210.2 PAM Authentication (weight: 3) LPIC-2 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Given the following PAM auth stack: auth sufficient pam_unix.so auth required pam_ldap.so What happens if pam_unix succeeds?

   • AAuthentication fails because pam_ldap is required.
   • BAuthentication succeeds, but pam_ldap is still executed.
   • CAuthentication is deferred until pam_ldap runs.
   • DAuthentication succeeds immediately, and pam_ldap is not executed.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which file is the primary configuration file for PAM on most modern Linux distributions?

   • A/etc/security/pam.conf
   • B/etc/pam.conf
   • C/etc/pam.d/
   • D/etc/pam.d.conf
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company's security policy requires that all new passwords be at least 12 characters long and contain at least one digit. The PAM configuration for the passwd service currently uses pam_unix.so for password changes. Which line should be added to /etc/pam.d/passwd to enforce this policy?

   • Apassword sufficient pam_cracklib.so minlen=12 dcredit=-1
   • Bpassword required pam_unix.so minlen=12 dcredit=-1
   • Cauth required pam_cracklib.so minlen=12 dcredit=-1
   • Dpassword required pam_cracklib.so minlen=12 dcredit=-1
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   During user authentication, what is the typical sequence of PAM module types?

   • Asession, auth, account
   • Baccount, auth, session
   • Cauth, account, password, session
   • Dauth, account, session
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which PAM module is commonly used to enforce password strength requirements?

   • Apam_limits
   • Bpam_unix
   • Cpam_cracklib
   • Dpam_nologin
   Reveal Solution Discussion Select an answer first