LPIC-1 Practice Test 7 — 10 Questions

Question 1

Which TWO of the following commands can be used to replace text patterns in a file and output the result?

Accepted Answer

awk. Option A, awk, is correct because awk is a full text-processing language that supports substitution via the gsub() function (e.g., awk '{gsub(/old/,"new"); print}' file), which replaces matching patterns and prints the modified result to standard output. Option C, sed, is correct because sed is the classic stream editor whose s/// substitution command (e.g., sed 's/old/new/g' file) replaces text patterns and writes the transformed content to stdout without altering the original file. Option B, grep, is not correct because grep only searches for and prints lines matching a pattern; it does not replace text. Option D, tr, is not correct because tr translates or deletes individual characters rather than replacing multi-character text patterns. Option E, cut, is not correct because cut extracts selected fields or columns from each line and performs no substitution.

Answer

grep

Answer

tr

Answer

cut

Question 2

Refer to the exhibit. The system administrator sees that /var/log is 93% full and the syslog file is nearly 2 GB. What is the most appropriate immediate action to free up disk space without losing any critical log data?

Accepted Answer

Run 'logrotate -f /etc/logrotate.conf' to force log rotation.. 'logrotate -f' forces an immediate rotation of all log files as defined in /etc/logrotate.conf, which compresses or archives the current syslog file (e.g., syslog becomes syslog.1) and creates a fresh empty log file. This frees disk space without deleting any data, as the rotated logs remain on disk until the configured retention policy removes them. It is the standard, safe immediate action for a nearly full /var/log partition.

Answer

Increase the size of the /var/log partition using lvextend.

Answer

Delete /var/log/syslog and restart the syslog daemon.

Answer

Move /var/log/syslog to /tmp and create a symbolic link.

Question 3

A directory contains files with spaces and special characters in their names. An administrator wants to delete all files older than 30 days using find and xargs. Which command is safe?

Accepted Answer

find /path -type f -mtime +30 -print0 | xargs -0 rm. It uses `-print0` with `find` to output null-delimited filenames, and `xargs -0` to process them safely. This handles spaces, newlines, and special characters in filenames without word-splitting or shell interpretation, ensuring all matching files older than 30 days are deleted reliably.

Answer

find /path -type f -mtime +30 -delete

Answer

find /path -type f -mtime +30 -exec rm {} \;

Answer

find /path -type f -mtime +30 | xargs rm

Question 4

A Linux administrator is troubleshooting a package dependency issue. When attempting to install package 'foo', the package manager reports a missing dependency 'libbar.so.2'. Which of the following is the most appropriate next step?

Accepted Answer

Use 'apt-file search libbar.so.2' or 'dnf provides libbar.so.2' to find the package that contains the file. The error indicates that the file 'libbar.so.2' is missing from the system. The most appropriate next step is to identify which package provides this file, so that it can be installed to satisfy the dependency. On Debian-based systems, 'apt-file search' queries the package repository metadata to find the package containing a specific file; on Red Hat-based systems, 'dnf provides' performs the same function. This targeted search is the correct first troubleshooting step before any installation or library cache update.

Answer

Run 'ldconfig' to update the library cache

Answer

Reinstall the 'foo' package using 'rpm -i --force foo.rpm'

Answer

Run 'rpm -q --whatrequires libbar.so.2'

Question 5

Which directory contains information about hardware devices in a hierarchical structure, such as PCI devices and USB devices?

Accepted Answer

/sys. The /sys directory (sysfs) is a virtual filesystem that exports information about hardware devices, drivers, and kernel objects in a hierarchical structure. It organizes devices by their bus type (e.g., PCI, USB) and provides detailed attributes such as vendor IDs, device IDs, and power management states, making it the correct location for querying hardware topology.

Answer

/dev

Answer

/etc

Answer

/proc

Question 6

Which TWO of the following are true about the /proc filesystem?

Accepted Answer

It is a pseudo-filesystem that contains runtime system information.. Option C is correct because /proc is a pseudo-filesystem (a virtual, kernel-generated filesystem) that exposes runtime system and process information such as /proc/cpuinfo, /proc/meminfo, and per-process directories like /proc/PID, rather than storing real data blocks on disk. Option E is correct because /proc is typically mounted automatically at boot time, commonly via an entry like 'proc /proc proc defaults 0 0' in /etc/fstab or by systemd, since many tools and the kernel expect it to be present early in the boot process. Option A is incorrect because /proc is not formatted with ext4 or any on-disk filesystem; it has no persistent backing store. Option B is incorrect because /proc is not a network filesystem like NFS or CIFS; it is a kernel-internal virtual filesystem. Option D is incorrect because /proc does not store persistent configuration data—it reflects transient kernel and process state, and changes are lost on reboot.

Answer

It is formatted with the ext4 filesystem.

Answer

It is a network filesystem.

Answer

It is used to store persistent configuration data.

Question 7

A system administrator needs to check if a filesystem has any errors without actually performing a repair. Which command should be used?

Accepted Answer

fsck -n /dev/sdb1. The `-n` option with `fsck` performs a read-only check, displaying any filesystem errors without making any modifications or repairs. This is the correct choice for a non-destructive check that only reports issues.

Answer

fsck -y /dev/sdb1

Answer

fsck -N /dev/sdb1

Answer

e2fsck -p /dev/sdb1

Question 8

Which command can be used to check whether a specific kernel module is currently loaded?

Accepted Answer

lsmod | grep <module>. `lsmod` lists all currently loaded kernel modules by reading the `/proc/modules` file, and piping its output through `grep` filters for the specific module name. This directly shows whether the module is loaded in the running kernel, which is the exact requirement of the question.

Answer

modinfo <module>

Answer

depmod -a

Answer

insmod <module>

Question 9

Which TWO commands can display the UUID of block devices?

Accepted Answer

blkid. Option A, blkid, is correct because it directly queries block-device metadata and prints each device's UUID (along with TYPE and LABEL) by reading the filesystem superblock, e.g. /dev/sda1: UUID="..." TYPE="ext4". Option B, lsblk -f, is correct because the -f (--fs) flag adds filesystem information columns including UUID, FSTYPE, LABEL, and mountpoint for each block device in a tree view. Option C, df -T, only reports filesystem type, size, and usage per mountpoint, not UUIDs. Option D, fdisk -l, lists partition tables, sizes, and types but does not display filesystem UUIDs. Option E, parted /dev/sda print, shows the partition table, geometry, and partition types, but not filesystem UUIDs.

Answer

df -T

Answer

fdisk -l

Answer

parted /dev/sda print

Question 10

A company runs a web server using Apache with multiple virtual hosts. The administrator needs to restrict access to a specific virtual host based on the client IP address. Which configuration directive should be placed inside the <VirtualHost> block to deny IP 192.168.1.100?

Accepted Answer

Require not ip 192.168.1.100. In Apache 2.4 and later, access control is managed using the `Require` directive with the `not` modifier to deny specific IP addresses. Placing `Require not ip 192.168.1.100` inside the `<VirtualHost>` block will deny access to that IP while allowing all others, as the default behavior is to require all IPs unless a `Require` directive explicitly grants access.

Answer

Require host 192.168.1.100

Answer

Deny from 192.168.1.100

Answer

Require valid-user