LPIC-1 Practice Exam 2 — 20 Questions

Question 1

An administrator wants to list all lines in a log file that do NOT contain the word 'ERROR'. Which command should be used?

Accepted Answer

grep -v 'ERROR' logfile. The `-v` flag inverts the match, causing `grep` to output only lines that do NOT contain the pattern 'ERROR'. This is the standard way to exclude lines matching a pattern in a file.

Answer

grep -i 'ERROR' logfile

Answer

grep -w 'ERROR' logfile

Answer

grep 'ERROR' logfile

Question 2

After a reboot, a server fails to obtain an IP address on its sole ethernet interface. The administrator checks /etc/netplan/01-netcfg.yaml and finds the configuration looks correct. However, the interface shows no IP. The system uses systemd-networkd. Which command should be run next to apply the configuration and bring up the interface?

Accepted Answer

netplan apply. The correct command is 'netplan apply' because the system uses netplan to manage network configuration, which generates backend configuration files for systemd-networkd. After editing the YAML file, 'netplan apply' parses the configuration, applies it to the running system, and triggers systemd-networkd to reconfigure the interface without requiring a full restart of the service.

Answer

ifup eth0

Answer

systemctl restart networking

Answer

systemctl restart systemd-networkd

Question 3

A user reports that running '/usr/local/bin/myapp' from the command line results in 'bash: /usr/local/bin/myapp: No such file or directory'. The exhibit shows the file exists and is a valid executable. What is the most likely cause of the error?

Accepted Answer

The dynamic linker /lib64/ld-linux-x86-64.so.2 is missing or corrupted.. When a dynamically linked executable exists and is valid but fails with 'No such file or directory', the most common cause is that the dynamic linker (e.g., /lib64/ld-linux-x86-64.so.2) is missing or corrupted. Bash reports this error because the kernel's execve() syscall cannot find the interpreter specified in the ELF's PT_INTERP segment, not because the executable itself is absent. This is a classic symptom distinct from a missing library, which would produce 'error while loading shared libraries'.

Answer

The script interpreter specified in the shebang is missing.

Answer

The library libc.so.6 is missing.

Answer

The file does not have execute permission for the user.

Question 4

A Linux system's hostname resolution does not consult /etc/hosts before querying DNS. Which file controls the order of name resolution services?

Accepted Answer

/etc/nsswitch.conf. The /etc/nsswitch.conf file controls the order of name resolution services by defining the 'hosts' database entry, which specifies the sources (e.g., files, dns) and their lookup order. If the entry is 'hosts: dns files', the system queries DNS before /etc/hosts, bypassing the local file. This file is part of the GNU C Library's Name Service Switch (NSS) framework, which governs all system databases like passwd, group, and hosts.

Answer

/etc/host.conf

Answer

/etc/resolv.conf

Answer

/etc/dnsmasq.conf

Question 5

An administrator needs to check the system's load averages without displaying any process information. Which command should be used?

Accepted Answer

uptime. The `uptime` command displays the current time, how long the system has been running, the number of logged-in users, and the system load averages for the past 1, 5, and 15 minutes. It does not show any process-level information, making it the correct choice for checking load averages alone.

Answer

w

Answer

top

Answer

ps

Question 6

Which command adds a new group named 'developers' to the system?

Accepted Answer

groupadd developers. The correct command to add a new group on a Linux system is `groupadd developers`. This command creates a new group entry in the system's group database (typically /etc/group). The `groupadd` utility is the standard tool for this task in Linux, and it is part of the shadow-utils package.

Answer

addgroup developers

Answer

newgroup developers

Answer

groupadd -r developers

Question 7

A system reports 'No space left on device' but 'df -h' shows only 60% usage. Which command would help identify the cause?

Accepted Answer

df -i. The 'No space left on device' error can also occur when the filesystem runs out of inodes, even if disk space is not full. The command 'df -i' shows inode usage; if inodes are exhausted, no new files can be created, causing the error. 'lsof +L1' lists deleted open files, which consume disk blocks but not inodes, so it is not the right tool when disk space is only 60% used.

Answer

stat /

Answer

lsof +L1

Answer

du -sh /

Question 8

Which THREE statements are true about the sed command?

Accepted Answer

sed -i 's/foo/bar/g' file.txt replaces all occurrences of foo with bar in the file.. The `-i` flag in sed enables in-place editing, directly modifying the file rather than just outputting changes to stdout. The substitution command `'s/foo/bar/g'` replaces all occurrences of `foo` with `bar` globally on each line, and with `-i`, the changes are written back to the file.

Answer

sed 's/old/new/g' file.txt permanently changes the file.

Answer

sed uses extended regular expressions by default.

Question 9

A system administrator is troubleshooting a server where the /var partition is full, causing services to fail. The administrator deletes old log files in /var/log, but the available space does not increase. Which step should be taken next?

Accepted Answer

Use 'lsof /var/log' to find processes holding deleted file handles, then restart those processes.. When a file is deleted while a process still holds an open file descriptor to it, the file's data blocks are not freed until that process releases the handle. The `lsof /var/log` command identifies such processes, and restarting them forces the kernel to release the deleted inodes, thereby reclaiming the disk space. This is why option C is the correct next step.

Answer

Run 'sync; echo 3 > /proc/sys/vm/drop_caches' to clear cache.

Answer

Remount the /var partition with the 'noatime' option.

Answer

Run 'df -i' to check inode usage.

Question 10

A systems administrator maintains a Linux web server running Apache HTTP Server (version 2.4) with three virtual hosts. The server logs are stored in /var/log/httpd/ and are rotated using logrotate, which is configured with the default settings that came with the Apache package. The administrator has noticed that after the nightly log rotation, the main access log file (access_log) is empty, while the rotated log files (e.g., access_log.1, access_log.2) contain the previous day's data. Furthermore, new HTTP requests are being logged into the most recent rotated file (access_log.1) instead of the current access_log file. The administrator has verified that the logrotate cron job runs successfully, and that the log files are owned by the root user with read/write permissions for the root group. No errors appear in the system logs. The Apache service continues to run and serve web pages. Which of the following actions should the administrator take to ensure that Apache writes new log entries to the current access_log file after rotation?

Accepted Answer

Add a postrotate script to the logrotate configuration that sends a USR1 or HUP signal to the Apache process to cause it to reopen the log files.. The issue is that after logrotate moves the current access_log to access_log.1, Apache continues writing to the old file descriptor (now pointing to access_log.1) because it never reopened the log file. Sending a USR1 or HUP signal to Apache causes it to close and reopen its log files, creating a new access_log and writing new entries there. This is the standard method for log rotation with Apache and other daemons that keep file handles open.

Answer

Modify the Apache configuration to set the 'RotateLogs' directive and restart the service.

Answer

Change the logrotate frequency to 'weekly' so that the log is not rotated as often.

Answer

Set the 'copytruncate' directive in the logrotate configuration to copy the log file and truncate the original, so Apache can continue writing without interruption.

Question 11

A system administrator notices that the system's syslog messages are not being written to /var/log/messages. The rsyslog service is running. The administrator wants to check the configuration syntax of rsyslog. Which command should be used?

Accepted Answer

rsyslogd -N. The correct command is `rsyslogd -N` because the `-N` option performs a configuration syntax check without starting or restarting the rsyslog daemon. This allows the administrator to validate the rsyslog configuration file for errors before applying changes, ensuring that syslog messages will be written correctly to /var/log/messages.

Answer

rsyslogd -d

Answer

rsyslogd -f

Answer

rsyslogd -v

Question 12

You are a system administrator for a small company running a web server on Ubuntu 20.04 LTS. The web server application was installed using apt from the official repositories. Recently, a critical security patch was released for the web server package. You run 'apt update' and 'apt upgrade' but the package is not upgraded. You check the package status with 'apt-cache policy <package>' and see that the installed version is 2.4.41-4ubuntu3.6, and the candidate version is the same. The latest patched version in the repository is 2.4.41-4ubuntu3.7. You verify that the system has internet connectivity and that the repository URLs in /etc/apt/sources.list are correct. What is the most likely reason the upgrade is not being offered?

Accepted Answer

Run 'apt-mark unhold ' and then 'apt upgrade'.. The most likely reason is that the package has been placed on hold using 'apt-mark hold', which prevents it from being upgraded even when a newer version is available in the repository. Running 'apt-mark unhold ' removes this hold, allowing 'apt upgrade' to proceed normally.

Answer

Add the universe repository to sources.list and run 'apt update'.

Answer

Use 'apt dist-upgrade' instead of 'apt upgrade'.

Answer

Run 'apt install <package>' which will force the upgrade.

Question 13

An administrator needs to extend a logical volume by 10GB. The volume group has available physical extents. Which command should be used?

Accepted Answer

lvextend -L +10G /dev/vg/lv. The `lvextend` command with the `-L +10G` flag increases the size of the existing logical volume `/dev/vg/lv` by exactly 10 GB, using available physical extents from the volume group. This is the standard LVM command for extending a logical volume without recreating it.

Answer

lvcreate -L 10G /dev/vg/lv

Answer

vgextend /dev/vg/lv -L +10G

Answer

lvresize -L 10G /dev/vg/lv

Question 14

A technician is troubleshooting a system that fails to boot with the error 'Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)'. What is the most likely cause?

Accepted Answer

The kernel lacks the necessary driver for the storage controller.. The error 'VFS: Unable to mount root fs on unknown-block(0,0)' indicates that the kernel cannot locate or access the root filesystem. This typically occurs because the kernel lacks the necessary driver (module) for the storage controller (e.g., SATA, SCSI, NVMe) that the root device is connected to, so it cannot read the partition table or mount the root filesystem.

Answer

The init binary is missing or corrupted.

Answer

The root filesystem is corrupted and needs fsck.

Answer

The boot loader is not installed correctly.

Question 15

An administrator notices that a large file on an ext4 filesystem is taking up more disk space than expected based on its size. Which command would show the actual disk usage (block allocation) of the file?

Accepted Answer

du -h. (du -h) is correct because du (disk usage) reports the actual disk space consumed by a file, including allocated blocks, which can be larger than the file's logical size due to block size overhead, fragmentation, or sparse file handling. On ext4, the default block size is 4096 bytes, so a 1-byte file occupies 4096 bytes on disk, and du reflects this allocation.

Answer

ls -l

Answer

df -h

Answer

stat

Question 16

Refer to the exhibit. A user runs 'python --version' and gets 'Python 3.9.1'. Which command would run Python 2 instead?

Accepted Answer

python2. On many Linux distributions, Python 2 and Python 3 are installed side by side, with the `python` command typically linked to Python 2 (or sometimes Python 3, depending on the distribution). However, in this scenario, `python --version` returns 'Python 3.9.1', indicating that `python` is linked to Python 3. To explicitly run Python 2, you must use the `python2` command, which is the standard binary name for Python 2.x installations.

Answer

python --version2

Answer

python3

Answer

python2 --version

Question 17

A company's server administrator needs to replace an existing DNS server (192.168.1.10) with a new one (192.168.1.20). Which file must be updated on all DHCP clients to ensure they use the new DNS server?

Accepted Answer

/etc/dhcp/dhcpd.conf. The DHCP server configuration file /etc/dhcp/dhcpd.conf contains the 'option domain-name-servers' directive that specifies which DNS servers are handed out to DHCP clients. When a client renews its lease, it receives the new DNS server IP (192.168.1.20) from the DHCP server, updating the client's /etc/resolv.conf automatically. This is the proper way to centrally manage DNS server assignments across all DHCP clients.

Answer

/etc/resolv.conf

Answer

/etc/nsswitch.conf

Answer

/etc/hosts

Question 18

Which TWO commands can be used to display the current firewall rules in a system using nftables? (Choose two.)

Accepted Answer

nft list ruleset. `nft list ruleset` is the primary command in nftables to display the entire ruleset, including all tables, chains, and rules, regardless of the address family. Option D is also correct because `nft list table inet filter` specifically displays the rules within the 'filter' table of the 'inet' family, which is a valid way to show a subset of the firewall rules. Both commands rely on the nftables framework, which is the modern replacement for iptables on Linux.

Answer

systemctl status nftables

Answer

iptables -L -n

Answer

firewall-cmd --list-all

Question 19

Refer to the exhibit. A user tries to write to /mnt/usb/myfile.txt as a non-root user and receives a permission denied error. What is the most likely reason?

Accepted Answer

The vfat filesystem does not support Unix permissions, and the mount options (fmask/dmask) restrict write access to root only. The vfat filesystem does not store Unix-style permissions; instead, it relies on mount options like fmask and dmask to set the effective permissions for all files and directories. If these masks are set to restrict write access to root only (e.g., fmask=0133), non-root users will receive a 'permission denied' error even if the filesystem is mounted read-write. This is a common cause of write failures on USB drives formatted with FAT/VFAT.

Answer

The filesystem is mounted read-only

Answer

The filesystem is mounted with the 'noexec' option, preventing write

Answer

The file's permissions are 644, so the user does not have write access

Question 20

A database server on a Linux system is configured to listen on TCP port 3306. The administrator wants to restrict access to the database server to only the local network (192.168.1.0/24) using iptables. Which of the following iptables rules achieves this?

Accepted Answer

iptables -A INPUT -p tcp --dport 3306 -s 192.168.1.0/24 -j ACCEPT. It adds an INPUT chain rule that accepts TCP traffic destined for port 3306 only when the source address is within the 192.168.1.0/24 subnet. This effectively restricts incoming database connections to the local network, while all other sources are implicitly dropped by the default INPUT policy or subsequent rules.

Answer

iptables -A INPUT -p tcp --dport 3306 -d 192.168.1.0/24 -j DROP

Answer

iptables -A OUTPUT -p tcp --dport 3306 -d 192.168.1.0/24 -j ACCEPT

Answer

iptables -A OUTPUT -p tcp --sport 3306 -s 192.168.1.0/24 -j ACCEPT