What is the purpose of a Kerberos cross-realm trust between FreeIPA and Active Directory?

To allow users in one realm to authenticate to services in the other realm

To synchronize user passwords between the two directories

To replicate DNS zones between FreeIPA and Active Directory

To merge the two directories into a single LDAP tree

A systems administrator is installing a new FreeIPA server for a 400-user organization. The server has 4 GB RAM, 2 vCPUs, and 50 GB of disk. The organization's DNS is managed by an external provider, and the server's hostname is ipa.example.com with a static IP of 192.168.10.50. During the installation, the administrator runs `ipa-server-install` and specifies `--setup-dns` but the installer fails with a DNS error. Which action should the administrator take to resolve the failure?

Change the server's hostname to ipa.example.com and add a CNAME record in the external DNS pointing to the server's IP.

Rerun the installer without `--setup-dns` and use the external DNS provider to add an SRV record for _kerberos._udp.example.com.

Set the server's /etc/hosts file to map ipa.example.com to 127.0.0.1 and rerun the installer.

Increase the server's RAM to 8 GB and disk to 100 GB, then rerun the installer.

LPIC-3 Security

Domain 2Objective 4

326.4 FreeIPA Installation and Samba Integration (weight: 4) LPIC-3-SECURITY Practice Questions (Page 2)

Part of the Topic 326: Host Security domain, which makes up ~26% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

9concepts

Questions 6–10

6foundation · easy
Which FreeIPA command is used to add an SSH public key to a user account?
Select an answer first
7foundation · easy
What is the purpose of a Kerberos cross-realm trust between FreeIPA and Active Directory?
Select an answer first
8foundation · easy
Which command-line utility is used to install a FreeIPA server non-interactively?
Select an answer first
9foundation · easy
In a FreeIPA deployment, which component is responsible for issuing and managing certificates used for secure communications and service authentication?
Select an answer first
10application · medium
A systems administrator is installing a new FreeIPA server for a 400-user organization. The server has 4 GB RAM, 2 vCPUs, and 50 GB of disk. The organization's DNS is managed by an external provider, and the server's hostname is ipa.example.com with a static IP of 192.168.10.50. During the installation, the administrator runs `ipa-server-install` and specifies `--setup-dns` but the installer fails with a DNS error. Which action should the administrator take to resolve the failure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.

326.4 FreeIPA Installation and Samba Integration (weight: 4) LPIC-3-SECURITY Practice Questions (Page 2)

Questions 6–10

Which FreeIPA command is used to add an SSH public key to a user account?

What is the purpose of a Kerberos cross-realm trust between FreeIPA and Active Directory?

Which command-line utility is used to install a FreeIPA server non-interactively?

In a FreeIPA deployment, which component is responsible for issuing and managing certificates used for secure communications and service authentication?

Keep studying — Topic 326: Host Security