202-450 Exam Dumps : LPIC-2 - Exam 202 (part 2 of 2), version 4.5

The option in named.conf that specifies which hosts are permitted to ask for domain name information from the server is allow-query. The allow-query option is used to define an access control list (ACL) that matches the source IP address of the DNS query. The ACL can be a list of IP addresses, networks, keywords, or predefined ACL names. The default value of allow-query is any, which means that any host can query the server. However, this can pose a security risk, as the server may be exposed to unwanted or malicious queries. Therefore, it is recommended to restrict the allow-query option to only the hosts that need to access the server, such as the local network or trusted clients. For example, the following option allows only the hosts in the 192.168.1.0/24 network and the localhost to query the server:

allow-query { 192.168.1.0/24; localhost; };

The other options are not valid in named.conf. allowed-hosts, accept-query, permit-query, and query-group are not recognized keywords by BIND.

References:

• LPIC-2 exam 202 objectives, topic 208.1, “Implementing a web server”
• BIND 9 Administrator Reference Manual, chapter 6, “Access Control Lists and TSIG”
• How to Configure DNS Server with TSIG on CentOS 8

To join a file server to an Active Directory domain, the smb.conf file must specify the realm and the workgroup parameters correctly. The realm parameter is the DNS name of the Active Directory domain, in uppercase letters. The workgroup parameter is the NetBIOS name of the domain, which is usually the first part of the DNS name, but can be different. For example, if the DNS name of the domain is intra.example.com, the NetBIOS name could be INTRA or something else. To find out the NetBIOS name of the domain, you can use the command net ads info on a Linux machine that has Samba installed, or the command nltest /dsgetdc:intra.example.com on a Windows machine that is joined to the domain. The other options are either incorrect or irrelevant for this question. 

 In the ISC DHCPD server configuration, to always assign the IP address 192.168.1.2 to a host with the MAC address 08:00:2b:4c:59:23, you need to create a host declaration within your dhcpd.conf file. Option A provides the correct syntax for this configuration:

This configuration ensures that whenever a DHCP request is received from the MAC address specified, the ISC DHCPD server will always assign it the IP address 192.168.1.2.

References:

• ISC DHCP 4.1 Manual Pages - dhcpd.conf: The official documentation of ISC DHCPD on how to configure the dhcpd.conf file, which includes the host declaration syntax and examples.
• isc-dhcp-server: Using option dhcp-client-identifier in host declaration to identify a client: A question and answer from Server Fault on how to use the option dhcp-client-identifier in a host declaration, which also shows the use of the hardware-ethernet and fixed-address parameters.