What is the primary purpose of Pluggable Authentication Modules (PAM)?

To manage disk quotas and filesystem permissions

To provide a modular framework for authentication and related tasks

To resolve user and group information from various sources

To encrypt network traffic between clients and servers

A system uses SSSD to authenticate users against a remote identity provider. The administrator has configured NSS to use SSSD, and users can be resolved. However, when users attempt to log in via SSH, authentication fails. What is the most likely missing configuration?

Add `auth sufficient pam_sss.so` and `session required pam_sss.so` to the appropriate PAM service files

Add 'sss' to the shadow database in /etc/nsswitch.conf

Set `enumerate = true` in the SSSD domain section

What is the primary role of the Name Service Switch (NSS) on a Linux system?

To enforce password complexity and aging policies for system accounts

To provide a modular framework for resolving system databases such as users, groups, and hosts

To manage network interfaces and routing tables

To provide a single daemon that caches all user authentication data

What is a 'realm' in Kerberos terminology?

A logical network boundary that defines the authentication domain

A type of encryption algorithm used for tickets

A server that issues service tickets

A file that stores Kerberos tickets

LPIC-3 Security

Domain 2Objective 3

326.3 User Management and Authentication (weight: 5) LPIC-3-SECURITY Practice Questions (Page 4)

Part of the Topic 326: Host Security domain, which makes up ~26% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

24concepts

24 Concepts in This Objective

NSS Overview
NSS Configuration Files
NSS Modules
PAM Overview
PAM Configuration Files
PAM Module Types and Controls
Common PAM Modules
Password Complexity Policies
Periodic Password Changes
Account Lockout After Failed Attempts
SSSD Overview
SSSD Configuration
SSSD Domains and Providers
Integrating SSSD with NSS
Integrating SSSD with PAM
SSSD with Active Directory
SSSD with IPA
SSSD with LDAP
SSSD with Kerberos
SSSD with Local Domains
Kerberos Basics
Kerberos Client Configuration
Obtaining Kerberos Tickets
Managing Kerberos Tickets

Questions 16–20

16foundation · easy
What is the primary purpose of Pluggable Authentication Modules (PAM)?
Select an answer first
17application · medium
A system uses SSSD to authenticate users against a remote identity provider. The administrator has configured NSS to use SSSD, and users can be resolved. However, when users attempt to log in via SSH, authentication fails. What is the most likely missing configuration?
Select an answer first
18foundation · easy
Which SSSD provider is used for FreeIPA/Identity Management integration?
Select an answer first
19foundation · easy
What is the primary role of the Name Service Switch (NSS) on a Linux system?
Select an answer first
20foundation · easy
What is a 'realm' in Kerberos terminology?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.