LPI LPIC-2:Linux Engineer (201-450)
Domain 8Objective 3
207.3 Securing a DNS Server (weight: 2) LPIC-2 Practice Questions (Page 4)
Part of the Topic 207: Domain Name Server domain, which makes up ~8% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)
32questions here
7free pages
10concepts
Questions 16–20
- 16
Which logging category in BIND records information about zone transfers and updates?
Select an answer first - 17
A company's authoritative DNS server is being used in DNS amplification attacks. The server is authoritative only and does not provide recursion. The administrator wants to mitigate the impact of these attacks while maintaining normal service. What should they do?
Select an answer first - 18
When BIND is configured to run in a chroot jail, which of the following must be available inside the jail?
Select an answer first - 19
A DNS administrator is configuring zone transfers between a primary and secondary server. They want to use TSIG for authentication. They generate a key and add it to both servers' configuration. However, the secondary server is unable to transfer the zone, and the logs show 'not authorized' errors. What is the most likely cause?
Select an answer first - 20
What is the primary purpose of DNSSEC?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-2” is a trademark of its owner, used for identification only.