A DevOps team uses FreeIPA to manage SSH keys for users. A user named `alice` has uploaded her SSH public key to her FreeIPA account. When she tries to SSH to a FreeIPA-enrolled server, the server prompts for a password instead of using her key. The server's `/etc/ssh/sshd_config` has `PubkeyAuthentication yes`. What is the most likely reason the key is not being used?

Alice's key has expired in FreeIPA.

The server's SELinux policy is blocking SSH from reading the FreeIPA key store.

Alice's key is stored in the wrong FreeIPA attribute; it should be in `ipaSshPubKey` instead of `sshPublicKey`.

The SSH server is not configured to use the FreeIPA-provided authorized_keys via SSSD or the `ipa-client` SSH configuration.

Before installing a FreeIPA server, which prerequisite is essential to ensure that Kerberos authentication functions correctly?

A pre-configured Active Directory forest

A dedicated physical server with at least 16 GB of RAM

A working NTP or chrony time synchronization service

A public DNS domain that is globally resolvable

LPIC-3 Security

Domain 2Objective 4

326.4 FreeIPA Installation and Samba Integration (weight: 4) LPIC-3-SECURITY Practice Questions (Page 3)

Part of the Topic 326: Host Security domain, which makes up ~26% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

9concepts

Questions 11–15

11application · medium
A DevOps team uses FreeIPA to manage SSH keys for users. A user named `alice` has uploaded her SSH public key to her FreeIPA account. When she tries to SSH to a FreeIPA-enrolled server, the server prompts for a password instead of using her key. The server's `/etc/ssh/sshd_config` has `PubkeyAuthentication yes`. What is the most likely reason the key is not being used?
Select an answer first
12foundation · easy
Before installing a FreeIPA server, which prerequisite is essential to ensure that Kerberos authentication functions correctly?
Select an answer first
13foundation · easy
Which FreeIPA component provides centralized authentication by issuing tickets that allow users to access services without re-entering their password?
Select an answer first
14foundation · easy
Which command-line tool is used to add a new user to a FreeIPA domain?
Select an answer first
15foundation · easy
Which FreeIPA command is used to manage SELinux user mappings?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.

326.4 FreeIPA Installation and Samba Integration (weight: 4) LPIC-3-SECURITY Practice Questions (Page 3)

Questions 11–15

Before installing a FreeIPA server, which prerequisite is essential to ensure that Kerberos authentication functions correctly?

Which FreeIPA component provides centralized authentication by issuing tickets that allow users to access services without re-entering their password?

Which command-line tool is used to add a new user to a FreeIPA domain?

Which FreeIPA command is used to manage SELinux user mappings?

Keep studying — Topic 326: Host Security