LPIC-1 Practice Test 24 — 15 Questions

Question 1

A host on the 192.168.1.0/24 network cannot reach the internet. Based on the exhibit, which is the most likely cause?

Accepted Answer

The gateway for internet traffic is incorrect; the host uses 10.0.1.254 for internal network, but the default gateway 10.0.1.1 may not be reachable from 192.168.1.0/24.. Option D is correct. The default route points to 10.0.1.1, but the 192.168.1.0/24 network is accessed via 10.0.1.254, which likely does not have internet connectivity. Option A is wrong because the default route exists. Option B is wrong because the routing table is present. Option C is wrong because there is no evidence of a missing route for that network.

Answer

There is no route to 192.168.1.0/24.

Answer

The default route is missing.

Answer

The routing table is empty.

Question 2

An administrator wants systemd-journald logs to persist across reboots. What must be created?

Accepted Answer

The directory /var/log/journal. Option D is correct because creating /var/log/journal with appropriate permissions (owned by root:systemd-journal) makes logs persistent. Option A is the volatile location, Option B is a spool directory not used by journald, and Option C is not a standard path.

Answer

The directory /run/log/journal

Answer

The file /etc/journald.conf

Answer

The directory /var/spool/journal

Question 3

An administrator is configuring a DHCP server to assign IP addresses to clients in the 192.168.10.0/24 subnet. The server should provide the default gateway as 192.168.10.1 and DNS server as 8.8.8.8. Which option in /etc/dhcp/dhcpd.conf defines the default gateway?

Accepted Answer

option routers 192.168.10.1;. Option A is correct: `option routers` in dhcpd.conf sets the default gateway. Option B (option domain-name-servers) sets DNS. Option C (option subnet-mask) sets netmask. Option D (option broadcast-address) sets broadcast.

Answer

option subnet-mask 255.255.255.0;

Answer

option broadcast-address 192.168.10.255;

Answer

option domain-name-servers 8.8.8.8;

Question 4

Refer to the exhibit. The administrator is unable to SSH into the server (TCP port 22) from a remote host. The iptables rules are as shown. What is the most likely cause?

Accepted Answer

The second rule drops all incoming traffic, including SSH.. Option A is correct: the last rule drops all incoming traffic, and there is no rule allowing SSH. Option B is wrong because the default policy is ACCEPT, but the DROP rule supersedes. Option C is wrong because the loopback rule allows lo only. Option D is wrong because the policy is ACCEPT but the explicit DROP rule catches all.

Answer

The default policy is ACCEPT, so SSH should be accepted.

Answer

The SSH service is not running.

Answer

The first rule only allows loopback, not SSH.

Question 5

A system administrator notices that the system time is slowly drifting from the actual time. The system uses chrony for NTP synchronization. The administrator runs 'chronyc sources' and sees no reachable sources. The firewall is enabled and configured. Which action should the administrator take to resolve the time synchronization issue?

Accepted Answer

Add a firewall rule to allow UDP 123 outbound to NTP servers.. The absence of reachable sources suggests a firewall blocking UDP port 123, which chrony uses. Adding a firewall rule to allow outgoing NTP traffic will likely restore synchronization. Chrony cannot use a different port for standard NTP. Restarting chronyd without fixing the firewall will not help. Switching to ntpdate is a temporary workaround.

Answer

Configure chrony to use a different port for NTP.

Answer

Restart chronyd service.

Answer

Use ntpdate to set the time manually once.

Question 6

A web server running on this host is not accessible from clients. Based on the exhibit, what is the most likely reason?

Accepted Answer

Incoming HTTP traffic is blocked by a DROP rule on port 80.. Option A is correct. The INPUT chain has a DROP rule for TCP port 80, blocking incoming web traffic. Option B is wrong because port 22 (SSH) is allowed. Option C is wrong because FORWARD policy is DROP but that affects forwarded traffic, not local input. Option D is wrong because OUTPUT policy is ACCEPT.

Answer

The FORWARD chain policy is DROP.

Answer

The OUTPUT chain policy is ACCEPT.

Answer

SSH traffic is blocked.

Question 7

After running 'ip route show default', a system administrator sees no output. Users on that system can only communicate with hosts on the local subnet. What is the most likely cause?

Accepted Answer

The default gateway is missing. Option B is correct because the absence of a default route means traffic to destinations outside the local subnet cannot be forwarded. Option A could be an issue but connectivity to local subnet works. Option C is less specific, and Option D would cause no connectivity at all.

Answer

DNS is misconfigured

Answer

A firewall is blocking all traffic

Answer

The network interface is down

Question 8

A mail server using Postfix is rejecting emails from a partner domain. The administrator checks the maillog and sees 'relay access denied'. Which Postfix configuration parameter is most likely misconfigured?

Accepted Answer

mynetworks. Option A is correct: `mynetworks` defines which clients can relay through the server. Option B (mydestination) defines local domains. Option C (relayhost) is for outbound relay. Option D (inet_interfaces) controls which interfaces to listen on.

Answer

mydestination

Answer

inet_interfaces

Answer

relayhost

Question 9

Refer to the exhibit. The administrator expects logs to be sent to a remote syslog server at 192.168.1.100 on UDP port 514. However, no logs are being received at the remote server. Which is the most likely issue?

Accepted Answer

The remote syslog server's firewall is blocking incoming UDP port 514.. Option C is correct: The syntax `@` indicates UDP by default, but often rsyslog requires TCP with `@@`. However, the real issue is that the remote server may not be listening. Option A is wrong because `*.*` sends all logs. Option B is wrong because there's no other filter. Option D is less likely.

Answer

The local7 rule overrides the remote rule.

Answer

The wildcard *.* does not include kernel messages.

Answer

The syntax should use @@ for UDP.

Question 10

Based on the exhibit, what is the most likely cause of the SSH service failure?

Accepted Answer

Another service is already listening on port 22.. Option A is correct. The error 'Address already in use' indicates port 22 is already occupied by another process. Option B is wrong because the process exited successfully but was killed due to start limit. Option C is wrong because there's no firewall mention. Option D is wrong because the service is enabled.

Answer

The sshd service is disabled.

Answer

The firewall is blocking port 22.

Answer

The SSH configuration file has a syntax error.

Question 11

Which two commands can be used to send a test email from the command line to verify SMTP functionality? (Choose two.)

Accepted Answer

mail -s test user@example.com. Options A and D are correct. The 'mail' command can send emails, and echoing text into sendmail also sends an email. Option B (sendmail -bv) only verifies the address, Option C (telnet) tests SMTP but does not deliver a complete email, and Option E (mutt) requires configuration.

Answer

telnet localhost 25

Answer

mutt -s test user@example.com

Answer

sendmail -bv user@example.com

Question 12

A system administrator wants to monitor network traffic on a specific port (TCP/443) entering the server. Which command will capture packets on interface eth0 and display them in real-time?

Accepted Answer

tcpdump -i eth0 port 443. Option C is correct: `tcpdump -i eth0 port 443` captures and displays packets on port 443. Option A (netstat -tulpn) shows listening ports. Option B (ss -tulpn) shows sockets. Option D (iptables -L -n) lists firewall rules.

Answer

netstat -tulpn | grep :443

Answer

ss -tulpn | grep :443

Answer

iptables -L -n -v

Question 13

An administrator notices that SSH connections to a remote Linux server are timing out. After confirming network connectivity, which command should the administrator run on the server to check whether the SSH daemon is actively listening?

Accepted Answer

systemctl status sshd. Option A is correct because systemctl queries the service manager to show the status of the sshd service, including whether it is running and enabled. Option B shows listening ports but does not give the service status. Option C tests port connectivity but not the service itself. Option D only checks for configuration file existence.

Answer

ls /etc/ssh/

Answer

nc -zv localhost 22

Answer

netstat -tuln

Question 14

Which three files are essential for network configuration and name resolution on a typical Linux system? (Choose three.)

Accepted Answer

/etc/hosts. Options A, B, and C are correct. /etc/hosts contains static hostname mappings, /etc/resolv.conf specifies DNS servers, and /etc/nsswitch.conf defines the order of name resolution sources. /etc/network/interfaces is distribution-specific, and /etc/sysctl.conf is for kernel parameters, not essential for basic network configuration.

Answer

/etc/network/interfaces

Answer

/etc/sysctl.conf

Question 15

An organization's DNS server (BIND) is authoritatively serving the example.com zone. The administrator needs to add a mail exchange record for mail.example.com with priority 10. Which resource record should be added to the zone file?

Accepted Answer

example.com. IN MX 10 mail.example.com.. Option B is correct: MX record with priority and mail server hostname. Option A is an A record. Option C is a CNAME. Option D is a TXT record.

Answer

mail.example.com. IN A 192.168.1.10

Answer

mail.example.com. IN CNAME example.com.

Answer

example.com. IN TXT "v=spf1 mx -all"

LPIC-1 Practice Test 24 — 15 Questions

Exhibit

LPIC-1 Practice Test 24 — 15 Questions

Exhibit