202-450 Exam Dumps : LPIC-2 - Exam 202 (part 2 of 2), version 4.5

 The FTP names that are recognized as anonymous users in vsftpd when the option anonymous_enable is set to yes in the configuration file are anonymous and ftp. These are the default names that vsftpd accepts as valid anonymous users, and they can be used interchangeably. The anonymous user does not need to enter a password, but can optionally enter an email address as a password. The anonymous user has limited permissions and can only access the directory specified by the anon_root directive, which is usually /var/ftp or /srv/ftp. The anonymous user can download files from the server, but cannot upload or modify files, unless the anon_upload_enable and anon_mkdir_write_enable directives are also set to yes.

The other options are not recognized as anonymous users in vsftpd. Option C is incorrect, because vsftpd will reject any username that does not belong to an existing user or an anonymous user. Option D is incorrect, because nobody is a system user that has no permissions and is not related to FTP. Option E is incorrect, because guest is not a valid FTP name, unless the guest_enable directive is set to yes, which will make all non-anonymous users log in as the guest_username, which is usually ftp.

References:

• vsftpd.conf - config file for vsftpd
• How To Set Up vsftpd for Anonymous Downloads on Ubuntu 16.04
• How to Configure vsftpd FTP Server on CentOS 8

DANE stands for DNS-based Authentication of Named Entities. It is a protocol that provides a way to verify the association of X 509 certificates to DNS host names. X 509 certificates are digital documents that contain the public key and identity information of an entity, such as a web server or an email server. They are used to establish secure connections and authenticate the identity of the entity. However, the traditional way of obtaining and validating X 509 certificates relies on a hierarchical system of trusted third parties, called certificate authorities (CAs), which can be vulnerable to attacks or compromise. DANE aims to enhance the security and trust of X 509 certificates by using DNSSEC, which is a set of extensions to DNS that provide cryptographic signatures and validation for DNS records. DANE allows the owner of a domain name to publish the X 509 certificate or its fingerprint in a DNS record, called a TLSA record, which can be verified by the DNSSEC chain of trust. This way, the client can check the authenticity of the certificate directly from the DNS, without relying on external CAs. DANE can also be used to specify which CAs are authorized to issue certificates for a domain name, or to indicate that no CA is needed at all. DANE can be applied to various protocols that use X 509 certificates, such as HTTPS, SMTP, IMAP, POP3, etc.

References:

• DANE - Wikipedia
• DNS-Based Authentication of Named Entities (DANE) - Internet Society
• DANE: Taking TLS Authentication to the Next Level Using DNSSEC

To join a file server to an Active Directory domain, the smb.conf file must specify the realm and the workgroup parameters correctly. The realm parameter is the DNS name of the Active Directory domain, in uppercase letters. The workgroup parameter is the NetBIOS name of the domain, which is usually the first part of the DNS name, but can be different. For example, if the DNS name of the domain is intra.example.com, the NetBIOS name could be INTRA or something else. To find out the NetBIOS name of the domain, you can use the command net ads info on a Linux machine that has Samba installed, or the command nltest /dsgetdc:intra.example.com on a Windows machine that is joined to the domain. The other options are either incorrect or irrelevant for this question.