LPIC-1 Practice Test 1 — 25 Questions

Question 1

Which TWO of the following are valid methods to reduce boot time on a Linux system? (Select exactly 2.)

Accepted Answer

Disable unnecessary systemd services.. Disabling unnecessary systemd services reduces the number of processes that must be started during boot, directly decreasing the time spent in the target phase of systemd's parallel service activation. Each disabled service eliminates its own dependency resolution, unit loading, and execution overhead, which is especially impactful on systems with many enabled services.

Answer

Use an initramfs with minimal drivers.

Answer

Increase the kernel log level to debug.

Answer

Use ext2 instead of ext4 as the root filesystem.

Question 2

A small business uses a Linux server running CUPS to share a network printer. For several months, all employees could print successfully. Today, an employee in a different subnet reports that printing does not work. The administrator checks the server: cupsd is running, the printer is configured with an IPP URI pointing to the printer's IP address, and the printer is idle. The administrator can ping the printer from the server. The administrator checks the CUPS error log and sees the following line multiple times: 'E [04/Oct/2024:10:15:22 -0400] [Client 5] client-error-not-authorized'. Which of the following actions should the administrator take to resolve the issue?

Accepted Answer

Add 'Allow from 192.168.2.0/24' to the appropriate policy in /etc/cups/cupsd.conf. The error 'client-error-not-authorized' in CUPS indicates that the client's request was denied due to access control restrictions in cupsd.conf. Since the employee is in a different subnet (e.g., 192.168.2.0/24), the default CUPS policy likely only allows local subnet access. Adding 'Allow from 192.168.2.0/24' to the appropriate policy (e.g., under <Policy default>) grants printing access from that subnet, resolving the authorization failure.

Answer

Change the printer's URI from ipp:// to socket://

Answer

Add the employee's username to the lpadmin group

Answer

Restart the cupsd service with 'systemctl restart cupsd'

Question 3

A user 'jdoe' already exists. The administrator needs to add 'jdoe' to the 'staff' and 'admin' groups without changing other group memberships. Which command accomplishes this?

Accepted Answer

usermod -a -G staff,admin jdoe. The `usermod -a -G` command appends the user 'jdoe' to the supplementary groups 'staff' and 'admin' without altering existing group memberships. The `-a` (append) flag is essential; without it, `-G` would replace all current supplementary groups with only those listed. This matches the requirement to add the user to new groups while preserving other group memberships.

Answer

sed -i 's/^staff:.*/&jdoe/' /etc/group

Answer

usermod -G staff,admin jdoe

Answer

useradd -G staff,admin jdoe

Question 4

Refer to the exhibit. The root filesystem is nearly full. The administrator needs to increase its size. Which steps should be performed?

Accepted Answer

Use lvextend to extend the logical volume and then resize2fs to resize the filesystem. The root filesystem is on an LVM logical volume, as indicated by the exhibit (e.g., /dev/mapper/rootvg-rootlv). To increase its size, you must first extend the logical volume using lvextend, then resize the filesystem with resize2fs. This two-step process ensures the underlying block device and the filesystem are both enlarged to utilize the newly available space.

Answer

Use parted to resize the root partition and then mount it

Answer

Use fdisk to increase the size of /dev/sda1 and then run resize2fs

Answer

Create a new filesystem on /dev/sda2 and mount it to /

Question 5

Refer to the exhibit. On boot, which filesystem will be checked first by fsck?

Accepted Answer

The root filesystem (/). The root filesystem (/) is checked first by fsck because it is mounted read-only during the initial boot phase, and fsck must verify its integrity before the system can proceed to mount other filesystems. The order of filesystem checks is determined by the fs_passno field in /etc/fstab, where the root filesystem typically has a passno of 1, ensuring it is checked before any filesystem with a higher passno value.

Answer

The swap partition

Answer

The CD-ROM device

Answer

The /boot filesystem

Question 6

A system administrator needs to schedule a recurring maintenance task that runs every Monday at 3 AM. Which crontab entry is correct?

Accepted Answer

0 3 * * 1 /script.sh. The crontab syntax is minute, hour, day of month, month, day of week. Setting minute=0, hour=3, day of week=1 runs the script at 3:00 AM every Monday (day 1 represents Monday in cron).

Answer

3 0 * * 1 /script.sh

Answer

0 3 * * 0 /script.sh

Answer

0 3 * * 7 /script.sh

Question 7

Arrange the steps to configure a static IP address on a Linux system using the command line.

Accepted Answer

Step 1: Open the network configuration file (e.g., /etc/network/interfaces).
Step 2: Configure the interface with static IP, netmask, gateway, and DNS.
Step 3: Save and exit the file.
Step 4: Restart the networking service.. Static IP configuration requires editing the appropriate config file, then restarting networking to apply changes.

Answer

Step 1: Restart the networking service.
Step 2: Open the network configuration file.
Step 3: Configure the interface with static IP, netmask, gateway, and DNS.
Step 4: Save and exit the file.

Answer

Step 1: Open the network configuration file.
Step 2: Save and exit the file.
Step 3: Configure the interface with static IP, netmask, gateway, and DNS.
Step 4: Restart the networking service.

Answer

Step 1: Configure the interface with static IP, netmask, gateway, and DNS.
Step 2: Restart the networking service.
Step 3: Open the network configuration file.
Step 4: Save and exit the file.

Question 8

An administrator needs to find all files in the /var/log directory that have been modified in the last 24 hours. Which command should be used?

Accepted Answer

find /var/log -mtime 0. The `find` command with `-mtime 0` searches for files whose data modification time is within the last 24 hours. The `-mtime` option uses a 24-hour period, and a value of 0 means modified less than 24 hours ago, which matches the requirement to find files modified in the last 24 hours in /var/log.

Answer

find /var/log -ctime 0

Answer

find /var/log -atime 0

Answer

find /var/log -mmin 1440

Question 9

A developer needs to ensure a bash script exits immediately if any command fails, and also prints each command before executing it. Which set of shell options should be used at the beginning of the script?

Accepted Answer

set -ex. `set -ex` combines two essential shell options: `-e` (errexit) causes the script to exit immediately if any command returns a non-zero exit status, and `-x` (xtrace) prints each command (after expansion) to stderr before executing it. This is the standard way to achieve both behaviors in a single line, as required by the question.

Answer

set -e

Answer

set -vx

Answer

set -ux

Question 10

Which TWO tools can be used to query DNS records? (Choose two.)

Accepted Answer

nslookup. A is correct because nslookup is a classic DNS query tool that sends DNS queries to name servers to resolve domain names to IP addresses or vice versa. It directly queries DNS records (A, AAAA, MX, CNAME, etc.) using the DNS protocol (UDP/TCP port 53).

Answer

ss

Answer

ping

Answer

traceroute

Question 11

After a reboot, a server fails to obtain an IP address on its sole ethernet interface. The administrator checks /etc/netplan/01-netcfg.yaml and finds the configuration looks correct. However, the interface shows no IP. The system uses systemd-networkd. Which command should be run next to apply the configuration and bring up the interface?

Accepted Answer

netplan apply. The correct command is 'netplan apply' because the system uses netplan to manage network configuration, which generates backend configuration files for systemd-networkd. After editing the YAML file, 'netplan apply' parses the configuration, applies it to the running system, and triggers systemd-networkd to reconfigure the interface without requiring a full restart of the service.

Answer

ifup eth0

Answer

systemctl restart networking

Answer

systemctl restart systemd-networkd

Question 12

A script uses the command substitution: files=$(ls). Which statement about the resulting value of files is true?

Accepted Answer

The variable files contains the output of ls, with trailing newlines removed.. Command substitution captures the standard output of the enclosed command and removes trailing newline characters. Internal newlines are retained, but the final newline is stripped. This behavior is consistent across shells and is why using the result unquoted can lead to word splitting on spaces, tabs, and newlines.

Answer

The variable files contains the output of ls with newlines replaced by spaces.

Answer

The variable files contains the exit status of the ls command.

Answer

The variable files contains a list of filenames separated by null characters.

Question 13

Refer to the exhibit. An administrator runs 'ntpq -p' and sees the output shown. What is the most likely cause of the '16' stratum and '0.000' delay/offset?

Accepted Answer

The NTP daemon has recently started and has not yet synchronized.. The '16' stratum and '0.000' delay/offset values in the 'ntpq -p' output indicate that the NTP daemon has not yet synchronized with any time source. When ntpd starts, it initially sets the stratum to 16 (unsynchronized) and shows zero values for delay and offset until it completes the synchronization process. This is a normal transient state that resolves once the daemon successfully contacts and synchronizes with an NTP server.

Answer

The NTP service is not running.

Answer

The firewall is blocking UDP port 123.

Answer

The restrict lines are blocking all NTP queries.

Question 14

A database server on a Linux system is configured to listen on TCP port 3306. The administrator wants to restrict access to the database server to only the local network (192.168.1.0/24) using iptables. Which of the following iptables rules achieves this?

Accepted Answer

iptables -A INPUT -p tcp --dport 3306 -s 192.168.1.0/24 -j ACCEPT. It adds an INPUT chain rule that accepts TCP traffic destined for port 3306 only when the source address is within the 192.168.1.0/24 subnet. This effectively restricts incoming database connections to the local network, while all other sources are implicitly dropped by the default INPUT policy or subsequent rules.

Answer

iptables -A INPUT -p tcp --dport 3306 -d 192.168.1.0/24 -j DROP

Answer

iptables -A OUTPUT -p tcp --dport 3306 -d 192.168.1.0/24 -j ACCEPT

Answer

iptables -A OUTPUT -p tcp --sport 3306 -s 192.168.1.0/24 -j ACCEPT

Question 15

An organization's DNS server (BIND) is authoritatively serving the example.com zone. The administrator needs to add a mail exchange record for mail.example.com with priority 10. Which resource record should be added to the zone file?

Accepted Answer

example.com. IN MX 10 mail.example.com.. An MX record specifies the mail exchange server for a domain, and the syntax 'example.com. IN MX 10 mail.example.com.' defines a priority of 10 for the mail server mail.example.com. This record tells other mail servers to deliver email for @example.com to mail.example.com, with lower priority values preferred.

Answer

mail.example.com. IN A 192.168.1.10

Answer

mail.example.com. IN CNAME example.com.

Answer

example.com. IN TXT "v=spf1 mx -all"

Question 16

Refer to the exhibit. A user runs 'python --version' and gets 'Python 3.9.1'. Which command would run Python 2 instead?

Accepted Answer

python2. On many Linux distributions, Python 2 and Python 3 are installed side by side, with the `python` command typically linked to Python 2 (or sometimes Python 3, depending on the distribution). However, in this scenario, `python --version` returns 'Python 3.9.1', indicating that `python` is linked to Python 3. To explicitly run Python 2, you must use the `python2` command, which is the standard binary name for Python 2.x installations.

Answer

python --version2

Answer

python3

Answer

python2 --version

Question 17

A server in a corporate network uses systemd-resolved for DNS. Internal hostnames (e.g., server.example.lan) fail to resolve, but external names (e.g., google.com) work. The /etc/resolv.conf is a symlink to /run/systemd/resolve/stub-resolv.conf. The administrator checks the systemd-resolved configuration and finds that the internal DNS server is listed globally, but the network interface has no specific DNS set. Which command should be used to assign the internal DNS server to the interface and fix resolution?

Accepted Answer

Run 'resolvectl dns eth0 10.0.0.1' to set the DNS server for the interface.. `resolvectl dns eth0 10.0.0.1` assigns the internal DNS server specifically to the network interface (eth0), overriding the global setting for that interface. In systemd-resolved, per-interface DNS settings take precedence over global DNS servers, so this command ensures that internal hostnames are resolved by the internal DNS server while external names continue to work via the global configuration.

Answer

Add the internal hostnames to /etc/hosts.

Answer

Restart systemd-resolved service.

Answer

Edit /etc/resolv.conf and add the internal DNS server.

Question 18

A sysadmin wants to prevent an APT package from being upgraded automatically but still allow it to be upgraded manually if needed. Which configuration method best achieves this?

Accepted Answer

Use 'apt-mark hold '. The `apt-mark hold ` command marks a package as held back, preventing it from being automatically upgraded during `apt upgrade` or `apt dist-upgrade`, while still allowing manual upgrades via `apt install ` or `apt-mark unhold`. This directly meets the requirement of blocking automatic upgrades but permitting manual intervention.

Answer

Set the package version to a non-existent version in /etc/apt/preferences

Answer

Add the package to /etc/apt/preferences with Pin-Priority: 1000

Answer

Remove the package from sources.list

Question 19

Order the steps to create and apply a file system permission using ACLs.

Accepted Answer

Mount the filesystem with the acl option, then use setfacl to apply ACL rules, then use getfacl to verify ACL rules.. ACLs require the filesystem to be mounted with the acl option, then setfacl applies rules, and getfacl verifies them.

Answer

Use setfacl to apply ACL rules, then mount the filesystem with the acl option, then use getfacl to verify ACL rules.

Answer

Use getfacl to verify ACL rules, then use setfacl to apply ACL rules, then mount the filesystem with the acl option.

Answer

Mount the filesystem with the acl option, then use getfacl to verify ACL rules, then use setfacl to apply ACL rules.

Question 20

When troubleshooting a problem with a Debian package installation, an administrator wants to see which version of a package would be installed from the configured repositories. Which command displays the candidate version?

Accepted Answer

apt-cache policy package. The `apt-cache policy package` command displays the package's priority, the installed version (if any), and the candidate version (the version that would be installed by default from the configured repositories). This makes it the correct tool for determining which version will be installed from the repositories.

Answer

dpkg -l package

Answer

apt-show-versions package

Answer

apt-get -s install package