PracticeVideosBlogFlashcardsEspañol
All Practice Exams

Free Practice Questions for LPIC-3 Mixed Environment

Exam-style questions and explanations by OpenExamPrep.

✓ No registration✓ No credit card
100+ Questions
100% Free

Loading practice questions...

Same family resources

Explore More Linux Professional Institute Certifications

Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.

LPIC-1 Linux Administrator — Exam 101 (101-500)

Practice QuestionsStudy Guide

LPI Linux Essentials (010-160)

Practice QuestionsStudy GuideCheat SheetFlashcards

LPI BSD Specialist (702-100)

Practice Questions

LPI DevOps Tools Engineer (701-100)

Practice Questions

LPI Open Source Essentials (050-100)

Practice Questions

LPI Security Essentials (020-100)

Practice Questions
Exam Review

Key Facts: LPIC-3 Mixed Environment Exam

60

Exam Questions

LPI

500/800

Passing Score

LPI scaled scoring

90 min

Exam Duration

LPI

$200

Exam Fee (Tier 1)

LPI

5 years

Validity

Recertification required

LPIC-2

Required to claim

LPI

LPIC-3 300-300 is a 60-question, 90-minute senior exam scored on a 200-800 scale with 500 to pass. Topics: Samba Basics (smb.conf, smbd/nmbd/winbindd), Samba and AD Domains (samba-tool, AD DC, name resolution, domain membership with net ads join), Samba Share Configuration (file/print shares, ACLs, DFS), Samba Client Configuration (SSSD, winbind, CIFS mounts), and Linux Identity Management (FreeIPA install/maintenance, FreeIPA-AD trusts, NFSv4 with Kerberos). Total objective weight is 55 points across 18 sub-objectives. Requires LPIC-2 to claim the LPIC-3 credential.

Sample LPIC-3 Mixed Environment Practice Questions

Try these sample questions to review concepts for the LPIC-3 Mixed Environment exam. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1Which Samba daemon provides the SMB/CIFS file and print services?
A.nmbd
B.smbd
C.winbindd
D.samba-tool
Explanation: smbd is the Samba daemon that handles SMB/CIFS protocol requests for file and print sharing. nmbd handles NetBIOS name service over UDP, winbindd integrates Linux with Windows NT/AD identity, and samba-tool is an administrative CLI, not a long-running daemon.
2Where does the default Samba configuration file live on most Linux distributions?
A./etc/samba/smb.conf
B./etc/smb.conf
C./usr/local/samba/smb.conf
D./var/samba/smb.conf
Explanation: On Debian, RHEL, SUSE and most distros, smb.conf lives at /etc/samba/smb.conf. The samba package compiled from source defaults to /usr/local/samba/etc/smb.conf, but distribution packages override that to /etc/samba/smb.conf. Verify the active path with smbd -b | grep CONFIGFILE.
3Which command provisions a new Samba 4 Active Directory domain on a fresh server?
A.samba-tool domain provision --use-rfc2307 --realm=EXAMPLE.COM --domain=EXAMPLE
B.net ads create --realm=EXAMPLE.COM
C.smbpasswd -a domain
D.winbindd --provision
Explanation: samba-tool domain provision is the canonical command to bootstrap a Samba 4 AD Domain Controller. Common flags: --realm (Kerberos realm), --domain (NetBIOS), --server-role=dc, and --use-rfc2307 to add POSIX attribute schemas. The other options are unrelated or invalid.
4An administrator wants Samba to act as an Active Directory Domain Controller. Which line must appear in the [global] section of smb.conf?
A.server role = standalone server
B.server role = active directory domain controller
C.security = ads
D.workgroup = WORKGROUP
Explanation: Setting `server role = active directory domain controller` configures Samba to run as an AD DC. samba-tool domain provision writes this automatically. `security = ads` is for member servers joining an existing AD domain, not for the DC role itself, and `standalone server` is for non-domain workgroup mode.
5Which winbind idmap backend automatically allocates UID/GID ranges to multiple AD domains using a hash of the domain SID?
A.idmap_rid
B.idmap_ad
C.idmap_autorid
D.idmap_tdb
Explanation: idmap_autorid auto-assigns UID/GID ranges per domain based on a hash/range mapping, ideal for multi-domain forests where you do not want to hand-configure each domain. idmap_rid uses RID-based formulas per configured domain. idmap_ad reads uidNumber from AD (RFC2307). idmap_tdb stores per-SID mappings locally without ranges.
6Which SSSD configuration directive sets Active Directory as the identity, authentication and access provider?
A.id_provider = ad, auth_provider = ad, access_provider = ad
B.id_provider = ldap, auth_provider = krb5
C.id_provider = local, auth_provider = local
D.id_provider = ipa, auth_provider = ipa
Explanation: For an SSSD-joined AD client, the [domain/...] section uses id_provider = ad (plus auth_provider and access_provider = ad) so SSSD pulls users via LDAP from AD and authenticates via Kerberos. The realm join command writes these values automatically.
7What is the correct one-liner to join a CentOS/RHEL 9 host to an Active Directory domain using realmd?
A.realm join --user=Administrator example.com
B.ad join example.com
C.samba-tool domain join example.com
D.net join domain example.com
Explanation: realm join configures SSSD, krb5.conf, and writes a krb5.keytab in one step. The classic invocation is `realm join --user=Administrator example.com`, after which SSSD restarts and AD users can log in. samba-tool domain join is for joining as a Samba DC replica, not a normal client.
8Which file holds the Kerberos client configuration including default realm and KDC mappings on a Linux AD member?
A./etc/krb5.conf
B./etc/kerberos.conf
C./etc/krb5.keytab
D./etc/sssd/sssd.conf
Explanation: /etc/krb5.conf defines [libdefaults] (default_realm), [realms] (KDC and admin_server), and [domain_realm] mappings. /etc/krb5.keytab holds host service keys (binary, generated by realm join or net ads keytab). /etc/sssd/sssd.conf is SSSD's own config, not Kerberos's.
9An administrator runs `kinit administrator@EXAMPLE.COM` and the command succeeds. What does this prove?
A.DNS, time sync, and the KDC for EXAMPLE.COM are reachable and the password is correct
B.The user has an SMB session open
C.The host is joined to the domain
D.Winbind has populated the user's UID
Explanation: kinit obtains a Kerberos TGT — success means the KDC was resolved (DNS), time skew is within tolerance (default 5 min), and the principal exists with the supplied password. It does not require host domain membership and does not allocate a UID. View the cache with klist.
10Which command lists all current SMB connections, locked files, and shares on a running Samba server?
A.smbstatus
B.smbclient -L
C.net status
D.samba-tool status
Explanation: smbstatus prints active sessions, services (open shares), locked files, and PIDs. smbclient -L lists shares from a client perspective via SMB. There is no `net status` subcommand for this purpose, and samba-tool status options are limited to specific subsystems.

About the LPIC-3 Mixed Environment Exam

Senior LPIC-3 specialty exam covering Samba 4 as an Active Directory Domain Controller, OpenLDAP, FreeIPA, and cross-platform identity (winbind, SSSD, pam_ldap). Passing 300-300 with an active LPIC-2 grants the LPIC-3 Mixed Environment credential.

Exam sponsor: Linux Professional Institute (Pearson VUE / OnVUE online proctored). The requirements and fees below concern the certification or admission exam, separate from our free practice resources.

Questions

60 questions

Time Limit

90 minutes

Passing Score

500 / 800

Exam / Certification Fees

$200 USD

Exam sponsor website

Reported exam pass rate: Not publicly disclosed. LPI does not publish official first-attempt pass rates Exam sponsor website

Fees, eligibility, and exam policies can change. Confirm them with the exam sponsor before applying or paying.

Our practice resources: topics covered

We aim to reflect publicly available exam outlines and topic information in our study resources. Coverage, format, and difficulty may differ from the actual exam, and we cannot guarantee that every detail is accurate or current. Confirm exam requirements, fees, and policies with the official exam sponsor.

31%

Samba and Active Directory Domains

Samba 4 as AD DC with samba-tool domain provision, AD name resolution, AD user/group management, domain membership via realm or net ads join, local user mapping

20%

Samba Basics

Samba concepts (smbd, nmbd, winbindd), smb.conf global and share parameters, regular maintenance, troubleshooting with smbcontrol, log levels, smbstatus

20%

Linux Identity Management and File Sharing

FreeIPA installation with ipa-server-install, FreeIPA users/hosts/services, FreeIPA-AD trusts, NFSv4 with Kerberos krb5p

20%

Samba Share Configuration

File share parameters, share security and ACLs (vfs_acl_xattr, vfs_acl_tdb), DFS shares, print shares with CUPS

9%

Samba Client Configuration

Linux authentication clients (SSSD, winbind, nss_ldap, pam_ldap), CIFS clients (mount.cifs, fstab credentials), Windows client integration

Preparing for the LPIC-3 Mixed Environment Exam

What You Need to Know

  • Passing score: 500 / 800
  • Exam length: 60 questions
  • Time limit: 90 minutes
  • Exam / certification fees: $200 USD Official sources

Using Our Practice Resources

  • Work through all 100 available questions
  • Review every answer and explanation
  • Track weak areas and revisit them
  • Use our AI tutor for tough concepts

LPIC-3 Mixed Environment: Suggested Study Strategy

1Build a real Samba 4 AD Domain Controller in a lab with samba-tool domain provision and join a Windows or Linux client to verify replication
2Master smb.conf global parameters (workgroup, realm, security, server role) and share-level options (path, valid users, read only, vfs objects)
3Configure SSSD with id_provider = ad and auth_provider = ad, generate a krb5.keytab via realm join, and verify with kinit and getent passwd
4Practice winbind with idmap config backends (rid, autorid, ad) and understand when to choose each for AD environments
5Install FreeIPA with ipa-server-install, add users with ipa user-add, then establish a FreeIPA-AD trust with ipa trust-add
6Drill troubleshooting commands: smbstatus, wbinfo, net ads testjoin, samba-tool drs showrepl, ipa-healthcheck
7Configure NFSv4 with Kerberos (sec=krb5p) and verify ticket-based access on a Linux client

Frequently Asked Questions

What does LPIC-3 300-300 cover?

LPIC-3 300-300 is the LPI Mixed Environment specialty exam covering five topic areas: Samba Basics, Samba and Active Directory Domains, Samba Share Configuration, Samba Client Configuration, and Linux Identity Management with FreeIPA. It tests senior-level skills in integrating Linux servers and clients with Active Directory and managing OpenLDAP and FreeIPA identity infrastructures.

Do I need LPIC-2 before taking LPIC-3 300?

You can take and pass the 300-300 exam without LPIC-2, but you cannot claim the LPIC-3 Mixed Environment credential until you hold an active LPIC-2. The exam pass result remains valid for five years, so many candidates pass 300-300 first and complete LPIC-2 afterward.

How much does the LPIC-3 300 exam cost?

The standard LPI Tier 1 fee is $200 USD per exam (US, UK, EU, Canada, Australia, Japan). LPI uses regional pricing, so candidates in India, Brazil, Africa and several other markets pay reduced fees. Confirm your local price at lpi.org/exam-pricing before booking.

What format is the LPIC-3 300 exam?

60 questions in 90 minutes, mixing multiple-choice and fill-in-the-blank items. Scoring is scaled 200-800 with 500 required to pass. Delivered at Pearson VUE test centers or via OnVUE online proctored.

How long does LPIC-3 certification last?

LPIC-3 is valid for five years from the date you pass. To recertify before expiration, you can pass any current LPIC-3 specialty (300/303/305/306) again, or pass a higher-level LPI exam such as a new LPIC-3 specialty.

How should I prepare for the 300-300 exam?

Plan for 60-100 hours of hands-on practice over 6-10 weeks. Build a Samba 4 AD DC in a lab, join Linux clients via SSSD and winbind, configure file/print shares, and install a FreeIPA server with an AD trust. Review the official 300-300 objectives line-by-line and complete 100+ practice questions, scoring 90%+ before scheduling.

Is 300-300 the same as the older 300-100?

No. 300-300 (objectives v3.0) replaced the older 300-100 in 2021 and reorganized topics around modern Samba 4 as AD Domain Controller, FreeIPA, and SSSD. Older study materials targeted at 300-100 are largely outdated for the current exam.