100+ Free LPIC-3 Mixed Environment Practice Questions

Pass your LPIC-3 Mixed Environment (Exam 300-300) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately

Not publicly disclosed Pass Rate

100+ Questions

100% Free

1 / 100

Question 1

Score: 0/0

Which Samba daemon provides the SMB/CIFS file and print services?

nmbd

smbd

winbindd

samba-tool

to track

2026 Statistics

Key Facts: LPIC-3 Mixed Environment Exam

Exam Questions

LPI

500/800

Passing Score

LPI scaled scoring

90 min

Exam Duration

LPI

$200

Exam Fee (Tier 1)

LPI

5 years

Validity

Recertification required

LPIC-2

Required to claim

LPI

LPIC-3 300-300 is a 60-question, 90-minute senior exam scored on a 200-800 scale with 500 to pass. Topics: Samba Basics (smb.conf, smbd/nmbd/winbindd), Samba and AD Domains (samba-tool, AD DC, name resolution, domain membership with net ads join), Samba Share Configuration (file/print shares, ACLs, DFS), Samba Client Configuration (SSSD, winbind, CIFS mounts), and Linux Identity Management (FreeIPA install/maintenance, FreeIPA-AD trusts, NFSv4 with Kerberos). Total objective weight is 55 points across 18 sub-objectives. Requires LPIC-2 to claim the LPIC-3 credential.

Sample LPIC-3 Mixed Environment Practice Questions

Try these sample questions to test your LPIC-3 Mixed Environment exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1Which Samba daemon provides the SMB/CIFS file and print services?

A.nmbd

B.smbd

C.winbindd

D.samba-tool

Explanation: smbd is the Samba daemon that handles SMB/CIFS protocol requests for file and print sharing. nmbd handles NetBIOS name service over UDP, winbindd integrates Linux with Windows NT/AD identity, and samba-tool is an administrative CLI, not a long-running daemon.

2Where does the default Samba configuration file live on most Linux distributions?

A./etc/samba/smb.conf

B./etc/smb.conf

C./usr/local/samba/smb.conf

D./var/samba/smb.conf

Explanation: On Debian, RHEL, SUSE and most distros, smb.conf lives at /etc/samba/smb.conf. The samba package compiled from source defaults to /usr/local/samba/etc/smb.conf, but distribution packages override that to /etc/samba/smb.conf. Verify the active path with smbd -b | grep CONFIGFILE.

3Which command provisions a new Samba 4 Active Directory domain on a fresh server?

A.samba-tool domain provision --use-rfc2307 --realm=EXAMPLE.COM --domain=EXAMPLE

B.net ads create --realm=EXAMPLE.COM

C.smbpasswd -a domain

D.winbindd --provision

Explanation: samba-tool domain provision is the canonical command to bootstrap a Samba 4 AD Domain Controller. Common flags: --realm (Kerberos realm), --domain (NetBIOS), --server-role=dc, and --use-rfc2307 to add POSIX attribute schemas. The other options are unrelated or invalid.

4An administrator wants Samba to act as an Active Directory Domain Controller. Which line must appear in the [global] section of smb.conf?

A.server role = standalone server

B.server role = active directory domain controller

C.security = ads

D.workgroup = WORKGROUP

Explanation: Setting `server role = active directory domain controller` configures Samba to run as an AD DC. samba-tool domain provision writes this automatically. `security = ads` is for member servers joining an existing AD domain, not for the DC role itself, and `standalone server` is for non-domain workgroup mode.

5Which winbind idmap backend automatically allocates UID/GID ranges to multiple AD domains using a hash of the domain SID?

A.idmap_rid

B.idmap_ad

C.idmap_autorid

D.idmap_tdb

Explanation: idmap_autorid auto-assigns UID/GID ranges per domain based on a hash/range mapping, ideal for multi-domain forests where you do not want to hand-configure each domain. idmap_rid uses RID-based formulas per configured domain. idmap_ad reads uidNumber from AD (RFC2307). idmap_tdb stores per-SID mappings locally without ranges.

6Which SSSD configuration directive sets Active Directory as the identity, authentication and access provider?

A.id_provider = ad, auth_provider = ad, access_provider = ad

B.id_provider = ldap, auth_provider = krb5

C.id_provider = local, auth_provider = local

D.id_provider = ipa, auth_provider = ipa

Explanation: For an SSSD-joined AD client, the [domain/...] section uses id_provider = ad (plus auth_provider and access_provider = ad) so SSSD pulls users via LDAP from AD and authenticates via Kerberos. The realm join command writes these values automatically.

7What is the correct one-liner to join a CentOS/RHEL 9 host to an Active Directory domain using realmd?

A.realm join --user=Administrator example.com

B.ad join example.com

C.samba-tool domain join example.com

D.net join domain example.com

Explanation: realm join configures SSSD, krb5.conf, and writes a krb5.keytab in one step. The classic invocation is `realm join --user=Administrator example.com`, after which SSSD restarts and AD users can log in. samba-tool domain join is for joining as a Samba DC replica, not a normal client.

8Which file holds the Kerberos client configuration including default realm and KDC mappings on a Linux AD member?

A./etc/krb5.conf

B./etc/kerberos.conf

C./etc/krb5.keytab

D./etc/sssd/sssd.conf

Explanation: /etc/krb5.conf defines [libdefaults] (default_realm), [realms] (KDC and admin_server), and [domain_realm] mappings. /etc/krb5.keytab holds host service keys (binary, generated by realm join or net ads keytab). /etc/sssd/sssd.conf is SSSD's own config, not Kerberos's.

9An administrator runs `kinit administrator@EXAMPLE.COM` and the command succeeds. What does this prove?

A.DNS, time sync, and the KDC for EXAMPLE.COM are reachable and the password is correct

B.The user has an SMB session open

C.The host is joined to the domain

D.Winbind has populated the user's UID

Explanation: kinit obtains a Kerberos TGT — success means the KDC was resolved (DNS), time skew is within tolerance (default 5 min), and the principal exists with the supplied password. It does not require host domain membership and does not allocate a UID. View the cache with klist.

10Which command lists all current SMB connections, locked files, and shares on a running Samba server?

A.smbstatus

B.smbclient -L

C.net status

D.samba-tool status

Explanation: smbstatus prints active sessions, services (open shares), locked files, and PIDs. smbclient -L lists shares from a client perspective via SMB. There is no `net status` subcommand for this purpose, and samba-tool status options are limited to specific subsystems.

About the LPIC-3 Mixed Environment Exam

Senior LPIC-3 specialty exam covering Samba 4 as an Active Directory Domain Controller, OpenLDAP, FreeIPA, and cross-platform identity (winbind, SSSD, pam_ldap). Passing 300-300 with an active LPIC-2 grants the LPIC-3 Mixed Environment credential.

Questions

60 scored questions

Time Limit

90 minutes

Passing Score

500 / 800

Exam Fee

$200 USD (Linux Professional Institute (Pearson VUE / OnVUE online proctored))

LPIC-3 Mixed Environment Exam Content Outline

31%

Samba and Active Directory Domains

Samba 4 as AD DC with samba-tool domain provision, AD name resolution, AD user/group management, domain membership via realm or net ads join, local user mapping

20%

Samba Basics

Samba concepts (smbd, nmbd, winbindd), smb.conf global and share parameters, regular maintenance, troubleshooting with smbcontrol, log levels, smbstatus

20%

Linux Identity Management and File Sharing

FreeIPA installation with ipa-server-install, FreeIPA users/hosts/services, FreeIPA-AD trusts, NFSv4 with Kerberos krb5p

20%

Samba Share Configuration

File share parameters, share security and ACLs (vfs_acl_xattr, vfs_acl_tdb), DFS shares, print shares with CUPS

Samba Client Configuration

Linux authentication clients (SSSD, winbind, nss_ldap, pam_ldap), CIFS clients (mount.cifs, fstab credentials), Windows client integration

How to Pass the LPIC-3 Mixed Environment Exam

What You Need to Know

Passing score: 500 / 800
Exam length: 60 questions
Time limit: 90 minutes
Exam fee: $200 USD

Keys to Passing

Complete 500+ practice questions
Score 80%+ consistently before scheduling
Focus on highest-weighted sections
Use our AI tutor for tough concepts

LPIC-3 Mixed Environment Study Tips from Top Performers

1Build a real Samba 4 AD Domain Controller in a lab with samba-tool domain provision and join a Windows or Linux client to verify replication

2Master smb.conf global parameters (workgroup, realm, security, server role) and share-level options (path, valid users, read only, vfs objects)

3Configure SSSD with id_provider = ad and auth_provider = ad, generate a krb5.keytab via realm join, and verify with kinit and getent passwd

4Practice winbind with idmap config backends (rid, autorid, ad) and understand when to choose each for AD environments

5Install FreeIPA with ipa-server-install, add users with ipa user-add, then establish a FreeIPA-AD trust with ipa trust-add

6Drill troubleshooting commands: smbstatus, wbinfo, net ads testjoin, samba-tool drs showrepl, ipa-healthcheck

7Configure NFSv4 with Kerberos (sec=krb5p) and verify ticket-based access on a Linux client

Frequently Asked Questions

What does LPIC-3 300-300 cover?

LPIC-3 300-300 is the LPI Mixed Environment specialty exam covering five topic areas: Samba Basics, Samba and Active Directory Domains, Samba Share Configuration, Samba Client Configuration, and Linux Identity Management with FreeIPA. It tests senior-level skills in integrating Linux servers and clients with Active Directory and managing OpenLDAP and FreeIPA identity infrastructures.

Do I need LPIC-2 before taking LPIC-3 300?

You can take and pass the 300-300 exam without LPIC-2, but you cannot claim the LPIC-3 Mixed Environment credential until you hold an active LPIC-2. The exam pass result remains valid for five years, so many candidates pass 300-300 first and complete LPIC-2 afterward.

How much does the LPIC-3 300 exam cost?

The standard LPI Tier 1 fee is $200 USD per exam (US, UK, EU, Canada, Australia, Japan). LPI uses regional pricing, so candidates in India, Brazil, Africa and several other markets pay reduced fees. Confirm your local price at lpi.org/exam-pricing before booking.

What format is the LPIC-3 300 exam?

60 questions in 90 minutes, mixing multiple-choice and fill-in-the-blank items. Scoring is scaled 200-800 with 500 required to pass. Delivered at Pearson VUE test centers or via OnVUE online proctored.

How long does LPIC-3 certification last?

LPIC-3 is valid for five years from the date you pass. To recertify before expiration, you can pass any current LPIC-3 specialty (300/303/305/306) again, or pass a higher-level LPI exam such as a new LPIC-3 specialty.

How should I prepare for the 300-300 exam?

Plan for 60-100 hours of hands-on practice over 6-10 weeks. Build a Samba 4 AD DC in a lab, join Linux clients via SSSD and winbind, configure file/print shares, and install a FreeIPA server with an AD trust. Review the official 300-300 objectives line-by-line and complete 100+ practice questions, scoring 90%+ before scheduling.

Is 300-300 the same as the older 300-100?

No. 300-300 (objectives v3.0) replaced the older 300-100 in 2021 and reorganized topics around modern Samba 4 as AD Domain Controller, FreeIPA, and SSSD. Older study materials targeted at 300-100 are largely outdated for the current exam.