LPIC-1 Essential System Services and Networking — 20 Questions

Question 1

A system administrator notices that the NTP service on a Linux server is not synchronizing time with external NTP servers. The administrator runs 'ntpq -p' and sees that all servers listed have a 'reach' value of 0. Which of the following is the most likely cause?

Accepted Answer

A firewall is blocking UDP port 123.. The `reach` value of 0 in `ntpq -p` output indicates that the NTP client has received no responses from any of the configured servers. Since NTP uses UDP port 123 for communication, a firewall blocking this port would prevent the client from sending or receiving NTP packets, resulting in zero reachability. This is the most common cause when all servers show a reach of 0.

Answer

The system timezone is incorrectly set.

Answer

The NTP service is configured to use the local clock.

Answer

The NTP server is using a different NTP version.

Question 2

A web server running Apache on Linux is experiencing slow response times. The administrator runs 'netstat -tuln' and sees many connections in TIME_WAIT state. Which of the following is the best course of action to improve performance?

Accepted Answer

Enable TCP keepalive and adjust kernel parameters for faster reuse.. Option C is correct because TIME_WAIT connections indicate that the server is waiting for lingering packets before fully closing TCP sockets. Enabling TCP keepalive and adjusting kernel parameters like net.ipv4.tcp_tw_reuse (or net.ipv4.tcp_tw_recycle in older kernels) allows the kernel to reuse sockets in TIME_WAIT state for new connections, reducing resource exhaustion and improving performance under high connection rates.

Answer

Increase the KeepAliveTimeout directive.

Answer

Disable the KeepAlive directive.

Answer

Increase the MaxKeepAliveRequests directive.

Question 3

Which of the following commands will display the default gateway of a Linux system?

Accepted Answer

ip route show. The `ip route show` command displays the kernel routing table, which includes the default gateway as a default route (typically `default via <gateway-IP>`). This is the standard modern tool for viewing routing information on Linux systems.

Answer

arp -a

Answer

netstat -i

Answer

ifconfig

Question 4

A database server on a Linux system is configured to listen on TCP port 3306. The administrator wants to restrict access to the database server to only the local network (192.168.1.0/24) using iptables. Which of the following iptables rules achieves this?

Accepted Answer

iptables -A INPUT -p tcp --dport 3306 -s 192.168.1.0/24 -j ACCEPT. Option C is correct because it adds an INPUT chain rule that accepts TCP traffic destined for port 3306 only when the source address is within the 192.168.1.0/24 subnet. This effectively restricts incoming database connections to the local network, while all other sources are implicitly dropped by the default INPUT policy or subsequent rules.

Answer

iptables -A INPUT -p tcp --dport 3306 -d 192.168.1.0/24 -j DROP

Answer

iptables -A OUTPUT -p tcp --dport 3306 -d 192.168.1.0/24 -j ACCEPT

Answer

iptables -A OUTPUT -p tcp --sport 3306 -s 192.168.1.0/24 -j ACCEPT

Question 5

A user reports that they cannot connect to a remote server using SSH. The administrator checks the SSH server status and it is running. Which of the following is the most likely cause?

Accepted Answer

A firewall is blocking port 22.. SSH operates over TCP port 22 by default. If the SSH server is running but the client cannot connect, a firewall blocking port 22 is the most likely cause because it would prevent the TCP handshake from completing, even though the SSH daemon (sshd) is active and listening.

Answer

The client's subnet mask is incorrect.

Answer

The client cannot resolve the server's hostname.

Answer

The SSH server is using UDP instead of TCP.

Question 6

A system administrator is configuring a Linux server to act as a router. The server has two network interfaces: eth0 (192.168.1.1/24) and eth1 (10.0.0.1/24). Which of the following commands enables IP forwarding on this server?

Accepted Answer

sysctl -w net.ipv4.ip_forward=1. Option D is correct because the `sysctl -w net.ipv4.ip_forward=1` command immediately enables IP forwarding at runtime by writing the value 1 to the kernel parameter `net.ipv4.ip_forward`. This is the standard and recommended method for enabling packet forwarding between interfaces on a Linux router, allowing traffic to be routed between the 192.168.1.0/24 and 10.0.0.0/24 networks.

Answer

route add default gw 10.0.0.1

Answer

sysctl -w net.ipv4.ip_forward=1

Answer

echo 1 > /proc/sys/net/ipv4/ip_forward

Question 7

An administrator is troubleshooting a DNS issue. The command 'dig @8.8.8.8 example.com' returns a response, but 'host example.com' returns 'Host not found'. Which of the following is the most likely cause?

Accepted Answer

The /etc/resolv.conf file is misconfigured.. The command 'dig @8.8.8.8 example.com' succeeds, proving that the DNS server at 8.8.8.8 is reachable and functional, and that network connectivity is fine. However, 'host example.com' fails because it uses the system's default resolver, which reads /etc/resolv.conf to determine which DNS server to query. If /etc/resolv.conf is misconfigured (e.g., missing or incorrect nameserver entries), the resolver cannot reach a valid DNS server, resulting in 'Host not found'.

Answer

The network interface is down.

Answer

The /etc/hosts file is corrupt.

Answer

The DNS server at 8.8.8.8 is not responding.

Question 8

Which TWO of the following are valid methods to configure network interfaces on a Linux system? (Choose two.)

Accepted Answer

Editing /etc/network/interfaces file.. Option A is correct because the `/etc/network/interfaces` file is the primary configuration file for network interfaces on Debian-based Linux distributions (e.g., Ubuntu). It allows static or dynamic (DHCP) configuration of interfaces using directives like `iface`, `address`, and `netmask`, and is read by the `ifup` and `ifdown` commands at boot or on demand.

Answer

Using the 'ifconfig' command.

Answer

Using the 'route' command.

Answer

Editing /etc/sysconfig/network-scripts/ network configuration files.

Question 9

Which THREE of the following are true regarding the use of systemd-networkd for network configuration? (Choose three.)

Accepted Answer

It can assign static IP addresses using .network files.. Option A is correct because systemd-networkd uses .network files (e.g., /etc/systemd/network/10-static.network) to assign static IP addresses via the [Address] section. This allows precise control over IPv4/IPv6 addresses, subnet masks, and gateways without relying on DHCP.

Answer

Configuration files are stored in /etc/network/.

Answer

It supports bonding of multiple interfaces.

Question 10

Refer to the exhibit. The administrator wants to ensure that SSH service starts automatically after a system reboot. Based on the output, what is the current status of this setting?

Accepted Answer

The service is enabled and will start at boot.. The `systemctl is-enabled sshd` command returns 'enabled', which means the SSH service is configured to start automatically at boot. This is confirmed by the output in the exhibit, showing that the service is enabled and will start during system initialization.

Answer

The service is disabled and will not start at boot.

Answer

The service is static and cannot be enabled.

Answer

The service is not running.

Question 11

Refer to the exhibit. The system has two network interfaces: eth0 and eth1. Which interface will be used to reach a host at IP address 10.10.10.10?

Accepted Answer

eth1 via gateway 10.0.0.1.. The routing table determines that the destination IP 10.10.10.10 is not within any directly connected subnet (eth0: 192.168.1.0/24, eth1: 10.0.0.0/24). The most specific matching route is the static route to 10.0.0.0/8 via gateway 10.0.0.1 on eth1, which covers the 10.10.10.10 address. Therefore, eth1 is used to reach the host.

Answer

eth0 via gateway 192.168.1.1.

Answer

eth0 via the default gateway.

Answer

eth0 directly.

Question 12

A company runs a critical web application on a Linux server (Ubuntu 20.04) with Apache and MySQL. The server has two network interfaces: eth0 (public IP) and eth1 (private IP). Recently, the application has been experiencing intermittent connectivity issues. Users report that the web page sometimes loads slowly or times out. The administrator checks the network configuration and finds the following: eth0 is configured with a static IP 203.0.113.10/24, gateway 203.0.113.1; eth1 is configured with a static IP 10.0.0.10/24, no gateway. The administrator runs 'ip route show' and sees: default via 203.0.113.1 dev eth0, 10.0.0.0/24 dev eth1 proto kernel scope link src 10.0.0.10 metric 100. The administrator also notices that the system's /etc/resolv.conf contains nameserver 8.8.8.8 and nameserver 8.8.4.4. The MySQL server is configured to listen on 127.0.0.1. What is the most likely cause of the intermittent connectivity issues?

Accepted Answer

The public network interface (eth0) is experiencing high latency or packet loss due to ISP issues.. Option C is correct because the intermittent connectivity issues described (slow page loads and timeouts) are classic symptoms of high latency or packet loss on the public network path. The routing table shows a default gateway via eth0 (203.0.113.1), which is the only path to the internet, and the DNS servers (8.8.8.8, 8.8.4.4) are external, so any degradation on eth0 would directly impact web application responsiveness. The administrator's observation that eth0 is configured with a static IP and gateway, combined with no alternative route, points to ISP-level issues as the most likely cause.

Answer

The private network interface (eth1) is misconfigured, causing traffic to be routed incorrectly.

Answer

The DNS servers are not reachable, causing delays in name resolution.

Answer

The MySQL server is listening on localhost, but should listen on the private IP for better performance.

Question 13

Which THREE of the following are valid files or directories used by the Domain Name System (DNS) resolution process on a Linux system?

Accepted Answer

/etc/host.conf. Option A is correct because `/etc/host.conf` controls the order in which hostname resolution methods are tried (e.g., 'order hosts,bind'), directly influencing whether the system queries DNS or checks local files first. This file is part of the glibc resolver's configuration and is consulted during the DNS resolution process on Linux.

Answer

/etc/named.conf

Answer

/etc/sysconfig/network

Question 14

An administrator reviews the above DHCP server logs. Based on the output, which statement is correct about the DHCP transaction?

Accepted Answer

The client successfully obtained the IP address 192.168.1.100.. The DHCP server logs show a successful four-way handshake: DHCPDISCOVER, DHCPOFFER, DHCPREQUEST, and DHCPACK. The final DHCPACK from the server confirms that the client has been granted the IP address 192.168.1.100, making option C correct.

Answer

The client sent a DHCPINFORM to renew its existing lease.

Answer

The DHCP server is configured to assign IP addresses from a pool that includes 192.168.1.100.

Answer

The DHCP server rejected the client's request because the DHCPREQUEST was not broadcast.

Question 15

A junior system administrator is tasked with setting up a new Linux server that will act as a network time client. The server must synchronize its clock with the external NTP pool servers 0.pool.ntp.org, 1.pool.ntp.org, and 2.pool.ntp.org. The administrator installs the ntp package and edits /etc/ntp.conf to include the following lines:

server 0.pool.ntp.org
server 1.pool.ntp.org
server 2.pool.ntp.org

However, after restarting the ntpd service, the administrator notices that the system time does not appear to be synchronized. The command 'ntpq -p' returns no output. The administrator checks the status of the ntpd service with 'systemctl status ntp' and sees that the service is active (running). What is the most likely reason for the synchronization failure?

Accepted Answer

The ntpd daemon is configured to only adjust the clock gradually and refuses to make large time jumps by default.. B is correct because the ntpd daemon, by default, will not make large time jumps (more than a certain threshold, typically 128 ms) and instead gradually slews the clock. If the system clock is significantly out of sync (e.g., by minutes or hours), ntpd will refuse to step the time and may appear to do nothing, resulting in no output from 'ntpq -p' until the daemon has had time to adjust or until the offset is corrected manually. The administrator likely started ntpd with a large clock offset, and the daemon is waiting for the clock to drift naturally or for a manual intervention.

Answer

The NTP servers are unreachable due to a firewall blocking UDP port 123.

Answer

The ntp.conf file is missing the 'pool' directive; instead, 'server' lines are used incorrectly.

Answer

The ntpd service is not enabled to start at boot, so it stopped after the administrator logged out.

Question 16

Order the steps to mount an NFS share from a remote server.

Question 17

Match each Linux command to its primary function.

Question 18

A user reports that they cannot access the company's web server. The administrator confirms the server is running and network connectivity is fine. Which command should be used to verify that the HTTP service is listening on the correct port?

Accepted Answer

ss -tlnp. Option B is correct because ss -tlnp shows listening TCP sockets with port numbers and process names. Option A is wrong because it shows routing table. Option C is wrong because it tests connectivity, not listening sockets. Option D is wrong because it shows network statistics, not listening ports.

Answer

ping 127.0.0.1

Answer

netstat -rn

Answer

iperf3 -c localhost

Question 19

An organization wants to implement a centralized logging solution for multiple Linux servers. Which service should run on the central server to receive syslog messages?

Accepted Answer

rsyslogd. Option B is correct because the rsyslog daemon (rsyslogd) is the standard syslog server on modern Linux distributions. Option A is wrong because syslog-ng is not the default on most distributions. Option C is wrong because journald is the systemd log collector but not typically used as network syslog receiver by default. Option D is wrong because syslogd is the legacy daemon, often replaced by rsyslog.

Answer

journald

Answer

syslogd

Answer

syslog-ng

Question 20

A DHCP server assigns IP addresses to clients, but some clients are not receiving the correct gateway. Which configuration file should be checked on the DHCP server?

Accepted Answer

/etc/dhcp/dhcpd.conf. Option A is correct because the DHCP daemon configuration file is typically /etc/dhcp/dhcpd.conf. Option B is wrong because that path is not standard. Option C is wrong because that file configures the DHCP client if using dhclient. Option D is wrong because it is the default gateway file for the system, not DHCP config.

Answer

/etc/dhcpd.conf

Answer

/etc/dhcp/dhclient.conf

Answer

/etc/resolv.conf