An OpenLDAP server is configured with TLS using a certificate from a private CA. Clients are failing to connect with a 'TLS certificate verification failed' error. The administrator has verified that the server's certificate is valid and the CA certificate is installed on the clients. What is the MOST likely cause of the failure?

The server's private key is encrypted

The client is not configured to use TLS

The server's certificate has expired

The server's hostname does not match the certificate's CN or SAN

A security auditor requires that the OpenLDAP server log all bind operations, including successful and failed authentication attempts, to a dedicated log file. The administrator has enabled the 'stats' log level. What additional configuration is needed to ensure that bind attempts are logged with sufficient detail?

Set olcLogLevel to 'sync' to log replication events

Set olcLogLevel to 'none' and rely on the system's auth.log

Set olcLogLevel to 'stats' and configure syslog to send slapd messages to a separate file

Set olcLogLevel to 'acl' to log access control decisions

LPIC-3 Mixed Environments

Domain 1Objective 2

390.2 Securing the Directory (weight: 3) LPIC-3-MIXED-ENVIRONMENTS Practice Questions (Page 2)

Part of the Topic 390: OpenLDAP Configuration domain, which makes up ~11% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

7concepts

Questions 6–10

6foundation · easy
Which SASL mechanism is commonly used with OpenLDAP to authenticate using the client's TLS certificate?
Select an answer first
7expert · medium
An OpenLDAP server is configured with TLS using a certificate from a private CA. Clients are failing to connect with a 'TLS certificate verification failed' error. The administrator has verified that the server's certificate is valid and the CA certificate is installed on the clients. What is the MOST likely cause of the failure?
Select an answer first
8application · medium
A security team wants to monitor for unauthorized access attempts to their OpenLDAP directory. They want to log all failed bind attempts with the source IP address. Which log level should be enabled?
Select an answer first
9foundation · easy
Which of the following is a security mechanism that can be used to encrypt LDAP communication between a client and an OpenLDAP server?
Select an answer first
10application · medium
A security auditor requires that the OpenLDAP server log all bind operations, including successful and failed authentication attempts, to a dedicated log file. The administrator has enabled the 'stats' log level. What additional configuration is needed to ensure that bind attempts are logged with sufficient detail?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-MIXED-ENVIRONMENTS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-MIXED-ENVIRONMENTS” is a trademark of its owner, used for identification only.

390.2 Securing the Directory (weight: 3) LPIC-3-MIXED-ENVIRONMENTS Practice Questions (Page 2)

Questions 6–10

Which SASL mechanism is commonly used with OpenLDAP to authenticate using the client's TLS certificate?

A security team wants to monitor for unauthorized access attempts to their OpenLDAP directory. They want to log all failed bind attempts with the source IP address. Which log level should be enabled?

Which of the following is a security mechanism that can be used to encrypt LDAP communication between a client and an OpenLDAP server?

Keep studying — Topic 390: OpenLDAP Configuration