Free LPIC-3 Mixed Environments Exam 300 Practice Questions

Sample Practice Questions

Try these 10 sample questions from the LPIC-3 Mixed Environments Exam 300 practice bank. Each includes the answer and explanation. Continue with the interactive practice above to review the full question set.

1. 1Which Samba daemon provides SMB file sharing and printing services on a conventional Samba file server?

   1. A. nmbd
   2. B. smbd
   3. C. winbindd
   4. D. ctdbd

   Answer: B

   Explanation: The smbd manual states, "The server provides filespace and printer services to clients using the SMB (or CIFS) protocol." This identifies smbd as the file and print service daemon.

   Reference: smbd — Samba server manual — DESCRIPTION

2. 2A new Samba host must become an additional writable domain controller in the existing ad.example.net domain. Which join form selects that role?

   1. A. samba-tool domain join ad.example.net MEMBER
   2. B. samba-tool domain join ad.example.net RODC
   3. C. samba-tool domain join ad.example.net DC
   4. D. samba-tool domain info ad.example.net

   Answer: C

   Explanation: The join synopsis offers "domain join dnsdomain [DC|RODC|MEMBER|SUBDOMAIN] [options]". DC selects an additional writable controller; MEMBER selects a member, RODC a read-only controller, and info is a query.

   Reference: samba-tool — Samba administration tool — domain join

3. 3A share lists alex in both valid users and invalid users. What is the share-login result for alex?

   1. A. Access is allowed because valid users takes precedence.
   2. B. Access is allowed with read-only permissions.
   3. C. Access is denied because invalid users takes precedence.
   4. D. Access depends on which list appears last in smb.conf.

   Answer: C

   Explanation: The valid users entry states, "If a username is in both this list and the invalid users list then access is denied for that user." List order does not reverse that explicit precedence.

   Reference: smb.conf — Samba configuration reference — valid users (S)

4. 4A simple PAM stack must remember a module failure but still invoke the remaining modules of that service and type before returning failure. Which control flag provides this behavior?

   1. A. requisite
   2. B. sufficient
   3. C. required
   4. D. optional

   Answer: C

   Explanation: The required definition says failure is returned "only after the remaining stacked modules (for this service and type) have been invoked." Requisite returns on failure immediately; sufficient and optional do not impose this required-failure behavior.

   Reference: pam.conf — Linux-PAM configuration manual — control, required

5. 5The freeipa-server package is installed on a prepared host, but the IPA services have not been configured. Which command starts the interactive FreeIPA server configuration?

   1. A. ipa-client-install
   2. B. ipa-server-install
   3. C. ipa-replica-prepare
   4. D. ipa-adtrust-install

   Answer: B

   Explanation: The Quick Start Guide instructs, "To start the interactive installation, run:" followed by "ipa-server-install". Installing the package alone supplies components; this command configures the initial server services.

   Reference: FreeIPA Quick Start Guide — Installing FreeIPA server

6. 6What service does nmbd provide when it is configured as a WINS database server?

   1. A. Registers NetBIOS names and answers queries for those names.
   2. B. Maps domain user and group SIDs to local UNIX identifiers.
   3. C. Tracks SMB open-file handles and byte-range file locks.
   4. D. Issues Kerberos tickets for Active Directory service principals.

   Answer: A

   Explanation: The nmbd manual describes "creating a database from name registration requests that it receives and replying to queries from clients for these names." This is the NetBIOS registration and name-query service supplied by a WINS server; SID mapping, SMB file locking, and Kerberos ticket issuance are different services.

   Reference: nmbd — NetBIOS name server manual — DESCRIPTION, WINS server paragraph

7. 7An operational Samba domain controller is being removed from its domain. Which action must precede using domain leave on that server?

   1. A. Run samba-tool domain demote.
   2. B. Run samba-tool domain level show.
   3. C. Run samba-tool domain passwordsettings set.
   4. D. Run samba-tool domain exportkeytab.

   Answer: A

   Explanation: The domain leave entry states, "you first need samba-tool domain demote." Demotion removes the controller role; querying levels or changing account settings does not substitute for that step.

   Reference: samba-tool — Samba administration tool — domain leave

8. 8A share has read only = yes and write list = alex. Alex is authorized to connect and the underlying file permissions allow writing. What access does the share configuration grant alex?

   1. A. Read-write access despite read only = yes.
   2. B. Read-only access regardless of write list.
   3. C. Guest access under the guest account.
   4. D. No access until read only is set to no.

   Answer: A

   Explanation: The write list entry states users in it "will be given write access, no matter what the read only option is set to." The stem separately satisfies authorization and file system permissions, so this exception grants write access.

   Reference: smb.conf — Samba configuration reference — write list (S)

9. 9Users authenticate through a central directory but need a local home directory created automatically at the start of their first login session. Which PAM module supplies that behavior?

   1. A. pam_mkhomedir.so
   2. B. pam_faillock.so
   3. C. pam_cracklib.so
   4. D. pam_krb5.so

   Answer: A

   Explanation: The module manual says it creates a home directory "if it does not exist when the session begins." pam_mkhomedir provides the session hook; lockout, password quality, and Kerberos authentication modules address different login functions.

   Reference: pam_mkhomedir — Create users' home directories — DESCRIPTION and MODULE TYPES PROVIDED

10. 10Which utility enrolls a Linux machine as a client of an existing FreeIPA deployment and, by default, configures SSSD for IPA authentication and authorization?

    1. A. ipa-server-install
    2. B. ipa-replica-install
    3. C. ipa-adtrust-install
    4. D. ipa-client-install

    Answer: D

    Explanation: The ipa-client-install manual states, "By default this configures SSSD to connect to an IPA server for authentication and authorization." It configures a client rather than an initial server, replica, or trust controller.

    Reference: ipa-client-install — FreeIPA client enrollment — DESCRIPTION