LPIC-1 Practice Test 37 — 15 Questions

Question 1

A junior admin is tasked with configuring network bonding on a Debian server with two Ethernet interfaces, eth0 and eth1. The goal is to provide link redundancy using active-backup mode. The admin edits /etc/network/interfaces and adds configuration for bond0 with slaves eth0 eth1, then runs 'ifup bond0'. However, the bond interface fails to come up and the error message indicates that the 'bond' kernel module is not loaded. The admin checks with 'lsmod | grep bonding' and finds no output. Which additional step is required to successfully bring up the bond interface? Options: A) Run 'modprobe bonding' before ifup, B) Add 'auto bond0' in /etc/network/interfaces, C) Use ifenslave directly after ifup, D) Reboot the system to load the module.

Accepted Answer

Run 'modprobe bonding' before ifup. Option A is correct because the bonding module must be loaded before the bond interface can be created. 'modprobe bonding' loads the kernel module. Option B is irrelevant; 'auto' ensures interface starts at boot but doesn't load the module. Option C is unnecessary if bonding is configured via interfaces; ifenslave is for manual bonding. Option D is overkill; rebooting may load the module if configured, but loading manually is quicker. So A is correct.

Answer

Use ifenslave directly after ifup

Answer

Reboot the system to load the module

Answer

Add 'auto bond0' in /etc/network/interfaces

Question 2

A small office server running Ubuntu 20.04 experiences a gradual time drift. The system clock loses about 2 minutes per week. The hardware clock (RTC) is maintained by the motherboard battery and appears accurate when checked manually. The sysadmin wants to ensure the system clock stays synchronized automatically. Which single action should be taken? Options: A) Run 'timedatectl set-ntp true' to enable systemd-timesyncd, B) Add 'hwclock --hctosys' to /etc/rc.local, C) Install and configure the ntp package with a pool server, D) Use 'cron' to run ntpdate every minute.

Accepted Answer

Run 'timedatectl set-ntp true' to enable systemd-timesyncd. Option A enables the integrated SNTP client in systemd, which is the simplest solution for most desktops/servers. Option B only syncs at boot, not continuously. Option C is valid but overkill for 2 minutes/week drift; the simpler solution works. Option D is inefficient and may cause rapid clock adjustments. Thus A is best.

Answer

Install and configure the ntp package with a pool server

Answer

Add 'hwclock --hctosys' to /etc/rc.local

Answer

Use 'cron' to run ntpdate every minute

Question 3

A data center server with two NICs (eth0 and eth1) is configured for network bonding in mode 1 (active-backup). The admin notices that after a cable pull on eth0, the bond interface fails over to eth1 as expected. However, when the cable is reconnected to eth0, the bond remains on eth1 indefinitely. The admin checks /proc/net/bonding/bond0 and sees that eth0 is marked as 'up' but not as 'active'. Which parameter is most likely missing from the bond configuration? Options: A) 'miimon=100' to enable link monitoring, B) 'downdelay=0', C) 'updelay=0', D) 'primary=eth0' to prefer eth0 as the active slave.

Accepted Answer

primary=eth0. Option D is correct because without a primary setting, the bond does not automatically switch back to the preferred slave when it recovers. Active-backup mode does not preempt by default. Option A (miimon) is already working as failover occurred. Options B and C adjust delay but do not cause failback. So D is needed to force failback to eth0.

Answer

updelay=0

Answer

downdelay=0

Answer

miimon=100

Question 4

An administrator is migrating a legacy service from a SysV init system to a systemd unit. The service is a long-running daemon that forks once. The admin writes a unit file of Type=forking, sets PIDFile correctly, and enables the service. On the next reboot, the service starts but systemd reports that the service entered 'failed' state shortly after start, even though the process is running. The log shows: 'PID file /var/run/myservice.pid not readable (yet?) after start.' What is the most likely cause? Options: A) The service does not write its PID file quickly enough, B) The PIDFile path is wrong, C) The unit file should use Type=simple instead, D) The service needs a TimeoutStartSec increase.

Accepted Answer

The service does not write its PID file quickly enough. Option A is correct: systemd waits for the PID file to appear after the forking process exits. If the daemon writes the PID file after a delay, systemd may time out. Option B is unlikely because the error mentions the file not readable, not missing. Option C (simple) would not expect a PID file but would track the main process directly. Option D may help but the core issue is timing of PID file creation. Usually, increasing TimeoutStartSec is a workaround; the real fix is ensuring the daemon writes PID file early. So A is most direct.

Answer

The PIDFile path is wrong

Answer

The service needs a TimeoutStartSec increase

Answer

The unit file should use Type=simple instead

Question 5

A Linux system with a custom kernel fails to boot after a new kernel is compiled and installed. The boot process stops at a prompt: 'Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)'. The root filesystem is on /dev/sda2 with ext4. The system has an initramfs generated with dracut. The admin can boot from a previous kernel. Which is the most appropriate next step to troubleshoot and fix the issue? Options: A) Rebuild the initramfs using 'dracut --force --kver' with the correct kernel version, B) Add 'root=/dev/sda2' to the kernel command line, C) Use 'mkinitrd' with the '--preload' option for ext4 module, D) Run 'ldd /sbin/init' to check for missing libraries.

Accepted Answer

Rebuild the initramfs using 'dracut --force --kver' with the correct kernel version. Option A is correct because the initramfs may be missing necessary drivers for the root filesystem or controller. Regenerating it with dracut for the new kernel ensures modules are included. Option B is likely already present (the error says unknown-block, indicating root= parameter might be missing or wrong, but if it's in GRUB, it should be there). Option C uses mkinitrd which is deprecated on newer systems with dracut. Option D is for user-space issues; the panic is at boot before init runs. So A is best.

Answer

Run 'ldd /sbin/init' to check for missing libraries

Answer

Use 'mkinitrd' with the '--preload' option for ext4 module

Answer

Add 'root=/dev/sda2' to the kernel command line

Question 6

A small office has a network printer with IP 192.168.1.100. The printer is shared via CUPS. A user reports that they cannot print a document from their workstation. The printer appears in the list of available printers, but when they try to print, the job hangs in the queue with status 'processing'. The administrator suspects the printer may be offline or the CUPS service is not running. Which command should the administrator run first to gather diagnostic information about the printer and its queue?

Accepted Answer

lpstat -t. lpstat -t provides a comprehensive overview of printer status, including whether the printer is accepting jobs, the queue state, and any error messages. Restarting cups could disrupt print jobs. Ping only tests network connectivity but not CUPS functionality. Re-adding the printer is unnecessary without first diagnosing the issue.

Answer

ping 192.168.1.100

Answer

lpadmin -p printer -E

Answer

systemctl restart cups

Question 7

A server in a corporate network uses systemd-resolved for DNS. Internal hostnames (e.g., server.example.lan) fail to resolve, but external names (e.g., google.com) work. The /etc/resolv.conf is a symlink to /run/systemd/resolve/stub-resolv.conf. The administrator checks the systemd-resolved configuration and finds that the internal DNS server is listed globally, but the network interface has no specific DNS set. Which command should be used to assign the internal DNS server to the interface and fix resolution?

Accepted Answer

Run 'resolvectl dns eth0 10.0.0.1' to set the DNS server for the interface.. The issue is that the per-link DNS configuration is missing. resolvectl dns sets the DNS server for a specific interface, overriding the global setting for that interface. Editing /etc/resolv.conf directly is ineffective as it is managed by systemd-resolved. Restarting the service does not set the missing per-link DNS. Adding entries to /etc/hosts is a static workaround.

Answer

Add the internal hostnames to /etc/hosts.

Answer

Restart systemd-resolved service.

Answer

Edit /etc/resolv.conf and add the internal DNS server.

Question 8

A systems administrator maintains a Linux web server running Apache HTTP Server (version 2.4) with three virtual hosts. The server logs are stored in /var/log/httpd/ and are rotated using logrotate, which is configured with the default settings that came with the Apache package. The administrator has noticed that after the nightly log rotation, the main access log file (access_log) is empty, while the rotated log files (e.g., access_log.1, access_log.2) contain the previous day's data. Furthermore, new HTTP requests are being logged into the most recent rotated file (access_log.1) instead of the current access_log file. The administrator has verified that the logrotate cron job runs successfully, and that the log files are owned by the root user with read/write permissions for the root group. No errors appear in the system logs. The Apache service continues to run and serve web pages. Which of the following actions should the administrator take to ensure that Apache writes new log entries to the current access_log file after rotation?

Accepted Answer

Add a postrotate script to the logrotate configuration that sends a USR1 or HUP signal to the Apache process to cause it to reopen the log files.. The correct answer is A. After log rotation, Apache continues writing to the old inode unless signaled to reopen. A postrotate script sending USR1 or HUP is the standard solution. Option B (copytruncate) is alternative but less reliable; options C and D are ineffective.

Answer

Modify the Apache configuration to set the 'RotateLogs' directive and restart the service.

Answer

Change the logrotate frequency to 'weekly' so that the log is not rotated as often.

Answer

Set the 'copytruncate' directive in the logrotate configuration to copy the log file and truncate the original, so Apache can continue writing without interruption.

Question 9

A company manages a cluster of 50 web servers running Ubuntu 20.04. The servers are configured to synchronize time with an internal NTP server at 10.0.0.100 using the default ntpd. The NTP server itself syncs with external stratum 2 servers. Recently, the security team implemented a restrictive iptables firewall on all servers, allowing only essential services. Several servers in the 10.0.1.0/24 network now report time drift and ntpq -p shows all peers with '?' status. A network engineer runs tcpdump on one affected server and sees no NTP replies from 10.0.0.100. The NTP server's firewall is configured to allow inbound NTP from 10.0.0.0/24 only. The engineer also notes that the server's /etc/ntp.conf contains the line 'restrict 10.0.0.100' (which is incorrect) and that ntpq -crv shows 'sync target not reachable'. Which single action will most directly resolve the synchronization issue for the affected servers?

Accepted Answer

Add an iptables rule on the affected server to accept outbound UDP packets to 10.0.0.100 port 123.. The problem is that the NTP client's firewall on the affected servers (10.0.1.0/24) is blocking outbound NTP traffic, and the server's firewall is correctly blocking inbound from non-10.0.0.0/24. The incorrect 'restrict 10.0.0.100' line in ntp.conf is irrelevant because it only restricts the role of that IP (as a client) and does not block traffic. Adding an ACCEPT rule for outbound UDP 123 to the NTP server on the client's iptables will allow the client to send requests and receive replies. Changing the NTP server's firewall to allow 10.0.1.0/24 is a longer-term fix but not a direct action on the affected server. Modifying ntp.conf to remove the restrict line won't help with the firewall block. Adding a static route is irrelevant.

Answer

Remove the line 'restrict 10.0.0.100' from /etc/ntp.conf.

Answer

Modify the NTP server's firewall to allow inbound NTP from 10.0.1.0/24.

Answer

Add a static route on the affected server for 10.0.0.100 via a different gateway.

Question 10

A small business uses a Linux server running CUPS to share a network printer. For several months, all employees could print successfully. Today, an employee in a different subnet reports that printing does not work. The administrator checks the server: cupsd is running, the printer is configured with an IPP URI pointing to the printer's IP address, and the printer is idle. The administrator can ping the printer from the server. The administrator checks the CUPS error log and sees the following line multiple times: 'E [04/Oct/2024:10:15:22 -0400] [Client 5] client-error-not-authorized'. Which of the following actions should the administrator take to resolve the issue?

Accepted Answer

Add 'Allow from 192.168.2.0/24' to the appropriate policy in /etc/cups/cupsd.conf. The error 'client-error-not-authorized' in CUPS indicates that the client's request was denied due to access control restrictions in cupsd.conf. Since the employee is in a different subnet (e.g., 192.168.2.0/24), the default CUPS policy likely only allows local subnet access. Adding 'Allow from 192.168.2.0/24' to the appropriate policy (e.g., under <Policy default>) grants printing access from that subnet, resolving the authorization failure.

Answer

Change the printer's URI from ipp:// to socket://

Answer

Add the employee's username to the lpadmin group

Answer

Restart the cupsd service with 'systemctl restart cupsd'

Question 11

A helpdesk technician receives a call about a user who is unable to run a script that was working yesterday. The user says they only changed the ownership of a file in their home directory. The script is located in /usr/local/bin and is owned by root:root. The script has permissions 755. Which of the following is the most likely cause of the issue?

Accepted Answer

The user changed the ownership of one of the script's input files, making it unreadable.. Option D is correct because the script itself is owned by root:root with 755 permissions, meaning it is executable by everyone. However, if the user changed the ownership of an input file that the script reads, that file may now be owned by the user but with permissions that prevent the script (running as the user) from reading it, or the script may require specific ownership to access the file. Since the script was working yesterday and the only change was ownership of a file in the home directory, the most likely cause is that the script's input file is now unreadable or inaccessible due to the ownership change.

Answer

The user changed the ownership of the /usr/local/bin directory.

Answer

The script requires root privileges to run.

Answer

The user accidentally changed the ownership of the script file.

Question 12

A system administrator is responsible for a production Debian 10 (buster) server that hosts a critical web application. The application requires the package 'libssl1.1' version 1.1.1 or higher, but the official Debian 10 repository only provides version 1.1.0. The administrator has already attempted to install the newer version from Debian 11 (bullseye) sources, but this caused dependency conflicts with the existing libc6 version. The server cannot be upgraded to Debian 11 due to application compatibility. The administrator needs to resolve this situation without breaking the existing system or introducing unofficial packages. Which of the following is the most appropriate course of action?

Accepted Answer

Add the Debian Backports repository for buster and install libssl1.1 from there.. Option A is correct because Debian Backports provides newer versions of select packages (like libssl1.1) that are recompiled against the stable release's libraries (e.g., libc6 from buster), avoiding dependency conflicts. This allows the administrator to obtain libssl1.1 version 1.1.1 or higher without upgrading the entire system or introducing unofficial packages, maintaining system stability and security.

Answer

Upgrade the entire system to Debian 11 using a rolling upgrade.

Answer

Use dpkg --force-depends to force the installation of libssl1.1 from Debian 11.

Answer

Download the libssl1.1 source package from Debian 11 and compile it on the buster system with custom flags.

Question 13

A web server runs Apache and generates extensive access logs. To conserve disk space, an administrator sets up a cron job that runs nightly at 2:00 AM. The job executes a shell script located at /usr/local/bin/rotate_logs.sh. The script is intended to find all .log files in /var/log/apache2/ that are older than 7 days, compress them with gzip, and move the compressed files to /var/log/archive/. However, after several days, the administrator notices that the /var/log partition is nearly full and the logs are not being compressed. The cron log shows the job ran at the scheduled time but produced no terminal output (stdout or stderr). The script itself contains no explicit echo statements or error handling. The administrator has root access and wants to diagnose the problem without disrupting the running web server. Which of the following is the most appropriate first step to identify the failure?

Accepted Answer

Run the script manually with 'bash -x /usr/local/bin/rotate_logs.sh' to observe command execution.. Option A is correct because running the script with 'bash -x' enables execution tracing, which prints each command and its arguments as they are executed. This will reveal exactly where the script fails—whether due to a missing file, permission error, or incorrect path—without modifying the script or disrupting the running web server. Since the cron job produced no output, the script likely encountered a silent failure, and 'bash -x' is the most direct way to diagnose it.

Answer

Use 'ps -ef | grep compress' to check if the cron job spawned any child processes.

Answer

Check the file permissions of the archive directory with 'ls -ld /var/log/archive'.

Answer

Review the system logs in /var/log/syslog for any entries related to gzip or the script.

Question 14

A company security policy requires that user accounts be disabled after 90 days of inactivity. The system administrator locks user accounts using 'usermod -L username'. However, users with SSH key authentication can still log in. The administrator has verified that the locked flag is set in /etc/shadow. Which of the following is the most likely explanation?

Accepted Answer

The usermod -L command only locks password-based login, not SSH key login.. The `usermod -L` command locks a user account by placing a '!' in the password hash field of /etc/shadow, which only prevents authentication via password-based methods (e.g., PAM's pam_unix). SSH key authentication uses the SSH protocol's public-key challenge-response, which is handled by the SSH daemon (sshd) and does not consult the locked password field in /etc/shadow. Therefore, users with valid SSH keys in ~/.ssh/authorized_keys can still log in despite the account being locked.

Answer

The administrator forgot to restart the SSH service after locking accounts.

Answer

The SSH daemon is configured to allow passwordless login for locked accounts.

Answer

The users have valid SSH keys in their ~/.ssh/authorized_keys, and SSH does not check the account lock status.

Question 15

A small business runs a Linux server hosting a web application and a PostgreSQL database. The server uses LVM for storage, with a single volume group vg_data containing two logical volumes: lv_web (50GB) and lv_db (100GB). The root filesystem is on a separate disk. The administrator receives alerts that the database volume is at 95% capacity. The server has additional unused space from a recently added disk that was added to the volume group as an additional physical volume, but the space has not been allocated. The administrator runs 'vgs' which shows VG vg_data with total size 500GB, allocated 150GB, and free 350GB. The administrator wants to increase the size of lv_db by 50GB. Which course of action should the administrator take?

Accepted Answer

Run 'lvextend -L +50G /dev/vg_data/lv_db' and then 'resize2fs /dev/vg_data/lv_db' (if filesystem is ext4).. Option C is correct because the administrator needs to extend the existing logical volume lv_db by 50GB using 'lvextend -L +50G /dev/vg_data/lv_db' (the '+' is critical for relative growth), and then if the filesystem is ext4, 'resize2fs /dev/vg_data/lv_db' resizes the filesystem to use the newly allocated space. The volume group already has 350GB free, so no new physical volume needs to be added.

Answer

Run 'lvresize -L 50G /dev/vg_data/lv_db' and then 'xfs_growfs /mount/point'.

Answer

Run 'lvcreate -L 50G -n lv_backup vg_data' and mount it.

Answer

Run 'vgextend vg_data /dev/sdb1' and then 'lvextend -L 50G /dev/vg_data/lv_db'.