An organization requires all LDAP client connections to be encrypted with TLS. The LDAP server supports StartTLS on port 389. The administrator has placed the CA certificate in /etc/ssl/certs/ca-certificates.crt. What additional configuration is needed in /etc/ldap/ldap.conf to ensure the client uses TLS?

Set 'URI ldap://ldap.corp.example.com:636'

Set 'BASE dc=corp,dc=example,dc=com'

Set 'TLS_CACERT /etc/ssl/certs/ca-certificates.crt' and 'TLS_REQCERT demand'

LPI LPIC-2:Linux Engineer (201-450)

Domain 11Objective 3

210.3 LDAP Client Usage (weight: 2) LPIC-2 Practice Questions (Page 5)

Part of the Topic 210: Network Client Management domain, which makes up ~11% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

6concepts

Questions 21–21

21application · medium
An organization requires all LDAP client connections to be encrypted with TLS. The LDAP server supports StartTLS on port 389. The administrator has placed the CA certificate in /etc/ssl/certs/ca-certificates.crt. What additional configuration is needed in /etc/ldap/ldap.conf to ensure the client uses TLS?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to LPIC-2

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-2” is a trademark of its owner, used for identification only.

210.3 LDAP Client Usage (weight: 2) LPIC-2 Practice Questions (Page 5)

Questions 21–21

Keep studying — Topic 210: Network Client Management