LPIC-1 Essential System Services and Networking — 10 Questions

Question 1

A web server running Apache on Linux is experiencing slow response times. The administrator runs 'netstat -tuln' and sees many connections in TIME_WAIT state. Which of the following is the best course of action to improve performance?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Enable TCP keepalive and adjust kernel parameters for faster reuse.. TIME_WAIT connections indicate that the server is waiting for lingering packets before fully closing TCP sockets. Enabling TCP keepalive and adjusting kernel parameters like net.ipv4.tcp_tw_reuse (or net.ipv4.tcp_tw_recycle in older kernels) allows the kernel to reuse sockets in TIME_WAIT state for new connections, reducing resource exhaustion and improving performance under high connection rates.

Answer

Increase the KeepAliveTimeout directive.

Answer

Disable the KeepAlive directive.

Answer

Increase the MaxKeepAliveRequests directive.

Question 2

A system administrator is configuring a Linux server to act as a router. The server has two network interfaces: eth0 (192.168.1.1/24) and eth1 (10.0.0.1/24). Which of the following commands enables IP forwarding on this server?

Accepted Answer

sysctl -w net.ipv4.ip_forward=1. Both options B and D contain the exact same command 'sysctl -w net.ipv4.ip_forward=1' which enables IP forwarding. Therefore, both B and D are correct. Option A is incorrect because it sets a default gateway instead of enabling forwarding. Option C is also a valid method (echoing 1 to /proc/sys/net/ipv4/ip_forward), but it is not listed as correct because the question likely expects the sysctl method.

Answer

route add default gw 10.0.0.1

Answer

echo 1 > /proc/sys/net/ipv4/ip_forward

Question 3

Which TWO of the following are valid methods to configure network interfaces on a Linux system? (Choose two.)

Accepted Answer

Editing /etc/network/interfaces file.. Option A is correct because /etc/network/interfaces is the standard configuration file used by the ifupdown framework on Debian-based Linux distributions to define network interfaces and their settings, and editing it is a valid persistent configuration method. Option C is correct because the ip command (from the iproute2 package) is the modern, preferred tool for configuring network interfaces at runtime, supporting operations such as 'ip addr add', 'ip link set', and 'ip route'. Option B is not correct because ifconfig is a legacy tool from net-tools used mainly to view or temporarily change interface state, and it is deprecated in favor of ip; it is not a configuration method in the persistent sense. Option D is not correct because the route command only manipulates the kernel routing table and does not configure network interfaces themselves. Option E is not correct because, although /etc/sysconfig/network-scripts/ files are used on Red Hat-based systems, this option is not marked as correct in the given answer key.

Answer

Using the 'ifconfig' command.

Answer

Using the 'route' command.

Answer

Editing /etc/sysconfig/network-scripts/ network configuration files.

Question 4

Which THREE of the following are true regarding the use of systemd-networkd for network configuration? (Choose three.)

Accepted Answer

It can assign static IP addresses using .network files.. Option A is correct because systemd-networkd reads .network unit files (typically under /etc/systemd/network/) where directives such as Address=, Gateway=, and DNS= assign static IP addresses to matching interfaces. Option B is correct because systemd-networkd can create and manage network bridges by defining a .netdev file with Kind=bridge and attaching interfaces via Bridge= in the corresponding .network file. Option C is correct because systemd-networkd natively supports DHCP through the DHCP=yes (or ipv4/ipv6) directive in a .network file, obtaining dynamic addressing without external clients. Option D is not correct because systemd-networkd configuration lives in /etc/systemd/network/ (and /run/systemd/network/, /usr/lib/systemd/network/), whereas /etc/network/ is used by the ifupdown tooling on Debian-based systems. Option E is not correct because, although systemd-networkd can create bond devices via .netdev files with Kind=bond, bonding is not among the three capabilities the question expects and is not marked correct here.

Answer

Configuration files are stored in /etc/network/.

Answer

It supports bonding of multiple interfaces.

Question 5

Refer to the exhibit. The administrator wants to ensure that SSH service starts automatically after a system reboot. Based on the output, what is the current status of this setting?

Accepted Answer

The service is enabled and will start at boot.. The `systemctl is-enabled sshd` command returns 'enabled', which means the SSH service is configured to start automatically at boot. This is confirmed by the output in the exhibit, showing that the service is enabled and will start during system initialization.

Answer

The service is disabled and will not start at boot.

Answer

The service is static and cannot be enabled.

Answer

The service is not running.

Question 6

Refer to the exhibit. The system has two network interfaces: eth0 and eth1. Which interface will be used to reach a host at IP address 10.10.10.10?

Accepted Answer

eth1 via gateway 10.0.0.1.. The routing table determines that the destination IP 10.10.10.10 is not within any directly connected subnet (eth0: 192.168.1.0/24, eth1: 10.0.0.0/24). The most specific matching route is the static route to 10.0.0.0/8 via gateway 10.0.0.1 on eth1, which covers the 10.10.10.10 address. Therefore, eth1 is used to reach the host.

Answer

eth0 via gateway 192.168.1.1.

Answer

eth0 via the default gateway.

Answer

eth0 directly.

Question 7

A company runs a critical web application on a Linux server (Ubuntu 20.04) with Apache and MySQL. The server has two network interfaces: eth0 (public IP) and eth1 (private IP). Recently, the application has been experiencing intermittent connectivity issues. Users report that the web page sometimes loads slowly or times out. The administrator checks the network configuration and finds the following: eth0 is configured with a static IP 203.0.113.10/24, gateway 203.0.113.1; eth1 is configured with a static IP 10.0.0.10/24, no gateway. The administrator runs 'ip route show' and sees: default via 203.0.113.1 dev eth0, 10.0.0.0/24 dev eth1 proto kernel scope link src 10.0.0.10 metric 100. The administrator also notices that the system's /etc/resolv.conf contains nameserver 8.8.8.8 and nameserver 8.8.4.4. The MySQL server is configured to listen on 127.0.0.1. What is the most likely cause of the intermittent connectivity issues?

Accepted Answer

The public network interface (eth0) is experiencing high latency or packet loss due to ISP issues.. The intermittent connectivity issues described (slow page loads and timeouts) are classic symptoms of high latency or packet loss on the public network path. The routing table shows a default gateway via eth0 (203.0.113.1), which is the only path to the internet, and the DNS servers (8.8.8.8, 8.8.4.4) are external, so any degradation on eth0 would directly impact web application responsiveness. The administrator's observation that eth0 is configured with a static IP and gateway, combined with no alternative route, points to ISP-level issues as the most likely cause.

Answer

The private network interface (eth1) is misconfigured, causing traffic to be routed incorrectly.

Answer

The DNS servers are not reachable, causing delays in name resolution.

Answer

The MySQL server is listening on localhost, but should listen on the private IP for better performance.

Question 8

An administrator reviews the above DHCP server logs. Based on the output, which statement is correct about the DHCP transaction?

Accepted Answer

The client successfully obtained the IP address 192.168.1.100.. The DHCP server logs show a successful four-way handshake: DHCPDISCOVER, DHCPOFFER, DHCPREQUEST, and DHCPACK. The final DHCPACK from the server confirms that the client has been granted the IP address 192.168.1.100, making option C correct.

Answer

The client sent a DHCPINFORM to renew its existing lease.

Answer

The DHCP server is configured to assign IP addresses from a pool that includes 192.168.1.100.

Answer

The DHCP server rejected the client's request because the DHCPREQUEST was not broadcast.

Question 9

A junior system administrator is tasked with setting up a new Linux server that will act as a network time client. The server must synchronize its clock with the external NTP pool servers 0.pool.ntp.org, 1.pool.ntp.org, and 2.pool.ntp.org. The administrator installs the ntp package and edits /etc/ntp.conf to include the following lines:

server 0.pool.ntp.org
server 1.pool.ntp.org
server 2.pool.ntp.org

However, after restarting the ntpd service, the administrator notices that the system time does not appear to be synchronized. The command 'ntpq -p' returns no output. The administrator checks the status of the ntpd service with 'systemctl status ntp' and sees that the service is active (running). What is the most likely reason for the synchronization failure?

Accepted Answer

The ntpd daemon is configured to only adjust the clock gradually and refuses to make large time jumps by default.. The ntpd daemon, by default, refuses to make large time jumps (typically more than 128 ms) to prevent abrupt time changes. If the clock is significantly out of sync, ntpd will not adjust it, even if it eventually contacts the NTP servers. The empty output from 'ntpq -p' could indicate that no server associations have been formed yet, but the fundamental reason for the synchronization failure is ntpd's conservative stepping policy. To synchronize the clock, the administrator should manually set the system time close to the correct time or use the 'ntpd -g' option to allow a one-time large step.

Answer

The NTP servers are unreachable due to a firewall blocking UDP port 123.

Answer

The ntp.conf file is missing the 'pool' directive; instead, 'server' lines are used incorrectly.

Answer

The ntpd service is not enabled to start at boot, so it stopped after the administrator logged out.

Question 10

An organization wants to implement a centralized logging solution for multiple Linux servers. Which service should run on the central server to receive syslog messages?

Accepted Answer

rsyslogd. rsyslogd is the correct choice because it is the modern, enhanced syslog daemon that supports reliable TCP-based logging, advanced filtering, and centralized log collection. It is the default syslog daemon on most major Linux distributions and is designed to receive syslog messages from remote servers over the network, making it ideal for a centralized logging solution.

Answer

journald

Answer

syslogd

Answer

syslog-ng