In an OpenLDAP ACL, what does the 'read' access level allow a user to do?

Read the attribute values of an entry

Modify the attribute values of an entry

Compare attribute values without reading them

Search for entries but not see their values

An organization uses OpenLDAP with Kerberos for single sign-on. They want to allow users to authenticate to the directory using their Kerberos credentials. The directory server is already joined to the Kerberos realm. The administrator needs to configure OpenLDAP to accept GSSAPI authentication. Which configuration change is REQUIRED?

Create a keytab file and set the KRB5_KTNAME environment variable

Set olcSaslSecProps to 'noanonymous' in cn=config

Add 'GSSAPI' to the olcSaslMechanisms list in cn=config

Set olcAuthzPolicy to 'none' to allow Kerberos principals to map to directory entries

What is the purpose of the StartTLS operation in LDAP?

To upgrade an existing plaintext LDAP connection to use TLS encryption

To authenticate a user with a SASL mechanism

To request a certificate from a CA

To start a new LDAP session on a different server

LPIC-3 Mixed Environments

Domain 1Objective 2

390.2 Securing the Directory (weight: 3) LPIC-3-MIXED-ENVIRONMENTS Practice Questions (Page 3)

Part of the Topic 390: OpenLDAP Configuration domain, which makes up ~11% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

7concepts

Questions 11–15

11foundation · easy
In an OpenLDAP ACL, what does the 'read' access level allow a user to do?
Select an answer first
12foundation · easy
Which password hashing scheme is considered cryptographically strong and is commonly recommended for OpenLDAP?
Select an answer first
13foundation · easy
Which OpenLDAP overlay is used to enforce password policies such as expiration and lockout?
Select an answer first
14application · medium
An organization uses OpenLDAP with Kerberos for single sign-on. They want to allow users to authenticate to the directory using their Kerberos credentials. The directory server is already joined to the Kerberos realm. The administrator needs to configure OpenLDAP to accept GSSAPI authentication. Which configuration change is REQUIRED?
Select an answer first
15foundation · easy
What is the purpose of the StartTLS operation in LDAP?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-MIXED-ENVIRONMENTS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-MIXED-ENVIRONMENTS” is a trademark of its owner, used for identification only.

390.2 Securing the Directory (weight: 3) LPIC-3-MIXED-ENVIRONMENTS Practice Questions (Page 3)

Questions 11–15

In an OpenLDAP ACL, what does the 'read' access level allow a user to do?

Which password hashing scheme is considered cryptographically strong and is commonly recommended for OpenLDAP?

Which OpenLDAP overlay is used to enforce password policies such as expiration and lockout?

What is the purpose of the StartTLS operation in LDAP?

Keep studying — Topic 390: OpenLDAP Configuration