would otherwise have to be typed into the keyboard one at a time into a single script.

2. Could you differentiate between shell and bash scripting?

Bash stands for “Bourne Again Shell”, and is a better version of the original Bourne shell (sh). A shell script can be used in any shell, but Bash scripts may only be used in a Bash environment.

3. Could you explain the purpose of skeleton directories?

A skeleton directory is a directory used by popular hosting programs such as cPanel or Plesk to store default files and folders. To find this directory, log in to your server via WHM (Web Host Manager) in your browser. Type ‘skell’ into the search box(a), and this will sort the menu options for you.

4. How does the Shebang work in Linux?

The shebang —the first line of the script file— tells the kernel which program to use to run the program in a file. A shebang is any one-line comment that has the characters 

5. How would you define SUID permissions?

 The SUID bit is called Set owner User ID. This bit is a special permission that applies to scripts or applications. When the SUID bit is set, when the command is run, its effective UID becomes that of the owner of the file instead of the user running it.

6. How would you define the X11 architecture?

The X Window System (aka X11) is a network protocol for displaying graphics on a variety of different hardware platforms. It has been implemented by a number of different vendors for a wide variety of hardware platforms. In Ubuntu, we ship X11 as implemented by the X.org project on Linux.

7. Is Wayland better than X11?

 Wayland is more lightweight than X, as it avoids most of X11’s legacy baggage. One of the primary reasons for X11’s complexity is that its function has changed over the years. As a result, today, X11 widely serves as “a really terrible” communications protocol between the clients and the window managers.

8. How would you explain what Xorg does in Linux?

Xorg is an open-source X11-based desktop infrastructure. It is a piece of software that allows you to interact with your hardware and run graphical programs and applications. Xorg is also fully network-aware, meaning that you can run a program on one computer while actually viewing it on another.

9. What assistive technologies are available in Fedora and Ubuntu versions of Linux?

  Ubuntu comes with a number of accessibility tools pre-installed and activated. The screen reader, magnifier, and on-screen keyboard can be activated using the Gnome Assistive Technology Preferences panel, found under System>Preferences in the Applications menu.

10. Could you explain a User Group in the database?

 User groups are essentially database items that are used as a representation of a collection of user accounts. They’re designed to make it easier to manage the privileges and permissions of multiple user accounts at once. Typically, you create a user group to represent a collection of user accounts or sometimes even a department within your organization.

11. What is the difference between a job and a cron job?

By creating Kubernetes Jobs, transient pods can be created that perform specific tasks. A CronJob does the same thing, but it runs the tasks according to a defined schedule.

12. What do you mean by localization?

The process of localizing a product, application, or document refers to modifying its content to meet the linguistic, cultural, geographical, and other requirements of a specific market (a locale).

13. What is the difference between localization and Internationalisation?

 Internationalization is the design of software so it can be adapted to various languages and regions. Whereas, localization is the actual adaptation of internationalized software for a specific region or language by translating text and adding locale-specific components.

14. How would you define the NTP Chrony?

Chrony is a free software package that allows computers to synchronize their clocks over the network, using the Network Time Protocol (NTP). It’s a replacement for the ntpd, which is a reference implementation of the NTP. Chrony runs on Unix-like operating systems (including Linux and macOS) and is released under version 2 of the GNU General Public License.

15. Can Chrony and NTP run together?

Yes, one can have multiple instances of Chrony on a computer at once. One can operate as an NTP client to synchronize the system clock and another as a server for other computers.

16. Could you highlight the functions of Syslog?

The System Logging Protocol (Syslog) is a standardized way for network devices to send out notifications in a standard message format. Syslog was designed to make it easy to monitor network devices. A Syslog agent, typically installed on the device, can send out notification messages under a wide range of specific conditions, such as when certain types of errors are spotted or when certain events happen.

17. What is meant by the Syslog configuration?

The Syslog daemon (Syslogd) provides a central location for logging messages generated by applications running on your Unix or Linux system. Its configuration file, /etc/Syslog.conf defines logging rules and output destinations for error messages, authorization violation messages, and trace data. Logging rules are defined using a facility name and a priority code.

18. What do you know about the CUPS command?

 CUPS, a utility suite for managing printers, provides several commands to set up printers and make those printers accessible to systems on the network. In addition, CUPS supports several printer-specific options that enable you to control printer configuration.

19. What are the differences between IPv6 and IPv4 security?

Although IPv6 is designed with built-in encryption capabilities and packet integrity checking, IPv4 can be configured to offer similar security features, so there is essentially no difference between the two when it comes to Internet Protocol security (IPsec).

20. What are the basic TCP IP parameters?

• Hostname.
• DHCP client.
• Domain name.
• IP address.
• Netmask.
• Broadcast address.
• Default router.

21. Could you tell me what do Net-Tools include?

 The net-tools package contains a collection of programs that form the base set of the NET- 3 network distribution for Linux. These tools control the network subsystem of the Linux kernel, including arp, hostname, ifconfig, netstat, rarp, and route.

22. What is the importance of the DNS servers?

 The Domain Name System (DNS) is a server that is devoted to matching site names, such as example.com, to their corresponding Internet Protocol or IP addresses. The DNS server contains a database including the public IP addresses along with their corresponding domain names.

23. Could you tell me some of the safest DNS servers?

• Google Public DNS. IP Addresses: 8.8.8.8 and 8.8.4.4
• OpenDNS. IP Addresses: 208.67.220.220 and 208.67.222.222
• DNSWatch. IP Addresses: 84.200.69.80 and 84.200.70.40
• OpenNIC. IP Addresses: 206.125.173.29 and 45.32.230.225
• UncensoredDNS.

24. What are the advantages of shadow passwords over traditional password systems?

Shadow passwords store encrypted passwords in a location that is not readily accessible. Shadow passwords provide a number of benefits, including the ability to store encrypted passwords in /etc/shadow, instead of the unencrypted passwords used in most systems. 

25. What is the difference between shadow and Passwd?

 The /etc/passwd and /etc/shadow files have different pieces of data. Passwd contains the users’ public information (UID, full name, home directory), while shadow contains the hashed password along with the password expiry date.

26. Could you define TCP wrappers and how they work?

 TCP Wrapper allows users to control who may access their computers. The program monitors incoming packets and checks to see if any external entity is attempting to connect. If a connection attempt is detected, TCP Wrapper examines whether the external entity is authorized. If it is authorized for connection, access is permitted; if not, access is denied. The program can be customized to suit the individual user or network needs.

27. How would you define GPG configuration?

GPG.conf is the configuration file that GPGreads on startup. This file may contain any valid long option, but the leading two dashes must not be entered and the option may not be abbreviated. This default name may be changed on the command line (GPG-option –options). You should backup this file.

28. How do GPG encryption and decryption work?

To send someone a secret message, you encrypt it using their public key. They then decrypt the message using their private key. The encrypted message and the short key are sent to the recipient who decrypts them using their own private key.

29. Is GPG encryption secure?

GPG is very secure, as long as you choose a strong enough passphrase. In practice, your passphrase will almost always be the weakest link. This instructs GPG to use a password hashing method that is slow enough to make brute-force guessing impractical, but only if you enter your passphrase on every operation.

30. Could you elaborate on the SSH port tunneling?

SSH tunneling makes it possible to transport arbitrary data over an encrypted SSH connection. It can be used to forward connections made to a port on your own desktop to a remote machine via a secure channel.

The post LPIC-1 (102-500): Certified Linux Administrator Interview Questions appeared first on Testprep Training Tutorials.

While preparing for an exam like Linux Essential (LPI 010-160), preparing yourself for the interview is equally important. The most important part while preparing for an interview is to prepare yourself for the questioning round. Candidates should research the company, job roles, and responsibilities, and most importantly look confident while answering any question. The interview round is your only chance to leave a remarkable mark on everyone and you can achieve your desired job. Therefore, for an exam like Linux Essential (LPI 010-160) exam, it is equally important to prepare yourself for the same. We along with our exam experts have researched the past interview questions and studied every aspect carefully and hence, provide our candidates with the best Interview questions. But first, you should be familiar with the basics of what this exam is all about.

Overview

The LPI Linux Essentials (010-160) is offered by Linux Professional Institute (LPI), which continuously adopts worldwide individual users, government entities, and industries to embrace open source technologies. This is an entry-level exam redefining traditional Information and Communication Technology (ICT) job roles to require more Linux skills. Therefore, we have designed some best Linux Essential (LPI 010-160) Interview Questions along with our experts to help you ace your exam with flying colors.

Now, let’s begin with some Linux Essential (LPI 010-160) Interview Questions.

1. What does Linux distribution have?

A Linux distribution is a bundle that consists of a Linux kernel and a selection of applications that are maintained by a company or user community.

2. What is Ubuntu?

Ubuntu is Debian-based distribution. Ubuntu was created by Mark Shuttleworth and his team in 2004, with the purpose to bring an easy-to-use Linux desktop environment. Ubuntu’s mission is to provide free software to everyone over the world as well as to cut the cost of professional services. 

3. What are Embedded Systems?

Embedded systems are a combination of computer hardware and software designed to have a specific function within a larger system.

4. Where are Embedded systems found?

Embedded systems are mainly found in automotive, medical, and even military applications. Due to its broad variety of applications, a number of operating systems based on the Linux kernel were developed in order to be used in embedded systems. A significant part of smart devices have a Linux kernel based operating system running on it.

5. What do you understand by Raspberry Pi?

Raspberry Pi is a low cost, credit-card sized computer that can function as a full-functionality desktop computer, but it can be used within an embedded Linux system.

6. Why do you use Office Applications?

Office applications are used for editing files such as texts, presentations, spreadsheets, and other formats commonly used in an office environment. Moreover, these applications are usually organized in collections called office suites.

7. List the two main web browsers in the Linux environment?

• Firstly, Google Chrome
• Secondly, Mozilla Firefox

8. What is Thunderbird?

Mozilla develops applications, like the e-mail client Thunderbird. Multiple users opt to use webmail instead of a dedicated email application, but a client like Thunderbird offers extra features and integrates best with other applications on the desktop.

9. List some of the most popular multimedia applications for the Linux environment?

• Blender
• GIMP
• Inkscape
• Audacity
• Lastly, ImageMagick

10. How Linux machines share data?

The NFS protocol is the standard way to share file systems in networks equipped only with Linux machines. With NFS, a computer can share one or more of its directories with specific computers on the network, so they can read and write files in these directories. Moreover, NFS can even be used to share an entire operating system’s directory tree with clients that will use it to boot from.

11. Expand and explain DHCP?

DHCP stands for Dynamic Host Configuration Protocol. DHCP is responsible for assigning an IP address to the host when a network cable is connected or when the device enters a wireless network. A DHCP server is very useful in local area networks also, to automatically provide IP addresses to all connected devices.

12. List some of the most popular programming languages?

• To begin with, JavaScript
• C
• Java
• Perl
• Shell
• Python
• Lastly, PHP

13. What are the two major desktop environments in the Linux world?

• Gnome
• KDE

14. List Linux well know open source hypervisors?

• Xen
• KVM
• Lastly, VirtualBox

15. What are Cookies?

Cookies are small files a website can save on your computer in order to store and retrieve some kind of information that can be useful for your navigation.

16. Why is Encryption needed?

Whenever data is transferred or stored, precautions need to be taken to ensure that third parties may not access the data. Data transferred over the internet passes by a series of routers and networks where third parties might be able to access the network traffic. Furthermore, data stored on physical media might be read by anyone who comes into possession of that media. To avoid this kind of access, confidential information should be encrypted before it leaves a computing device.

17. What is TLS?

Transport Layer Security (TLS) is a protocol to offer security over network connections by making use of cryptography. TLS is the successor of the Secure Sockets Layer (SSL).

18. List the different types of Shells in Linux?

There are several different shells on Linux, these are just a few:

• Bourne-again shell (Bash)
• C shell (csh or tcsh, the enhanced csh)
• Korn shell (ksh)
• Lastly, Z shell (zsh)

19. List different commands that shell supports?

The shell supports two types of commands:

• Internal
• Lastly, External

20. In Bash, there are three types of quotes. List them?

• Firstly, Double quotes
• Secondly, Single quotes
• Lastly, Escape characters

21. Define Compression?

Compression is used to reduce the amount of space a specific set of data consumes. Compression is commonly used for reducing the amount of space that is needed to store a file. Another common use is to reduce the amount of data sent over a network connection.

22. What is the difference between Lossy and Lossless algorithms?

Things compressed with a lossless algorithm can be decompressed back into their original form. Data compressed with a lossy algorithm cannot be recovered. Lossy algorithms are often used for images, video, and audio, where the quality loss is imperceptible to humans, irrelevant to the context, or the loss, is worth the saved space or network throughput.

23. What is the use of Archiving tools?

Archiving tools are used to bundle up files and directories into a single file. Some common uses are backups, bundling software source code, and data retention.

24. What is I/O Redirection?

I/O redirection enables the user to redirect information from or to a command by using a text file. The standard input, output, and error output can be redirected, and the information can be taken from text files.

25. List some Linux based operating system?

Linux-based Operating Systems

• Enterprise Linux
• Consumer Linux

26. List Windows-based Operation Systems?

• Windows Servers
• Windows Desktops

27. Mention the three Linux distributors?

• Enterprise Grade Linux Distributions
• Consumer Grade Linux Distributions
• Lastly, Experimental and Hacker Linux Distributions

28. What does Unix Operating Systems include?

• AIX
• FreeBSD, NetBSD, OpenBSD
• HP-UX
• Irix
• Lastly, Solaris

29. What is Unix?

Before we had Linux as an operating system there was Unix. Unix was sold with hardware and even today several commercial Unixes such as AIX and HP-UX are available on the market.

30. What do you understand by a motherboard?

All of a system’s hardware needs to interconnect. Therefore, a motherboard normalizes that interconnection using standardized connectors and form factors. It also provides support for the configuration and electrical needs of those connectors.

31. What is a device directory?

The device directory contains device files for all connected hardware devices. These device files are used as an interface between the devices and the processes using them.

32. Mention the two different types of device directory?

Each device file falls into one of two categories:

• Firstly, Block devices
• Lastly, Character devices

33. List the main memory types of Linux?

• Physical memory
• Lastly, Swap

34. List the different layers of networking?

• Link Layer
• Network Layer
• Lastly, Application Layer

35. What is the need to use 31-bit Subnet Mask?

• In mixed routing mode, you can configure any external interface to use an IPv4 address with a 31-bit subnet mask.
• Lastly, a 31-bit subnet mask is often used for an interface that is the endpoint of a point-to-point network.

36. What is the use of 32-bit Subnet Mask?

• A 32-bit subnet mask defines a network with only one IP address.
• Lastly, in mixed routing mode, you can only configure a 32-bit subnet mask for a physical external interface.

37. Can you use 32 subnet mask for a virtual external interface?

No, we cannot use 32 subnet masks for a virtual external interface, such as a VLAN or Link Aggregation interface because you cannot configure a virtual external interface with a default gateway on a different subnet.

38. List the major prefix types in IPv6?

• Global Unique Address
• Unique Local Address
• Lastly, Link Local Address

39. What are the three most common file types?

• normal file
• directory
• Lastly, soft link.

40. What are Temporary Files?

Temporary files are files used by programs to store data that is only needed for a short time. These can be the data of running processes, crash logs, scratch files from an autosave, intermediary files used during file conversion, cache files, etc.

Link below to Linux Essential (LPI 010-160) Interview Questions.

Take Free Practice Test Today!

The post Linux Essential Interview Questions (LPI 010-160) appeared first on Testprep Training Tutorials.

The LPIC-3 Enterprise Mixed Environment 300-100 certification is the culmination of the multi-level professional certification program of the Linux Professional Institute (LPI) and designed to evaluate the knowledge and skills of Linux systems administrators, to keep pace with evolving technology. Three separate LPIC-3 speciality certifications are available; LPIC-3 mixed environment is the highest Linux certification in the IT industry and is designed for the enterprise-level Linux professional. This certification tests the ability to integrate Linux services in an enterprise-wide mixed environment. Passing any one of the three exams will grant the LPIC-3 certification for that speciality. Furthermore, Candidates will be best prepared for the exam if lower-level certifications are achieved before higher-level certifications through the exams can be taken in any order.

Exam Prerequisites

For the LPIC-3 Linux Enterprise Professional mixed environment (300-100) candidate must have an active LPIC-2 certification to receive the LPIC-3 certification.

LPIC-3 Enterprise Mixed Environment 300-100 Exam Details

However, Before getting started with the preparation the candidates should have a complete understanding of the exam details. This will help you devise a study plan and give a clear idea of the exam format to help you with your preparation and work according to the requisites. The LPIC-3 Linux Enterprise Professional Mixed Environment certification is a pathway to your success but before that let’s understand the exam details.

The LPIC-3 Mixed environment exam is consists of 60 Multiple-choice questions and fill-ups. You are given 90 minutes to complete the exam which must be given at test centers and is not available in an online proctored platform. The LPIC-300 mixed environment exam is available in two languages- English and Japanese and is valid for 5 years. The cost of the exam is $140 USD in India. Moreover, the Minimum passing marks required is 500 out of 800.

Scheduling the Exam

Let us now look at the registration process for LPIC-3 Linux Enterprise Professional Mixed Environment 300-100 exam –

Registration Process

• Before scheduling an appointment with Pearson VUE, you must first register (if not a member) with LPI and obtain an LPI ID
• Registration is free and only takes a few minutes.
• You will need this number to create an account with Pearson VUE to schedule the exam.
• Now that you have registered go to the official exam site and click on the purchase voucher option.
• This will redirect you to the exam voucher page.
• Now select the required exam and place your order.
• Once you place your order, you will receive a confirmation e-mail from Pearson.com. This e-mail includes your exam voucher number — you need this number to register for your exam.
• It is important that you provide a valid e-mail address and that your system does not block messages from Pearson.com.

Exam Retake

• Before retaking an exam after the first failure, you must wait seven (7) days.
• For the second or subsequent failures, you must wait thirty (30) days before retaking the exam.
• Anyone who passes an exam may not retake the exam for at least two (2) years.

LPIC-3 Enterprise Mixed Environment 300-100 EXAM FAQs

Get all you doubts and queries resolved with LPIC-3 Enterprise Professional Mixed Environment 300-100 exam FAQs

LPIC-3 Mixed Environment Course Outline

Understanding the course outline is the next most important step. It familiarises you about the exam format and its objectives. Getting an idea about the course outline helps you with your preparation as each objective is assigned a weighting value. The weights indicate the relative importance of each objective on the exam. Objectives with higher weights will be covered in the exam with more questions. LPIC-3 Mixed Environment Exam outline includes 8 topics along with subtopics to provide further insights into the course. Therefore, it is advisable to create your study plan around these topics to achieve the certification keeping in mind their weightage.

Exam Topics

• Open LDAP Configuration
• Open LDAP as an Authentication Backend
• Configure Samba
• Samba Share Configuration
• Samba User and Group Management
• Samba Domain Integration
• Samba Name Services
• Working with Linux and Windows Client

Topic 390: OpenLDAP Configuration

390.1 OpenLDAP Replication

Description: Candidates should be familiar with the server replication available with OpenLDAP.

Weight: 3

Key Knowledge Area

•              Replication concepts
•              Configure OpenLDAP replication
•             Analyse replication log files
•               Understand replica hubs
•             LDAP referrals
•              LDAP sync replication

The following is a partial list of the used files, terms, and utilities:

•              master / slave server
•              multi-master replication
•              consumer
•              replica hub
•              one-shot mode
•              referral
•              syncrepl
•              pull-based / push-based synchronization
•              refresh Only and refreshAndPersist
•              replog

390.2 Securing the Directory.

Description: Candidates should be able to configure encrypted access to the LDAP directory, and restrict access at the firewall level.

Weight: 3

Key Knowledge Areas:

•              Securing the directory with SSL and TLS
•              Firewall considerations
•              Unauthenticated access methods
•              User / password authentication methods
•              Maintenance of SASL user DB
•              Client / server certificates

Terms and Utilities:

•             SSL / TLS
•              Security Strength Factors (SSF)
•              SASL
•              proxy authorization
•              StartTLS
•              iptables

390.3 OpenLDAP Server Performance Tuning

Weight: 2

Description: Candidates should be capable of measuring the performance of an LDAP server, and tuning configuration directives.

Key Knowledge Areas:

•              Measure OpenLDAP performance
•              Tune software configuration to increase performance
•              Understand indexes

Terms and Utilities:

•              index
•              DB_CONFIG

Topic 391: OpenLDAP as an Authentication Backend

391.1 LDAP Integration with PAM and NSS

Weight: 2

Description: Candidates should be able to configure PAM and NSS to retrieve information from an LDAP directory.

Key Knowledge Areas:

•              Configure PAM to use LDAP for authentication
• Configure NSS to retrieve information from LDAP
•              Configure PAM modules in various Unix environments

Terms and Utilities:

•              PAM
•              NSS
•              /etc/pam. d/
•              /etc/nsswitch.conf

391.2 Integrating LDAP with Active Directory and Kerberos

Weight: 2

Description: Candidates should be able to integrate LDAP with Active Directory Services.

Key Knowledge Areas:

•              Kerberos integration with LDAP
•              Cross platform authentication
•              Single sign-on concepts
•              Integration and compatibility limitations between OpenLDAP and Active Directory

Terms and Utilities:

•              Kerberos
•              Active Directory
•             single sign-on
•              DNS

Topic 392: Samba Basics

392.1 Samba Concepts and Architecture

Weight: 2

Description: Candidates should understand the essential concepts of Samba. As well, the major differences between Samba3 and Samba4 should be known.

Key Knowledge Areas:

•              Understand the roles of the Samba daemons and components
•              Understand key issues regarding heterogeneous networks
•              Identify key TCP/UDP ports used with SMB/CIFS
•              Knowledge of Samba3 and Samba4 differences

The following is a partial list of the used files, terms, and utilities:

•              /etc/services
•              Samba daemons: smbd, nmbd, samba, winbindd

392.2 Configure Samba.

Weight: 4

Description: Candidates should be able to configure the Samba daemons for a wide variety of purposes.

Key Knowledge Areas:

•              Knowledge of Samba server configuration file structure
•              Knowledge of Samba variables and configuration parameters
•              Troubleshoot and debug configuration problems with Samba

Terms and Utilities:

•              smb.conf
•              smb.conf parameters
•              smb.conf variables
•              testparm
•              secrets.tdb

392.3 Regular Samba Maintenance

Weight: 2

Description: Candidates should know about the various tools and utilities that are part of a Samba installation.

Key Knowledge Areas:

•              Monitor and interact with running Samba daemons
•              Perform regular backups of Samba configuration and state data

Terms and Utilities:

•              smbcontrol
•              smbstatus
•              tdbbackup

392.4 Troubleshooting Samba

Weight: 2

Description: Candidates should understand the structure of trivial database files and know how troubleshoot problems.

Key Knowledge Areas:

•              Configure Samba logging
•              Backup TDB files
•              Restore TDB files
•              Identify TDB file corruption
•              Edit / list TDB file content

Terms and Utilities:

•              /var/log/samba/
•              log level
•              debuglevel
•              smbpasswd
•              pdbedit
•              secrets.tdb
•              tdbbackup
•              tdbdump
•              tdbrestore
•              tdbtool

392.5 Internationalization

Weight: 1

Description: Candidates should be able to work with internationalization character codes and code pages.

Key Knowledge Areas:

•              Understand internationalization character codes and code pages
•              Understand the difference in the name space between Windows and Linux/Unix with respect to share, file, and directory names in a non-English environment
•              Understand the difference in the name space between Windows and Linux/Unix with respect to user and group naming in a non-English environment
•              Understand the difference in the name space between Windows and Linux/Unix with respect to computer naming in a non-English environment

Terms and Utilities:

•             internationalization
•          character codes
•              code pages
•              smb.conf
•              dos charset, display charset and Unix charset

Topic 393: Samba Share Configuration

393.1 File Services

Weight: 4

Description: Candidates should be able to create and configure file shares in a mixed environment.

Key Knowledge Areas:

•              Create and configure file sharing
•              Plan file service migration
•              Limit access to IPC$
•              Create scripts for user and group handling of file shares
•              Samba share access configuration parameters

Terms and Utilities:

•              smb.conf
•              [homes]
•              smbcquotas
•             smbsh
•              browseable, writeable, valid users, write list, read list, read only and guest ok
•              IPC$
•              mount, smbmount

393.2 Linux File System and Share/Service Permissions

Weight: 3

Description: Candidates should understand file permissions on a Linux file system in a mixed environment.

Key Knowledge Areas:

•              Knowledge of file / directory permission control
•              Understand how Samba interacts with Linux file system permissions and ACLs
•              Use Samba VFS to store Windows ACLs

Terms and Utilities:

•              smb.conf
•              chmod, chown
•              create mask, directory mask, force create mode, force directory mode
•              smbcacls
•              getfacl, setfacl
•              vfs_acl_xattr, vfs_acl_tdb and vfs objects

393.3 Print Services

Weight: 2

Description: Candidates should be able to create and manage print shares in a mixed environment.

Key Knowledge Areas:

•              Create and configure printer sharing
•              Configure integration between Samba and CUPS
•              Manage Windows print drivers and configure downloading of print drivers
•              Configure [print$]
•              Understand security concerns with printer sharing
•              Uploading printer drivers for Point’n’Print driver installation using ‘Add Print Driver Wizard’ in Windows

Terms and Utilities:

•              smb.conf
•              [print$]
•              CUPS
•              cupsd.conf
•              /var/spool/samba/.
•              smbspool
•              rpcclient
•              net

Topic 394: Samba User and Group Management

394.1 Managing User Accounts and Groups

Weight: 4

Description: Candidates should be able to manage user and group accounts in a mixed environment.

Key Knowledge Areas:

•              Manager user and group accounts
•              Understand user and group mapping
•              Knowledge of user account management tools
•              Use of the smbpasswd program
•              Force ownership of file and directory objects

Terms and Utilities:

•              pdbedit
•              smb.conf
•              samba-tool user (with subcommands)
•              samba-tool group (with subcommands)
•              smbpasswd
•              /etc/passwd
•              /etc/group
•              force user, force group.
•              idmap

394.2 Authentication, Authorization and Winbind

Weight: 5

Description: Candidates should understand the various authentication mechanisms and configure access control. Candidates should be able to install and configure the Winbind service.

Key Knowledge Areas:

•              Setup a local password database
•              Perform password synchronization
•              Knowledge of different passdb backends
•              Convert between Samba passdb backends
•              Integrate Samba with LDAP
•              Configure Winbind service
•              Configure PAM and NSS

Terms and Utilities:

•              smb.conf
•              smbpasswd, tdbsam, ldapsam
•              passdb backend
•              libnss_winbind
•              libpam_winbind
•              libpam_smbpass
•              wbinfo
•              getent
•              SID and foreign SID
•              /etc/passwd
•              /etc/group

Topic 395: Samba Domain Integration

395.1 Samba as a PDC and BDC

Weight: 3

Description: Candidates should be able to setup and maintain primary and backup domain controllers. Candidates should be able to manage Windows/Linux client access to the NT-Style domains.

Key Knowledge Areas:

•              Understand and configure domain membership and trust relationships
•              Create and maintain a primary domain controller with Samba3 and Samba4
•              Create and maintain a backup domain controller with Samba3 and Samba4
•              Add computers to an existing domain
•              Configure logon scripts
•              Configure roaming profiles
•              Configure system policies

Terms and Utilities:

•              smb.conf
•              security mode
•              server role
•              domain logons
•              domain master
•              logon script
•              logon path
•              NTConfig.pol
•              net
•              profiles
•              add machine script
•              profile acls

395.2 Samba4 as an AD compatible Domain Controller

Weight: 3

Description: Candidates should be able to configure Samba 4 as an AD Domain Controller.

Key Knowledge Areas:

•              Configure and test Samba 4 as an AD DC
•              Using smbclient to confirm AD operation
•              Understand how Samba integrates with AD services: DNS, Kerberos, NTP, LDAP

Terms and Utilities:

•              smb.conf
•              server role
•              samba-tool domain (with subcommands)
•              samba

395.3 Configure Samba as a Domain Member Server

Weight: 3

Description: Candidates should be able to integrate Linux servers into an environment where Active Directory is present.

Key Knowledge Areas:

•              Joining Samba to an existing NT4 domain
•              Joining Samba to an existing AD domain
•              Ability to obtain a TGT from a KDC

Terms and Utilities:

•              smb.conf
•              server role
•              server security
•              net command
•              kinit, TGT and REALM

Topic 396: Samba Name Services

396.1 NetBIOS and WINS

Weight: 3

Description: Candidates should be familiar with NetBIOS/WINS concepts and understand network browsing.

Key Knowledge Areas:

•            Understand WINS concepts
•              Understand NetBIOS concepts
•              Understand the role of a local master browser
•              Understand the role of a domain master browser
•              Understand the role of Samba as a WIN’S server
•              Understand name resolution
•              Configure Samba as a WINS server

•              Configure WINS replication
•              Understand NetBIOS browsing and browser elections
•              Understand NETBIOS name types

Terms and Utilities:

•              smb.conf
•              nmblookup
•              smbclient
•              name resolve order
•              lmhosts
•              wins support, wins server, wins proxy, dns proxy
•              domain master, os level, preferred master

396.2 Active Directory Name Resolution

Weight: 2

Description: Candidates should be familiar with the internal DNS server with Samba4.

Key Knowledge Areas:

•              Understand and manage DNS for Samba4 as an AD Domain Controller
•              DNS forwarding with the internal DNS server of Samba4

Terms and Utilities:

•              samba-tool dns (with subcommands)
•             smb.conf
•             dns forwarder
•              /etc/resolv.conf
•              dig, host

Topic 397: Working with Linux and Windows Clients

397.1 CIFS Integration

Weight: 3

Description: Candidates should be comfortable working with CIFS in a mixed environment.

Key Knowledge Areas:

•              Understand SMB/CIFS concepts
•              Access and mount remote CIFS shares from a Linux client
•              Securely storing CIFS credentials
•              Understand features and benefits of CIFS
•              Understand permissions and file ownership of remote CIFS shares

Terms and Utilities:

•              SMB/CIFS
•              mount, mount.cifs
•              smbclient
•              smbget
•              smbtar
•              smbtree
•              findsmb
•              smb.conf
•              smbcquotas
•              /etc/fstab

397.2 Working with Windows Clients

Weight: 2

Description: Candidates should be able to interact with remote Windows clients and configure Windows workstations to access file and print services from Linux servers.

Key Knowledge Areas:

•              Knowledge of Windows clients
•              Explore browse lists and SMB clients from Windows
•              Share file / print resources from Windows
•              Use of the smbclient program
•              Use of the Windows net utility

Terms and Utilities:

•              Windows net command
•              smbclient
•              control panel
•              rdesktop
•              workgroup

Preparatory Guide for LPIC-3 Enterprise Mixed Environment 300-100

There goes a lot of hard work and consistency while preparing for an exam. It is the key to your successful and thriving career and opens a variety of opportunities for you. However, success at obtaining the LPIC-3 Mixed environment certification is not something that can be done overnight or with a blink of an eye. Moreover, it requires focus, time, efficiency, and a clear roadmap. Our preparatory guide here will always help you during your preparation journey. It will take you through all the exam resources and prepare you well for the exam.

Step 1: Review the Exam Objectives

Now, that you have reviewed the exam details it is Important to make sure that you are up to date with the course outline, and nothing is left out. As Mentioned earlier, Course outline is the most important step while preparing for any exam. Furthermore, Acquainting yourself with the exam objectives helps in grasping concepts faster and properly. Given the wide syllabus this exam covers, it is suggested that you refer the Official Exam website. This exam covers 8 topics namely:     

•              Open LDAP Configuration
•              Open LDAP as an Authentication Backend
•              Configure Samba
•              Samba Share Configuration
•              Samba User and Group Management
•             Samba Domain Integration
•              Samba Name Services
•              Working with Linux and Windows Clients

Step 2- Discover your Learning Resources.

Study Guide

The LPIC-3 study guide provides you with complete clarity about the exam contents. It would help you prepare for the exam from the scratch.

Books your best friends.

Groundwork for any test without books appears to be absurd and unproductive simultaneously. You should always reach for credible and authentic books written by expert authors to give you an edge over others. Books are a comprehensive source of information and can sometimes provide you with detailed insights that the study guides may not provide. Books like Linux Textbook LPIC Level 3 300 Exam by authors Kenichi Hamano Akira and Takahashi Motoshin should definitely be in your reading list.

Step 3- Join an Online Community

Having fruitful discussions with people who are in the same boat as yours is always useful as well as enlightening. Joining communities helps you in gaining insights into different aspects of the same problem. Also, It not only widens your arena but also gives a new dimension to the way you think and reach out to problems. They help you stay up to date and reach out to industry experts and professionals while giving you the right exposure for your expertise.

Step 4- Practice Tests are your way ahead.

No matter how much you prepare, your preparation is incomplete without practice tests. Analysing your preparation is an important step towards self-evaluation. Giving a practice test gives you a baseline for understanding where you are starting from. You can use that as the basis for planning the rest of your studying by knowing your strengths and weaknesses and working on key areas. Additionally, you also get to practice your speed and accuracy and boost your confidence. Try outperforming yourself with each subsequent test and earn this certification. Start practising now.

The post LPIC-3 Linux Enterprise Professional Mixed Environment 300-100 appeared first on Testprep Training Tutorials.

The Exam: 303-200 LPIC-3 Linux Enterprise Professional Security certification is the culmination of the multi-level professional certification program of the Linux Professional Institute (LPI). The LPIC-3 certification is intended for enterprise-level Linux professionals and represents the industry’s highest level of professional, distribution-neutral Linux certification. There are three different LPIC-3 specialty certificates available. The LPIC-3 certification for that specialty can be obtained bypassing any of the three tests. 303-200 for the LPIC-3 Exam Enterprise Security certification covers enterprise-wide Linux system management with a focus on security.

Prerequisites:

To get the LPIC-3 certification, the candidate must hold a valid LPIC-2 certification.

Exam Details 

• The LPIC-3 Linux Enterprise Professional Security has a code of 303-200. Secondly, talking about the LPIC-3 303-200 exam questions, there will be 60 questions. However, for each question on the examination, there are multiple possible responses.
• The candidate will be given 90 minutes to complete the LPIC-3 Linux Enterprise Professional Security exam.
• The person taking the exam reviews the response options and selects the most correct answer to the question.
• The validity of the exam is 5​ years unless a retaken or a higher level is achieved.
• Languages for exams available in VUE test centers are English, German, Japanese, Portuguese (Brazilian), and languages for exams available online via OnVUE: English. 

Course Outline: LPIC-3 Exam: 303-200

The followings are the learning objectives for the Exam: 303-200 LPIC-3 Linux Enterprise Professional Security. A weighted value is applied to each objective. The weights represent the proportional relevance of each exam goal. Higher-weighted objectives will be addressed in more depth in the test, with more questions.

1. Cryptography

• Certificates and Public Key Infrastructures
• Certificates for Encryption, Signing, and Authentication
• Encrypted File Systems
• DNS and Cryptography

2. Host Security

• Host Hardening
• User Management and Authentication
• Host Intrusion Detection
• FreeIPA Installation and Samba Integration

3. Access Control

• Discretionary Access Control
• Mandatory Access Control
• Network File Systems

4. Network Security

• Network Hardening
• Packet Filtering
• Network Intrusion Detection
• Virtual Private Networks

LPIC-3 Exam: 303-200 FAQ

Exam Policies

LPIC-3 is one of the most sought after information security certification, ensuring that the potential aspirants for the exam are well aware of the exam policies. These exam policies provide various required and relevant exam details, along with the certification exam procedures.

Preparatory Guide for Exam: 303-200 LPIC-3 Linux Enterprise Professional Security

While preparing for any certification or exam, it should be very clear if you know where to begin. Therefore, we at Testprep training have curated a list of all the learning steps and resources which will guide you in a way to success and become Exam: 303-200 LPIC-3 Linux Enterprise Professional Security. 

1. LPI Official Website

First and foremost, you should go to the LPI’s official website, which has the most accurate information regarding the test. There, you may look over the LPIC-3 303-200 study guide to learn everything you need to know about the certification and test. The LPI website also has the Exam: 303-200 LPIC-3 Linux Enterprise Professional Security study guide. The study guide contains all of the most accurate and up-to-date material about a certain test. The goals and basic information regarding the LPIC-3 303-200 certification test are also included.

2. Review All the objectives 

With complete exam objectives, the candidate’s exam preparation time is better spent because they already know what to study. Significantly, this is the most important step in the preparation guide. So, let’s take a quick look at the Objectives of the LPIC-3 Exam: 303-200 Exam. 

• Cryptography
• Host Security
• Access Control
• Network Security

3. Books and Guides

Maybe, finding the correct study material is a challenging task but the candidate has to learn and explore the correct study material. Books and guides help the candidate to understand Exam: 303-200 LPIC-3 Linux Enterprise Professional Security thoroughly. This is one of the most important steps for having a good LPIC-3 303-200 exam preparation.

4. Training Program 

Training will highly beneficial for such an exam. In order to preserve its vendor-independence while restoring a variety of sources of high-quality examination preparation, LPI has produced a number of partnership programs that assist identify supporting groups and companies. Correspondingly, the candidate can opt for any other LPIC-3 303-200 training program if they want. 

5. Try Practise Test

Practice tests are the one who ensures the candidate about their preparation. The LPIC-3 303-200 practice test will help the candidates to acknowledge their weak areas so that they can work on them. There are many LPIC-3 303-200 practice exam tests available on the internet nowadays, so the candidate can choose which they want. We at Testprep training also offer practice tests which are very helpful for the ones who are preparing. 

The post Exam: 303-200 LPIC-3 Linux Enterprise Professional Security appeared first on Testprep Training Tutorials.

What is the LPIC-3 Exam: 303-200?

The Exam: 303-200 LPIC-3 Linux Enterprise Professional Security certification is the culmination of the multi-level professional certification program of the Linux Professional Institute (LPI). LPIC-3 is designed for the enterprise-level Linux professional and represents the highest level of professional, distribution-neutral Linux certification within the industry.

How many questions are there in the LPIC-3 Linux Enterprise Professional Security Exam?

The Exam consists of 60 Questions.

How much will I be given to take the LPIC-3 Exam: 303-200?

To complete the LPIC-3 Exam: 303-200 the candidate will be given 90 minutes.

What is the registration fee for the LPIC-3 Exam: 303-200?

The registration for the above-mentioned exam is USD 200 plus taxes.

How much do I need to score to qualify the LPIC-3 Exam: 303-200?

A candidate scoring 500 out of 800 will be marked as passed for the LPIC-3 Exam: 303-200.

Is the LPIC-3 Exam: 303-200 only available in the English language?

The exam is available in various languages like English, German, Japanese, Portuguese, Spanish, Chinese (Simplified) and Chinese (Traditional). 

What is the course outline of the LPIC-3 Exam: 303-200?

The exam objectives for the exam include:

• Cryptography
• Host Security
• Access Control
• Network Security

How can I prepare for the Exam: 303-200 LPIC-3 Linux Enterprise Professional Security?

The candidate can prepare for the Exam: 303-200 LPIC-3 Linux Enterprise Professional Security by some steps such as visiting the official site, learning, and understanding the objectives, books and guides, practice tests, training programs, etc. 

What are the benefits of certification?

The main point of distinction between LPI and other Linux certification programs is that LPI certification exams are entirely vendor-independent and also distribution neutral. This enables candidates to showcase their skills across the distributions giving you the flexibility essential in working in a wide range of environments.

Why do you use written tests?

LPI prefers written exams as these exams are accepted as standardized exams globally. For a more detailed explanation, see the Exam Development Process.

Does it matter which version of the exams I write?

No, you are free to take any version of the exam. Whenever LPI releases a new version of any exam, then the previous version remains available for a maximum of 6 months. This is done to allow candidates to take the version that they have prepared for.

Where can I take the exams?

LPI certification exams are offered in-person, worldwide at Pearson VUE testing centres. Visit Pearson VUE to locate the nearest testing centres.

What is the platform LPI uses for online exams?

LPI uses Pearson VUE’s OnVUE testing platform.

What are the technical and logistical requirements for writing an OnVUE online exam?

The main requirement includes a Mac or Windows OS. However, LPI is encouraging Pearson VUE to make the testing available on Linux systems as well. For more information visit: https://home.pearsonvue.com/vue-test/onvue. 

What languages are supported?

The exam languages are English, German, Japanese, Dutch, Portuguese (Brazilian), Chinese (Simplified), and Chinese (Traditional).

Is the pricing for the exams going to stay the same for online testing? Can I use an exam voucher that I’ve already purchased?

Yes, exam pricing shall remain to be the same. Purchasing a voucher will help you schedule your online test with OnVUE.

When will I get my results?

After completing your exam, you will immediately receive your results and a score report. Within 24 hours, Pearson VUE will then transfer your exam results to LPI, post which your certification will be issued by LPI.

Note: Physical certificates are not issued for Linux Essentials.

When will more exams and languages become available for online testing?

These updates for the Linux Essentials exam will be published on LPI’s coronavirus page.

How do I verify my certification status for potential employers?

You can verify your certification on LPI’s Certification Verification page. You must enter your LPI ID and certification verification code.

How long will it take to receive my certification package once I’ve passed?

Your certification will be sent via regular post within 6-8 weeks for delivery. However, for Linux Essentials Exam, no physical certification will be issued.

Can I receive a PDF copy of my certificate?

Yes, you can download a PDF copy of your certificate from the overview page from your lpi.org account.

The post LPIC-3 Exam: 303-200 FAQ appeared first on Testprep Training Tutorials.

The Linux Professional Institute’s multi-level professional certification program culminates in the LPIC-3 certification (LPI). The LPIC-3 Exam: 304 – Linux Enterprise Professional Virtualization and High Availability is designed for enterprise-level Linux professionals, and it is the industry’s highest level of professional, distribution-neutral Linux certification. There are three different LPIC-3 specialty certificates available.

The LPIC-3 certification for that specialty can be obtained by preparing and passing any of the three tests. The LPIC-3 Enterprise Virtualization and High Availability certification cover enterprise-wide Linux system administration, with a focus on virtualization and high availability.

Prerequisites:

• To get the LPIC-3 certification, the candidate must hold a valid LPIC-2 certification.

Exam Details 

• The LPIC-3 Exam: 304 – Linux Enterprise Professional Virtualization and High Availability has a code of 304-200 and the exam consists of 60 questions. However, talking about the LPIC-3 304-200 exam questions format, there will be multiple responses type questions.
• The candidate will be given 90 minutes to complete the LPIC-3 exam.
• However, the individual taking the test considers all of the response alternatives and chooses the most accurate response to the question.
• The validity of the exam is 5​ years unless a retaken or a higher level is achieved. Languages for exams available in VUE test centers are English, German, Japanese, Portuguese (Brazilian), and languages for exams available online via OnVUE: English. 

Course Outline: LPIC-3 Exam: 304

The LPIC-3 Exam 304 – Linux Enterprise Professional Virtualization with High Availability has the following learning objectives. A weighted value is applied to each aim. The weights represent the proportional relevance of each exam goal. Higher-weighted objectives will be addressed in more depth in the test, with more questions.

1. Virtualization

• Virtualization Concepts and Theory
• Xen
• KVM
• Other Virtualization Solutions
• Libvirt and Related Tools
• Cloud Management Tools

2. High Availability Cluster Management

• High Availability Concepts and Theory
• Load Balanced Clusters
• Failover Clusters
• High Availability in Enterprise Linux Distributions

3. High Availability Cluster Storage

• DRBD / cLVM
• Clustered File Systems

LPIC-3 Exam: 304-200 FAQ

Exam Policies

LPIC-3 is one of the most sought-after information security certifications, ensuring that the potential aspirants for the exam are well aware of the exam policies. These test policies provide a wide range of needed and useful exam information, as well as certification exam methods.

Preparatory Guide for LPIC-3 Exam: 304 – Linux Enterprise Professional Virtualization and High Availability

While preparing for any certification or exam, it should be very clear if you know where to begin. Therefore, we at Testprep training have curated a list of all the learning steps and resources which will guide you in a way to success and become LPIC-3 Exam: 304 – Linux Enterprise Professional Virtualization and High Availability. So, let’s understand the LPIC-3 304-200 study guide.

1. LPI Official Website

First of all, you should visit the official website of the LPI because it offers the most reliable information about the exam. LPI provides a study guide for each of its certifications and exams. The LPIC-3 Exam: 304 – Linux Enterprise Professional Virtualization and High Availability study guide are also present on the LPI website. The LPIC-3 304-200 exam guide provides all the reliable and most relevant information on a particular exam. It also includes the objectives and the basic details about the exam. 

2. Review All the objectives 

The candidate’s exam preparation time is better spent with comprehensive exam objectives because they already know what to study. This is, by far, the most crucial stage in the preparation guide. So, let’s take a brief look at the Objectives to help you prepare for the LPIC-3 304-200 test.

• Virtualization
• High Availability Cluster Management
• High Availability Cluster Storage

3. Books and Guides

Finding the right study material may be difficult, but the applicant must learn and investigate the right study material. Books and publications assist candidates in properly comprehending the LPIC-3 Exam: 304 – Linux Enterprise Professional Virtualization and High Availability. One of the most crucial phases in the preparation guidance is this one.

4. Training Program 

For a test like this, preparation is essential. LPI has created a number of collaboration initiatives to help find supportive groups and corporations in order to maintain its vendor independence while reinstating a diversity of high-quality test preparation materials. In turn, the candidate can choose any other LPIC-3 304-200 training programme if they so want.

5. Try Practise Test

Practice tests are the one that ensures the candidate about their preparation. The LPIC-3 304-200 practice test will help the candidates to acknowledge their weak areas so that they can work on them. There are many practice tests available on the internet nowadays, so the candidate can choose which they want. We at Testprep training also offer practice tests which are very helpful for the ones who are preparing. 

The post LPIC-3 Exam: 304 – Linux Enterprise Professional Virtualization and High Availability appeared first on Testprep Training Tutorials.

What is the LPIC-3 Exam: 304-200 Exam?

The LPIC-3 certification is the conclusion of the multi-level professional certification program of the Linux Professional Institute (LPI). LPIC-3 Exam: 304 – Linux Enterprise Professional Virtualization and High Availability is outlined for the enterprise-level Linux professional and represents the highest level of professional, distribution-neutral Linux certification within the industry.

How many questions are there in the LPIC-3 Exam: 304 – Linux Enterprise Professional Virtualization and High Availability Exam?

The Exam consists of 60 Questions.

How much will I be given to take the LPIC-3 Exam: 304-200 Exam?

To complete the LPIC-3 Exam: 304-200 the candidate will be given 90 minutes.

What is the registration fee for the LPIC-3 Exam: 304-200 Exam?

The registration for the above-mentioned exam is USD 200 plus taxes.

How much do I need to score to qualify the LPIC-3 Exam: 304-200 Exam?

A candidate scoring 500 out of 800 will be marked as passed for the LPIC-3 Exam: 304-200.

Is the LPIC-3 Exam: 304-200 only available in the English language?

The exam is available in various languages like English, German, Japanese, Portuguese, Spanish, Chinese (Simplified) and Chinese (Traditional). 

What is the course outline of the LPIC-3 Exam: 304-200?

The exam objectives for the exam include:

• Virtualization
• High Availability Cluster Management
• High Availability Cluster Storage

How can I prepare for the LPIC-3 Exam: 304 – Linux Enterprise Professional Virtualization and High Availability?

The candidate can prepare for the LPIC-3 Exam: 304 – Linux Enterprise Professional Virtualization and High Availability by some steps such as visiting the official site, learning, and understanding the objectives, books and guides, practice tests, training programs, etc. 

What are the benefits of certification?

The main point of distinction between LPI and other Linux certification programs is that LPI certification exams are entirely vendor-independent and also distribution neutral. This enables candidates to showcase their skills across the distributions giving you the flexibility essential in working in a wide range of environments.

Why do you use written tests?

LPI prefers written exams as these exams are accepted as standardized exams globally. For a more detailed explanation, see the Exam Development Process.

Does it matter which version of the exams I write?

No, you are free to take any version of the exam. Whenever LPI releases a new version of any exam, then the previous version remains available for a maximum of 6 months. This is done to allow candidates to take the version that they have prepared for.

Where can I take the exams?

LPI certification exams are offered in-person, worldwide at Pearson VUE testing centres. Visit Pearson VUE to locate the nearest testing centres.

What is the platform LPI uses for online exams?

LPI uses Pearson VUE’s OnVUE testing platform.

What are the technical and logistical requirements for writing an OnVUE online exam?

The main requirement includes a Mac or Windows OS. However, LPI is encouraging Pearson VUE to make the testing available on Linux systems as well. For more information visit: https://home.pearsonvue.com/vue-test/onvue. 

What languages are supported?

The exam languages are English, German, Japanese, Dutch, Portuguese (Brazilian), Chinese (Simplified), and Chinese (Traditional).

Is the pricing for the exams going to stay the same for online testing? Can I use an exam voucher that I’ve already purchased?

Yes, exam pricing shall remain to be the same. Purchasing a voucher will help you schedule your online test with OnVUE.

When will I get my results?

After completing your exam, you will immediately receive your results and a score report. Within 24 hours, Pearson VUE will then transfer your exam results to LPI, post which your certification will be issued by LPI.

Note: Physical certificates are not issued for Linux Essentials.

When will more exams and languages become available for online testing?

These updates for the Linux Essentials exam will be published on LPI’s coronavirus page.

How do I verify my certification status for potential employers?

You can verify your certification on LPI’s Certification Verification page. You must enter your LPI ID and certification verification code.

How long will it take to receive my certification package once I’ve passed?

Your certification will be sent via regular post within 6-8 weeks for delivery. However, for Linux Essentials Exam, no physical certification will be issued.

Can I receive a PDF copy of my certificate?

Yes, you can download a PDF copy of your certificate from the overview page from your lpi.org account.

The post LPIC-3 Exam: 304-200 FAQ appeared first on Testprep Training Tutorials.