327.3 Network File Systems (weight: 3) LPIC-3-SECURITY Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is a SID in the context of CIFS?

   • AA network protocol for file sharing
   • BA security identifier used to uniquely identify users and groups in Windows
   • CA type of file encryption
   • DA Linux user ID
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A Linux client mounts a CIFS share from a Samba server with the 'unix' option enabled. The administrator needs to ensure that file permissions set on the Linux client are preserved on the server. However, the administrator notices that chmod on the client does not affect the server-side permissions. What is the most likely cause?

   • AThe Samba server is using NTFS ACLs instead of POSIX ACLs.
   • BThe client's mount is using the 'sec=ntlm' option, which disables Unix Extensions.
   • CThe client's kernel does not support CIFS Unix Extensions.
   • DThe Samba server has 'unix extensions = no' in its configuration.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which export option is used to designate the root of the NFSv4 pseudo filesystem?

   • Aroot_squash
   • Bno_subtree_check
   • Cfsid=0
   • Dsync
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A financial firm is migrating from NFSv3 to NFSv4.1. The security team requires: (1) encryption of all NFS traffic, (2) mutual authentication, and (3) the ability to restrict access to specific users, not just IP addresses. The firm's environment includes a mix of Linux and Solaris clients. The NFS server runs on Linux. Which configuration best meets all requirements?

   • AEnable sec=krb5i on the server and use IP-based exports for access control.
   • BConfigure the server with sec=krb5p and export the filesystem with the 'sec=krb5p' option. Ensure all clients have Kerberos keytabs.
   • CUse sec=spkm3 with a shared secret and rely on the server's firewall for access control.
   • DUse sec=sys with IP-based export restrictions and rely on the pseudo filesystem for isolation.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company has a mixed environment with Linux clients and a Windows file server. The Linux clients are not joined to the Active Directory domain. The administrator needs to mount a CIFS share and ensure that files created by Linux users are owned by a specific Windows user account. The administrator has the Windows username and password. Which mount options should be used?

   • AMount with sec=krb5 and rely on the client's Kerberos ticket.
   • BMount with sec=ntlmv2 and use the 'domain' option to specify the Windows domain.
   • CMount with sec=ntlm, username=winuser, and uid=1000,gid=1000.
   • DMount with the 'guest' option and use the 'uid' and 'gid' options to set ownership.
   Reveal Solution Discussion Select an answer first