LPIC-1 Essential System Services and Networking — 25 Questions

Question 1

A system administrator notices that the NTP service on a Linux server is not synchronizing time with external NTP servers. The administrator runs 'ntpq -p' and sees that all servers listed have a 'reach' value of 0. Which of the following is the most likely cause?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

A firewall is blocking UDP port 123.. The `reach` value of 0 in `ntpq -p` output indicates that the NTP client has received no responses from any of the configured servers. Since NTP uses UDP port 123 for communication, a firewall blocking this port would prevent the client from sending or receiving NTP packets, resulting in zero reachability. This is the most common cause when all servers show a reach of 0.

Answer

The system timezone is incorrectly set.

Answer

The NTP service is configured to use the local clock.

Answer

The NTP server is using a different NTP version.

Question 2

A web server running Apache on Linux is experiencing slow response times. The administrator runs 'netstat -tuln' and sees many connections in TIME_WAIT state. Which of the following is the best course of action to improve performance?

Accepted Answer

Enable TCP keepalive and adjust kernel parameters for faster reuse.. TIME_WAIT connections indicate that the server is waiting for lingering packets before fully closing TCP sockets. Enabling TCP keepalive and adjusting kernel parameters like net.ipv4.tcp_tw_reuse (or net.ipv4.tcp_tw_recycle in older kernels) allows the kernel to reuse sockets in TIME_WAIT state for new connections, reducing resource exhaustion and improving performance under high connection rates.

Answer

Increase the KeepAliveTimeout directive.

Answer

Disable the KeepAlive directive.

Answer

Increase the MaxKeepAliveRequests directive.

Question 3

Which of the following commands will display the default gateway of a Linux system?

Accepted Answer

ip route show. The `ip route show` command displays the kernel routing table, which includes the default gateway as a default route (typically `default via <gateway-IP>`). This is the standard modern tool for viewing routing information on Linux systems.

Answer

arp -a

Answer

netstat -i

Answer

ifconfig

Question 4

A database server on a Linux system is configured to listen on TCP port 3306. The administrator wants to restrict access to the database server to only the local network (192.168.1.0/24) using iptables. Which of the following iptables rules achieves this?

Accepted Answer

iptables -A INPUT -p tcp --dport 3306 -s 192.168.1.0/24 -j ACCEPT. It adds an INPUT chain rule that accepts TCP traffic destined for port 3306 only when the source address is within the 192.168.1.0/24 subnet. This effectively restricts incoming database connections to the local network, while all other sources are implicitly dropped by the default INPUT policy or subsequent rules.

Answer

iptables -A INPUT -p tcp --dport 3306 -d 192.168.1.0/24 -j DROP

Answer

iptables -A OUTPUT -p tcp --dport 3306 -d 192.168.1.0/24 -j ACCEPT

Answer

iptables -A OUTPUT -p tcp --sport 3306 -s 192.168.1.0/24 -j ACCEPT

Question 5

A user reports that they cannot connect to a remote server using SSH. The administrator checks the SSH server status and it is running. Which of the following is the most likely cause?

Accepted Answer

A firewall is blocking port 22.. SSH operates over TCP port 22 by default. If the SSH server is running but the client cannot connect, a firewall blocking port 22 is the most likely cause because it would prevent the TCP handshake from completing, even though the SSH daemon (sshd) is active and listening.

Answer

The client's subnet mask is incorrect.

Answer

The client cannot resolve the server's hostname.

Answer

The SSH server is using UDP instead of TCP.

Question 6

A system administrator is configuring a Linux server to act as a router. The server has two network interfaces: eth0 (192.168.1.1/24) and eth1 (10.0.0.1/24). Which of the following commands enables IP forwarding on this server?

Accepted Answer

sysctl -w net.ipv4.ip_forward=1. Both options B and D contain the exact same command 'sysctl -w net.ipv4.ip_forward=1' which enables IP forwarding. Therefore, both B and D are correct. Option A is incorrect because it sets a default gateway instead of enabling forwarding. Option C is also a valid method (echoing 1 to /proc/sys/net/ipv4/ip_forward), but it is not listed as correct because the question likely expects the sysctl method.

Answer

route add default gw 10.0.0.1

Answer

echo 1 > /proc/sys/net/ipv4/ip_forward

Question 7

An administrator is troubleshooting a DNS issue. The command 'dig @8.8.8.8 example.com' returns a response, but 'host example.com' returns 'Host not found'. Which of the following is the most likely cause?

Accepted Answer

The /etc/resolv.conf file is misconfigured.. The command 'dig @8.8.8.8 example.com' succeeds, proving that the DNS server at 8.8.8.8 is reachable and functional, and that network connectivity is fine. However, 'host example.com' fails because it uses the system's default resolver, which reads /etc/resolv.conf to determine which DNS server to query. If /etc/resolv.conf is misconfigured (e.g., missing or incorrect nameserver entries), the resolver cannot reach a valid DNS server, resulting in 'Host not found'.

Answer

The network interface is down.

Answer

The /etc/hosts file is corrupt.

Answer

The DNS server at 8.8.8.8 is not responding.

Question 8

Which TWO of the following are valid methods to configure network interfaces on a Linux system? (Choose two.)

Accepted Answer

Editing /etc/network/interfaces file.. The `/etc/network/interfaces` file is the primary configuration file for network interfaces on Debian-based Linux distributions (e.g., Ubuntu). It allows static or dynamic (DHCP) configuration of interfaces using directives like `iface`, `address`, and `netmask`, and is read by the `ifup` and `ifdown` commands at boot or on demand.

Answer

Using the 'ifconfig' command.

Answer

Using the 'route' command.

Answer

Editing /etc/sysconfig/network-scripts/ network configuration files.

Question 9

Which THREE of the following are true regarding the use of systemd-networkd for network configuration? (Choose three.)

Accepted Answer

It can assign static IP addresses using .network files.. Systemd-networkd uses .network files (e.g., /etc/systemd/network/10-static.network) to assign static IP addresses via the [Address] section. This allows precise control over IPv4/IPv6 addresses, subnet masks, and gateways without relying on DHCP.

Answer

Configuration files are stored in /etc/network/.

Answer

It supports bonding of multiple interfaces.

Question 10

Refer to the exhibit. The administrator wants to ensure that SSH service starts automatically after a system reboot. Based on the output, what is the current status of this setting?

Accepted Answer

The service is enabled and will start at boot.. The `systemctl is-enabled sshd` command returns 'enabled', which means the SSH service is configured to start automatically at boot. This is confirmed by the output in the exhibit, showing that the service is enabled and will start during system initialization.

Answer

The service is disabled and will not start at boot.

Answer

The service is static and cannot be enabled.

Answer

The service is not running.

Question 11

Refer to the exhibit. The system has two network interfaces: eth0 and eth1. Which interface will be used to reach a host at IP address 10.10.10.10?

Accepted Answer

eth1 via gateway 10.0.0.1.. The routing table determines that the destination IP 10.10.10.10 is not within any directly connected subnet (eth0: 192.168.1.0/24, eth1: 10.0.0.0/24). The most specific matching route is the static route to 10.0.0.0/8 via gateway 10.0.0.1 on eth1, which covers the 10.10.10.10 address. Therefore, eth1 is used to reach the host.

Answer

eth0 via gateway 192.168.1.1.

Answer

eth0 via the default gateway.

Answer

eth0 directly.

Question 12

A company runs a critical web application on a Linux server (Ubuntu 20.04) with Apache and MySQL. The server has two network interfaces: eth0 (public IP) and eth1 (private IP). Recently, the application has been experiencing intermittent connectivity issues. Users report that the web page sometimes loads slowly or times out. The administrator checks the network configuration and finds the following: eth0 is configured with a static IP 203.0.113.10/24, gateway 203.0.113.1; eth1 is configured with a static IP 10.0.0.10/24, no gateway. The administrator runs 'ip route show' and sees: default via 203.0.113.1 dev eth0, 10.0.0.0/24 dev eth1 proto kernel scope link src 10.0.0.10 metric 100. The administrator also notices that the system's /etc/resolv.conf contains nameserver 8.8.8.8 and nameserver 8.8.4.4. The MySQL server is configured to listen on 127.0.0.1. What is the most likely cause of the intermittent connectivity issues?

Accepted Answer

The public network interface (eth0) is experiencing high latency or packet loss due to ISP issues.. The intermittent connectivity issues described (slow page loads and timeouts) are classic symptoms of high latency or packet loss on the public network path. The routing table shows a default gateway via eth0 (203.0.113.1), which is the only path to the internet, and the DNS servers (8.8.8.8, 8.8.4.4) are external, so any degradation on eth0 would directly impact web application responsiveness. The administrator's observation that eth0 is configured with a static IP and gateway, combined with no alternative route, points to ISP-level issues as the most likely cause.

Answer

The private network interface (eth1) is misconfigured, causing traffic to be routed incorrectly.

Answer

The DNS servers are not reachable, causing delays in name resolution.

Answer

The MySQL server is listening on localhost, but should listen on the private IP for better performance.

Question 13

Which THREE of the following are valid files or directories used by the Domain Name System (DNS) resolution process on a Linux system?

Accepted Answer

/etc/host.conf. `/etc/host.conf` controls the order in which hostname resolution methods are tried (e.g., 'order hosts,bind'), directly influencing whether the system queries DNS or checks local files first. This file is part of the glibc resolver's configuration and is consulted during the DNS resolution process on Linux.

Answer

/etc/named.conf

Answer

/etc/sysconfig/network

Question 14

An administrator reviews the above DHCP server logs. Based on the output, which statement is correct about the DHCP transaction?

Accepted Answer

The client successfully obtained the IP address 192.168.1.100.. The DHCP server logs show a successful four-way handshake: DHCPDISCOVER, DHCPOFFER, DHCPREQUEST, and DHCPACK. The final DHCPACK from the server confirms that the client has been granted the IP address 192.168.1.100, making option C correct.

Answer

The client sent a DHCPINFORM to renew its existing lease.

Answer

The DHCP server is configured to assign IP addresses from a pool that includes 192.168.1.100.

Answer

The DHCP server rejected the client's request because the DHCPREQUEST was not broadcast.

Question 15

A junior system administrator is tasked with setting up a new Linux server that will act as a network time client. The server must synchronize its clock with the external NTP pool servers 0.pool.ntp.org, 1.pool.ntp.org, and 2.pool.ntp.org. The administrator installs the ntp package and edits /etc/ntp.conf to include the following lines:

server 0.pool.ntp.org
server 1.pool.ntp.org
server 2.pool.ntp.org

However, after restarting the ntpd service, the administrator notices that the system time does not appear to be synchronized. The command 'ntpq -p' returns no output. The administrator checks the status of the ntpd service with 'systemctl status ntp' and sees that the service is active (running). What is the most likely reason for the synchronization failure?

Accepted Answer

The ntpd daemon is configured to only adjust the clock gradually and refuses to make large time jumps by default.. The ntpd daemon, by default, refuses to make large time jumps (typically more than 128 ms) to prevent abrupt time changes. If the clock is significantly out of sync, ntpd will not adjust it, even if it eventually contacts the NTP servers. The empty output from 'ntpq -p' could indicate that no server associations have been formed yet, but the fundamental reason for the synchronization failure is ntpd's conservative stepping policy. To synchronize the clock, the administrator should manually set the system time close to the correct time or use the 'ntpd -g' option to allow a one-time large step.

Answer

The NTP servers are unreachable due to a firewall blocking UDP port 123.

Answer

The ntp.conf file is missing the 'pool' directive; instead, 'server' lines are used incorrectly.

Answer

The ntpd service is not enabled to start at boot, so it stopped after the administrator logged out.

Question 16

Order the steps to mount an NFS share from a remote server.

Accepted Answer

Install NFS client, then create mount point directory, then run mount command, then verify the mount. NFS mounting requires the client package, a local directory, and the mount command with server and export path.

Answer

Create mount point directory, then install NFS client, then run mount command, then verify the mount

Answer

Install NFS client, then run mount command, then create mount point directory, then verify the mount

Answer

Run mount command, then install NFS client, then create mount point directory, then verify the mount

Question 17

Match each Linux command to its primary function.

Accepted Answer

cp: Copy files or directories. The correct matches are: cp for copying files, grep for searching text, and chmod for changing permissions. Common confusions include mixing these commands due to similar syntax or overlapping contexts.

Answer

cp: Search text using patterns

Answer

grep: Change file permissions

Answer

chmod: List directory contents

Question 18

A user reports that they cannot access the company's web server. The administrator confirms the server is running and network connectivity is fine. Which command should be used to verify that the HTTP service is listening on the correct port?

Accepted Answer

ss -tlnp. `ss -tlnp`, is correct because it lists TCP listening sockets with their port numbers and associated processes. The `-t` flag filters for TCP, `-l` shows only listening sockets, `-n` displays numeric addresses and ports (avoiding DNS lookups), and `-p` reveals the process ID/name. This directly verifies whether the HTTP service (typically port 80 or 443) is actively listening on the expected interface.

Answer

ping 127.0.0.1

Answer

netstat -rn

Answer

iperf3 -c localhost

Question 19

An organization wants to implement a centralized logging solution for multiple Linux servers. Which service should run on the central server to receive syslog messages?

Accepted Answer

rsyslogd. rsyslogd is the correct choice because it is the modern, enhanced syslog daemon that supports reliable TCP-based logging, advanced filtering, and centralized log collection. It is the default syslog daemon on most major Linux distributions and is designed to receive syslog messages from remote servers over the network, making it ideal for a centralized logging solution.

Answer

journald

Answer

syslogd

Answer

syslog-ng

Question 20

A DHCP server assigns IP addresses to clients, but some clients are not receiving the correct gateway. Which configuration file should be checked on the DHCP server?

Accepted Answer

/etc/dhcp/dhcpd.conf. The DHCP server configuration file on Linux systems is typically located at /etc/dhcp/dhcpd.conf (or /etc/dhcpd.conf on some older distributions). This file contains the subnet declarations, option definitions (such as option routers for the default gateway), and other parameters that the DHCP server uses to assign IP addresses and configuration details to clients. If clients are not receiving the correct gateway, the 'option routers' directive within this file should be checked and corrected.

Answer

/etc/dhcpd.conf

Answer

/etc/dhcp/dhclient.conf

Answer

/etc/resolv.conf