210.2 PAM Authentication (weight: 3) LPIC-2 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   To configure PAM for the SSH service, which file would you edit?

   • A/etc/ssh/pam.conf
   • B/etc/pam.d/ssh
   • C/etc/pam.d/login
   • D/etc/pam.d/sshd
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which PAM module type is used to apply resource limits at the start of a user session?

   • Aaccount
   • Bsession
   • Cpassword
   • Dauth
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which statement best describes the modular architecture of PAM?

   • APAM is a single library that directly handles all authentication logic for every service.
   • BPAM provides a set of dynamically loadable modules that services use through a common API.
   • CPAM is a kernel-level framework that intercepts all system calls related to authentication.
   • DPAM is a daemon that runs continuously and authenticates users on behalf of all services.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which log file is commonly used to diagnose PAM authentication failures on Linux?

   • A/var/log/pam.log
   • B/var/log/auth.log
   • C/var/log/syslog
   • D/var/log/messages
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary purpose of the pam_unix module?

   • ATo enforce password strength rules.
   • BTo authenticate users against an LDAP directory.
   • CTo prevent login when /etc/nologin exists.
   • DTo authenticate users using traditional Unix password hashes stored in /etc/shadow.
   Reveal Solution Discussion Select an answer first