LPIC-3 QUESTIONS AND ANSWERS | VERIFIED AND
WELL DETAILED ANSWERS | PLUS RATIONALES |
GUARANTEED PASS | LATEST EXAM UPDATE | EXAM
PREP | STUDY GUIDE | PRACTICE TEST
,Section 1: LDAP & Directory Services (Q1–15)
Q1. Which LDAP operation is used to modify an entry's attribute values without replacing the entire entry?
A) Add B) Modify C) ModDN D) Compare
Answer: B
Rationale: The Modify operation changes specific attributes. Add creates new entries; ModDN renames/moves;
Compare tests an attribute value.
Q2. In OpenLDAP, which backend is the recommended general-purpose database?
A) bdb B) hdb C) mdb D) ldif
Answer: C
Rationale: `mdb` (LMDB) is the modern default since OpenLDAP 2.4. bdb/hdb are deprecated.
Q3. What does the `olcAccess` attribute control?
,A) Replication B) ACLs for directory access C) Schema loading D) TLS ciphers
Answer: B
Rationale: `olcAccess` defines `access to` rules (who can read/write what), evaluated top-down with `by`
clauses.
Q4. Which command tests an LDAP bind and search non-interactively?
A) slapadd B) ldapsearch C) slapcat D) ldif2db
Answer: B
Rationale: `ldapsearch -x -D <binddn> -W -b <base>` performs bind + search. `slapcat` dumps the DB offline.
Q5. What is the purpose of a referral in LDAP?
A) Redirect clients to another server/DIT B) Replicate data C) Hash passwords D) Compress entries
Answer: A
Rationale: Referrals (via `ref` attribute or `referral` directive) point clients to another directory for parts of the
namespace.
, Q6. Which SASL mechanism provides mutual authentication using Kerberos tickets?
A) PLAIN B) DIGEST-MD5 C) GSSAPI D) EXTERNAL
Answer: C
Rationale: GSSAPI uses Kerberos for mutual auth. EXTERNAL uses TLS client certs; PLAIN/DIGEST-MD5 are
password-based.
Q7. Which slapd tool creates an offline backup of the database?
A) slapadd B) slapcat C) ldapmodify D) slaptest
Answer: B
Rationale: `slapcat` dumps the database to LDIF while slapd is stopped. `slapadd` imports LDIF offline.
Q8. What does `slaptest -f slapd.conf -F /etc/ldap/slapd.d` do?
A) Starts slapd B) Validates and converts config to cn=config C) Backs up DB D) Tests TLS
Answer: B
WELL DETAILED ANSWERS | PLUS RATIONALES |
GUARANTEED PASS | LATEST EXAM UPDATE | EXAM
PREP | STUDY GUIDE | PRACTICE TEST
,Section 1: LDAP & Directory Services (Q1–15)
Q1. Which LDAP operation is used to modify an entry's attribute values without replacing the entire entry?
A) Add B) Modify C) ModDN D) Compare
Answer: B
Rationale: The Modify operation changes specific attributes. Add creates new entries; ModDN renames/moves;
Compare tests an attribute value.
Q2. In OpenLDAP, which backend is the recommended general-purpose database?
A) bdb B) hdb C) mdb D) ldif
Answer: C
Rationale: `mdb` (LMDB) is the modern default since OpenLDAP 2.4. bdb/hdb are deprecated.
Q3. What does the `olcAccess` attribute control?
,A) Replication B) ACLs for directory access C) Schema loading D) TLS ciphers
Answer: B
Rationale: `olcAccess` defines `access to` rules (who can read/write what), evaluated top-down with `by`
clauses.
Q4. Which command tests an LDAP bind and search non-interactively?
A) slapadd B) ldapsearch C) slapcat D) ldif2db
Answer: B
Rationale: `ldapsearch -x -D <binddn> -W -b <base>` performs bind + search. `slapcat` dumps the DB offline.
Q5. What is the purpose of a referral in LDAP?
A) Redirect clients to another server/DIT B) Replicate data C) Hash passwords D) Compress entries
Answer: A
Rationale: Referrals (via `ref` attribute or `referral` directive) point clients to another directory for parts of the
namespace.
, Q6. Which SASL mechanism provides mutual authentication using Kerberos tickets?
A) PLAIN B) DIGEST-MD5 C) GSSAPI D) EXTERNAL
Answer: C
Rationale: GSSAPI uses Kerberos for mutual auth. EXTERNAL uses TLS client certs; PLAIN/DIGEST-MD5 are
password-based.
Q7. Which slapd tool creates an offline backup of the database?
A) slapadd B) slapcat C) ldapmodify D) slaptest
Answer: B
Rationale: `slapcat` dumps the database to LDIF while slapd is stopped. `slapadd` imports LDIF offline.
Q8. What does `slaptest -f slapd.conf -F /etc/ldap/slapd.d` do?
A) Starts slapd B) Validates and converts config to cn=config C) Backs up DB D) Tests TLS
Answer: B
