LPIC-1 Practice Test 4 — 25 Questions

Question 1

Refer to the exhibit. An admin attempts to execute a shell script located in /tmp but gets 'Permission denied'. Which mount option is most likely causing this?

Accepted Answer

noexec. The 'noexec' mount option prevents execution of any binary or script directly from the filesystem, regardless of file permissions. Since the script is in /tmp and the admin gets 'Permission denied' despite correct execute bits, the /tmp partition is likely mounted with noexec, which is a common security hardening practice.

Answer

relatime

Answer

nodev

Answer

nosuid

Question 2

Which TWO of the following are valid methods to run a shell script named 'script.sh' using the bash shell, assuming the script has execute permission? (Choose two.)

Accepted Answer

./script.sh. './script.sh' explicitly invokes the script using the current shell's shebang interpreter (e.g., #!/bin/bash) and requires execute permission. Option E is correct because 'bash script.sh' runs the script as an argument to the bash interpreter, which reads and executes the file line by line, also requiring execute permission.

Answer

sh script.sh

Answer

script.sh (if in PATH)

Answer

source script.sh

Question 3

Which command lists all installed packages on a Debian-based system by querying the dpkg database?

Accepted Answer

dpkg --get-selections. `dpkg --get-selections` queries the dpkg database directly and outputs a list of all installed packages along with their installation state (e.g., 'install'). This command does not rely on remote repositories or cache files, making it a reliable method for listing installed packages on a Debian-based system.

Answer

apt-cache search .

Answer

dpkg -L

Answer

apt-show-versions

Question 4

The /proc filesystem is described as a virtual filesystem. Which statement best describes its purpose?

Accepted Answer

It provides an interface to kernel data structures and processes.. The /proc filesystem is a virtual filesystem that does not contain actual files on disk but instead provides a runtime interface to kernel data structures, including process information, system memory, CPU details, and hardware configuration. This allows users and system tools (like ps, top, and free) to read kernel state in real time without needing direct kernel memory access.

Answer

It contains configuration files for system services.

Answer

It holds binary executables for system administration.

Answer

It stores temporary files that survive reboots.

Question 5

A system administrator installs a new RPM package, but it fails due to a missing library dependency. Which command can best identify the specific dependency that is missing?

Accepted Answer

rpm -qpR. The correct command is `rpm -qpR`. The `-q` flag queries the RPM database, `-p` specifies a package file (not an installed package), and `-R` lists all capabilities (including shared libraries) that the package requires. This directly shows the missing dependency by name, such as `libfoo.so.1`. The other options either list installed packages, query files within a package, or use a higher-level tool that may not pinpoint the exact missing library.

Answer

yum deplist

Answer

rpm -qlp

Answer

rpm -qa

Question 6

Which THREE steps are required to configure a network interface with a static IP address using the ip command (assuming interface eth0)? (Choose three.)

Accepted Answer

ip route add default via 192.168.1.1. The `ip route add default via 192.168.1.1` command sets the default gateway for the system, which is essential for routing traffic to networks beyond the local subnet. Without a default route, the static IP configuration would only allow communication within the local network (192.168.1.0/24), making this step mandatory for full network connectivity.

Answer

ifconfig eth0 192.168.1.10 netmask 255.255.255.0

Answer

echo 'nameserver 8.8.8.8' > /etc/resolv.conf

Question 7

An administrator wants to allow user 'john' to run all commands as root without a password. Which sudoers entry accomplishes this?

Accepted Answer

john ALL=(ALL) NOPASSWD: ALL. The sudoers entry 'john ALL=(ALL) NOPASSWD: ALL' grants user 'john' permission to run any command as any user (including root) from any host, and the NOPASSWD tag overrides the default password requirement, allowing passwordless execution. This matches the requirement precisely.

Answer

john ALL=NOPASSWD: /bin/su

Answer

john ALL=(ALL) ALL

Answer

john ALL=(ALL) PASSWD: ALL

Question 8

Which TWO commands can display the UUID of block devices?

Accepted Answer

blkid. The `blkid` command directly queries the libblkid library to locate and display block device attributes, including the UUID, from the device's superblock. `lsblk -f` lists block devices and their filesystem information, which includes the UUID, by reading sysfs and udev databases. Both commands reliably output the UUID for block devices.

Answer

df -T

Answer

fdisk -l

Answer

parted /dev/sda print

Question 9

A system administrator runs the command `fdisk -l` and sees the following line:
Disk /dev/sda: 1000 GB, 1000204886016 bytes, 1953525168 sectors
Based on this output, which statement is true?

Accepted Answer

The disk is 1 TB. The output from `fdisk -l` shows the total disk size as 1000 GB, which is 1 TB. Thus, option C is correct. The output does not provide information about write protection, partition count, or partition table type.

Answer

The disk has write protection enabled

Answer

The disk has 5 partitions

Answer

The disk uses GPT partitioning

Question 10

An administrator notices the system clock is drifting. Which command can be used to enable automatic time synchronization using NTP on a system with systemd?

Accepted Answer

timedatectl set-ntp yes. `timedatectl set-ntp yes` enables automatic time synchronization via NTP on systems using systemd. This command configures the `systemd-timesyncd` service, which is the default NTP client for systemd-based distributions, to synchronize the system clock with remote NTP servers. It is the standard, modern method for managing NTP settings in such environments.

Answer

ntpdate pool.ntp.org

Answer

systemctl start ntpd

Answer

date --set

Question 11

Which THREE files are used by CUPS to manage printer queues? (Choose THREE.)

Accepted Answer

/etc/cups/classes.conf. CUPS uses /etc/cups/printers.conf to define printer queues and their associated options, /etc/cups/classes.conf to manage printer classes (groups of queues), and /etc/cups/cupsd.conf as the main daemon configuration file that controls access, logging, and other server settings. These three files are directly read by the CUPS daemon to manage and serve printer queues.

Answer

/etc/cups/lpoptions

Answer

/etc/cups/ppd/

Question 12

You manage a CentOS 7 server that runs a critical application storing data on an XFS filesystem mounted at /data. The server experiences an unexpected power outage. After rebooting, the application fails to start, and you suspect filesystem corruption. You boot into single-user mode and attempt to mount /data, but the mount fails with an error: 'mount: /dev/sdb1: can't read superblock'. You run 'xfs_repair -n /dev/sdb1' and it reports the log is dirty and must be replayed or the filesystem repaired with the -L option (force log zeroing). You want to recover the filesystem with minimal data loss. Which action should you take?

Accepted Answer

Run 'xfs_repair -L /dev/sdb1' to force log replay and repair.. Xfs_repair -L /dev/sdb1 forces the log to be zeroed (cleared) and then performs a full filesystem check and repair. This is necessary when the log is dirty and cannot be replayed normally due to corruption, such as after an unclean shutdown. The -L option is the standard recovery method for XFS when the log is damaged, and it minimizes data loss by only discarding the log (which contains metadata changes that were not yet written to disk) while preserving the rest of the filesystem data.

Answer

Mount the filesystem with the 'norecovery' option to bypass the log and then attempt to repair.

Answer

Run 'fsck -y /dev/sdb1' to automatically repair.

Answer

Run 'xfs_admin -U generate /dev/sdb1' to generate a new UUID and then mount.

Question 13

A user reports that when they run 'ls -l' in their home directory, they see files but all files have permissions like '-rwxrwxrwx', which is unexpected. The system administrator checks and finds that the user's umask is set to 000. The user wants all new files to be created with default permissions of -rw-r--r-- (644) and directories that are drwxr-xr-x (755). What should the user set their umask to?

Accepted Answer

022. The umask is a three-digit octal value that is subtracted from the default base permissions (666 for files, 777 for directories) to determine the default permissions for newly created files and directories. To achieve file permissions of 644 (rw-r--r--) and directory permissions of 755 (rwxr-xr-x), the umask must be 022. This is because 666 - 022 = 644 for files, and 777 - 022 = 755 for directories.

Answer

007

Answer

002

Answer

027

Question 14

A Linux administrator manages a server that runs a custom application requiring a specific kernel module to be loaded at boot. The server uses SysV init and has the module listed in /etc/modules. However, after a recent kernel update, the module fails to load automatically at boot. The administrator can manually load the module with 'modprobe <module>' after the system is running. The application depends on this module being loaded before any network services start. Which of the following actions should the administrator take to ensure the module loads automatically at the correct time during boot?

Accepted Answer

Create a SysV init script that loads the module and place it in /etc/init.d/ with appropriate symlinks in /etc/rc?.d/ to ensure it runs before network services.. SysV init systems use init scripts in /etc/init.d/ with symlinks in /etc/rc?.d/ to control the order of service startup. By creating a custom init script that loads the module via modprobe and placing it with a symlink that has a lower number (e.g., S01module) than network services (e.g., S10network), the module will be loaded before network services start, satisfying the application's dependency.

Answer

Add the module name to /etc/modules-load.d/ directory.

Answer

Add an install directive in /etc/modprobe.d/ for the module.

Answer

Add a blacklist entry for the module in /etc/modprobe.d/blacklist.conf.

Question 15

A web server running Apache on Linux is experiencing slow response times. The administrator runs 'netstat -tuln' and sees many connections in TIME_WAIT state. Which of the following is the best course of action to improve performance?

Accepted Answer

Enable TCP keepalive and adjust kernel parameters for faster reuse.. TIME_WAIT connections indicate that the server is waiting for lingering packets before fully closing TCP sockets. Enabling TCP keepalive and adjusting kernel parameters like net.ipv4.tcp_tw_reuse (or net.ipv4.tcp_tw_recycle in older kernels) allows the kernel to reuse sockets in TIME_WAIT state for new connections, reducing resource exhaustion and improving performance under high connection rates.

Answer

Increase the KeepAliveTimeout directive.

Answer

Disable the KeepAlive directive.

Answer

Increase the MaxKeepAliveRequests directive.

Question 16

Which TWO commands can be used to view the contents of a compressed file named archive.tar.gz without extracting it to disk?

Accepted Answer

tar -tzf archive.tar.gz. The `tar -tzf` command lists the contents of a tar archive compressed with gzip without extracting it. The `-t` flag tells tar to list the table of contents, `-z` handles the gzip decompression on the fly, and `-f` specifies the archive file. This is the standard, single-command method for viewing the contents of a `.tar.gz` file without writing any files to disk.

Answer

gzip -d archive.tar.gz

Answer

bunzip2 -c archive.tar.gz | tar -t

Answer

gunzip -l archive.tar.gz

Question 17

A Linux system administrator is tasked with setting up a new server that will host multiple virtual machines using KVM. The server has 64 GB of RAM and two physical CPUs, each with 8 cores (16 threads). The administrator needs to allocate resources efficiently. The VMs will have varying workloads. The administrator wants to ensure that the host system has enough resources for itself and that VMs can use all available CPU cores. Which approach should the administrator take to configure CPU allocation for the host and VMs?

Accepted Answer

Use CPU pinning to reserve two physical cores for the host and distribute the remaining cores among VMs using host-passthrough mode.. It reserves two physical cores for the host system to ensure its stability and performance, while distributing the remaining cores among VMs using CPU pinning and host-passthrough mode. This approach allows VMs to access the full CPU feature set and all available cores efficiently, balancing host overhead with VM resource needs in a KVM environment.

Answer

Use QEMU emulation instead of KVM to reduce CPU overhead.

Answer

Pin all physical CPU cores to the VMs using virsh vcpupin, and leave no cores for the host.

Answer

Overcommit CPU resources by assigning 32 vCPUs to each VM, relying on the hypervisor to schedule.

Question 18

Which of the following directories is NOT defined in the Filesystem Hierarchy Standard (FHS)?

Accepted Answer

/net. The /net directory is not defined in the Filesystem Hierarchy Standard (FHS). The FHS specifies standard directory locations like /run, /proc, /media, and /sys, but /net is not a required or standard directory; it may appear in some systems as a mount point for network filesystems but is not part of the FHS specification.

Answer

/run

Answer

/proc

Answer

/media

Answer

/sys

Question 19

A Linux system has two network interfaces: eth0 and eth1. The administrator wants to bond them for increased throughput. Which kernel module is required for bonding?

Accepted Answer

bonding. The bonding driver in Linux allows multiple network interfaces to be aggregated into a single logical interface for increased throughput or redundancy. The correct kernel module is named 'bonding' (loaded via modprobe bonding or compiled into the kernel), which implements the IEEE 802.3ad Link Aggregation standard and other bonding modes. Option B is correct because 'bonding' is the exact module name used in the Linux kernel.

Answer

aggregation

Answer

team

Answer

bond

Question 20

A system administrator is responsible for a Linux server running a critical application. The server recently experienced an unplanned power outage. Upon rebooting, the system fails to reach the default target and drops into an emergency shell. The administrator notices that the root filesystem (/) is mounted read-only. The /etc/fstab file contains the following lines:

UUID=abc123 / ext4 errors=remount-ro 0 1
UUID=def456 /home ext4 defaults 0 2
UUID=ghi789 none swap sw 0 0

The administrator suspects that the /home filesystem has a corrupt superblock and is causing the boot failure. The administrator needs to check and repair the /home filesystem without causing data loss. Which of the following is the correct course of action?

Accepted Answer

Boot from a live USB, run 'fsck /dev/sdb1' on the unmounted filesystem, then reboot.. The /home filesystem is suspected to have a corrupt superblock, and running fsck on an unmounted filesystem from a live USB is the safest way to check and repair it without risking further damage. The emergency shell mounts the root filesystem read-only, and /home cannot be reliably checked while mounted or without proper access to its device node. Booting from a live USB ensures the filesystem is not in use, allowing fsck to safely repair the superblock or use an alternate superblock if needed.

Answer

Reinstall the system from backup because the superblock corruption is fatal.

Answer

Run 'fsck /dev/sdb1' from the emergency shell after remounting /home read-write.

Answer

Run 'fsck -y /dev/sdb1' from the emergency shell, but first run 'mount -o remount,rw /home' to make the filesystem writable.