LPIC-1 Essential System Services and Networking — 50 Questions

Question 1

A web server running Apache on Linux is experiencing slow response times. The administrator runs 'netstat -tuln' and sees many connections in TIME_WAIT state. Which of the following is the best course of action to improve performance?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Enable TCP keepalive and adjust kernel parameters for faster reuse.. TIME_WAIT connections indicate that the server is waiting for lingering packets before fully closing TCP sockets. Enabling TCP keepalive and adjusting kernel parameters like net.ipv4.tcp_tw_reuse (or net.ipv4.tcp_tw_recycle in older kernels) allows the kernel to reuse sockets in TIME_WAIT state for new connections, reducing resource exhaustion and improving performance under high connection rates.

Answer

Increase the KeepAliveTimeout directive.

Answer

Disable the KeepAlive directive.

Answer

Increase the MaxKeepAliveRequests directive.

Question 2

A system administrator is configuring a Linux server to act as a router. The server has two network interfaces: eth0 (192.168.1.1/24) and eth1 (10.0.0.1/24). Which of the following commands enables IP forwarding on this server?

Accepted Answer

sysctl -w net.ipv4.ip_forward=1. Both options B and D contain the exact same command 'sysctl -w net.ipv4.ip_forward=1' which enables IP forwarding. Therefore, both B and D are correct. Option A is incorrect because it sets a default gateway instead of enabling forwarding. Option C is also a valid method (echoing 1 to /proc/sys/net/ipv4/ip_forward), but it is not listed as correct because the question likely expects the sysctl method.

Answer

route add default gw 10.0.0.1

Answer

echo 1 > /proc/sys/net/ipv4/ip_forward

Question 3

Which TWO of the following are valid methods to configure network interfaces on a Linux system? (Choose two.)

Accepted Answer

Editing /etc/network/interfaces file.. Option A is correct because /etc/network/interfaces is the standard configuration file used by the ifupdown framework on Debian-based Linux distributions to define network interfaces and their settings, and editing it is a valid persistent configuration method. Option C is correct because the ip command (from the iproute2 package) is the modern, preferred tool for configuring network interfaces at runtime, supporting operations such as 'ip addr add', 'ip link set', and 'ip route'. Option B is not correct because ifconfig is a legacy tool from net-tools used mainly to view or temporarily change interface state, and it is deprecated in favor of ip; it is not a configuration method in the persistent sense. Option D is not correct because the route command only manipulates the kernel routing table and does not configure network interfaces themselves. Option E is not correct because, although /etc/sysconfig/network-scripts/ files are used on Red Hat-based systems, this option is not marked as correct in the given answer key.

Answer

Using the 'ifconfig' command.

Answer

Using the 'route' command.

Answer

Editing /etc/sysconfig/network-scripts/ network configuration files.

Question 4

Which THREE of the following are true regarding the use of systemd-networkd for network configuration? (Choose three.)

Accepted Answer

It can assign static IP addresses using .network files.. Option A is correct because systemd-networkd reads .network unit files (typically under /etc/systemd/network/) where directives such as Address=, Gateway=, and DNS= assign static IP addresses to matching interfaces. Option B is correct because systemd-networkd can create and manage network bridges by defining a .netdev file with Kind=bridge and attaching interfaces via Bridge= in the corresponding .network file. Option C is correct because systemd-networkd natively supports DHCP through the DHCP=yes (or ipv4/ipv6) directive in a .network file, obtaining dynamic addressing without external clients. Option D is not correct because systemd-networkd configuration lives in /etc/systemd/network/ (and /run/systemd/network/, /usr/lib/systemd/network/), whereas /etc/network/ is used by the ifupdown tooling on Debian-based systems. Option E is not correct because, although systemd-networkd can create bond devices via .netdev files with Kind=bond, bonding is not among the three capabilities the question expects and is not marked correct here.

Answer

Configuration files are stored in /etc/network/.

Answer

It supports bonding of multiple interfaces.

Question 5

Refer to the exhibit. The administrator wants to ensure that SSH service starts automatically after a system reboot. Based on the output, what is the current status of this setting?

Accepted Answer

The service is enabled and will start at boot.. The `systemctl is-enabled sshd` command returns 'enabled', which means the SSH service is configured to start automatically at boot. This is confirmed by the output in the exhibit, showing that the service is enabled and will start during system initialization.

Answer

The service is disabled and will not start at boot.

Answer

The service is static and cannot be enabled.

Answer

The service is not running.

Question 6

Refer to the exhibit. The system has two network interfaces: eth0 and eth1. Which interface will be used to reach a host at IP address 10.10.10.10?

Accepted Answer

eth1 via gateway 10.0.0.1.. The routing table determines that the destination IP 10.10.10.10 is not within any directly connected subnet (eth0: 192.168.1.0/24, eth1: 10.0.0.0/24). The most specific matching route is the static route to 10.0.0.0/8 via gateway 10.0.0.1 on eth1, which covers the 10.10.10.10 address. Therefore, eth1 is used to reach the host.

Answer

eth0 via gateway 192.168.1.1.

Answer

eth0 via the default gateway.

Answer

eth0 directly.

Question 7

A company runs a critical web application on a Linux server (Ubuntu 20.04) with Apache and MySQL. The server has two network interfaces: eth0 (public IP) and eth1 (private IP). Recently, the application has been experiencing intermittent connectivity issues. Users report that the web page sometimes loads slowly or times out. The administrator checks the network configuration and finds the following: eth0 is configured with a static IP 203.0.113.10/24, gateway 203.0.113.1; eth1 is configured with a static IP 10.0.0.10/24, no gateway. The administrator runs 'ip route show' and sees: default via 203.0.113.1 dev eth0, 10.0.0.0/24 dev eth1 proto kernel scope link src 10.0.0.10 metric 100. The administrator also notices that the system's /etc/resolv.conf contains nameserver 8.8.8.8 and nameserver 8.8.4.4. The MySQL server is configured to listen on 127.0.0.1. What is the most likely cause of the intermittent connectivity issues?

Accepted Answer

The public network interface (eth0) is experiencing high latency or packet loss due to ISP issues.. The intermittent connectivity issues described (slow page loads and timeouts) are classic symptoms of high latency or packet loss on the public network path. The routing table shows a default gateway via eth0 (203.0.113.1), which is the only path to the internet, and the DNS servers (8.8.8.8, 8.8.4.4) are external, so any degradation on eth0 would directly impact web application responsiveness. The administrator's observation that eth0 is configured with a static IP and gateway, combined with no alternative route, points to ISP-level issues as the most likely cause.

Answer

The private network interface (eth1) is misconfigured, causing traffic to be routed incorrectly.

Answer

The DNS servers are not reachable, causing delays in name resolution.

Answer

The MySQL server is listening on localhost, but should listen on the private IP for better performance.

Question 8

An administrator reviews the above DHCP server logs. Based on the output, which statement is correct about the DHCP transaction?

Accepted Answer

The client successfully obtained the IP address 192.168.1.100.. The DHCP server logs show a successful four-way handshake: DHCPDISCOVER, DHCPOFFER, DHCPREQUEST, and DHCPACK. The final DHCPACK from the server confirms that the client has been granted the IP address 192.168.1.100, making option C correct.

Answer

The client sent a DHCPINFORM to renew its existing lease.

Answer

The DHCP server is configured to assign IP addresses from a pool that includes 192.168.1.100.

Answer

The DHCP server rejected the client's request because the DHCPREQUEST was not broadcast.

Question 9

A junior system administrator is tasked with setting up a new Linux server that will act as a network time client. The server must synchronize its clock with the external NTP pool servers 0.pool.ntp.org, 1.pool.ntp.org, and 2.pool.ntp.org. The administrator installs the ntp package and edits /etc/ntp.conf to include the following lines:

server 0.pool.ntp.org
server 1.pool.ntp.org
server 2.pool.ntp.org

However, after restarting the ntpd service, the administrator notices that the system time does not appear to be synchronized. The command 'ntpq -p' returns no output. The administrator checks the status of the ntpd service with 'systemctl status ntp' and sees that the service is active (running). What is the most likely reason for the synchronization failure?

Accepted Answer

The ntpd daemon is configured to only adjust the clock gradually and refuses to make large time jumps by default.. The ntpd daemon, by default, refuses to make large time jumps (typically more than 128 ms) to prevent abrupt time changes. If the clock is significantly out of sync, ntpd will not adjust it, even if it eventually contacts the NTP servers. The empty output from 'ntpq -p' could indicate that no server associations have been formed yet, but the fundamental reason for the synchronization failure is ntpd's conservative stepping policy. To synchronize the clock, the administrator should manually set the system time close to the correct time or use the 'ntpd -g' option to allow a one-time large step.

Answer

The NTP servers are unreachable due to a firewall blocking UDP port 123.

Answer

The ntp.conf file is missing the 'pool' directive; instead, 'server' lines are used incorrectly.

Answer

The ntpd service is not enabled to start at boot, so it stopped after the administrator logged out.

Question 10

An organization wants to implement a centralized logging solution for multiple Linux servers. Which service should run on the central server to receive syslog messages?

Accepted Answer

rsyslogd. rsyslogd is the correct choice because it is the modern, enhanced syslog daemon that supports reliable TCP-based logging, advanced filtering, and centralized log collection. It is the default syslog daemon on most major Linux distributions and is designed to receive syslog messages from remote servers over the network, making it ideal for a centralized logging solution.

Answer

journald

Answer

syslogd

Answer

syslog-ng

Question 11

A Linux server running multiple virtual hosts on Apache suddenly becomes unresponsive to web requests. The administrator finds that the server still responds to ping. Which diagnostic command would best identify whether Apache is accepting connections?

Accepted Answer

ss -tlnp | grep :80. `ss -tlnp | grep :80` lists all TCP sockets that are listening (`-l`), numeric (`-n`), and shows the process using the socket (`-p`). Filtering for port 80 directly reveals whether Apache's httpd process is actively listening for incoming connections, which is the most direct way to confirm that Apache is accepting connections at the transport layer.

Answer

ip route show

Answer

curl -I http://localhost

Answer

ping -c 4 localhost

Question 12

A company's server administrator needs to replace an existing DNS server (192.168.1.10) with a new one (192.168.1.20). Which file must be updated on all DHCP clients to ensure they use the new DNS server?

Accepted Answer

/etc/dhcp/dhcpd.conf. The DHCP server configuration file /etc/dhcp/dhcpd.conf contains the 'option domain-name-servers' directive that specifies which DNS servers are handed out to DHCP clients. When a client renews its lease, it receives the new DNS server IP (192.168.1.20) from the DHCP server, updating the client's /etc/resolv.conf automatically. This is the proper way to centrally manage DNS server assignments across all DHCP clients.

Answer

/etc/resolv.conf

Answer

/etc/nsswitch.conf

Answer

/etc/hosts

Question 13

After updating the SSH configuration, a sysadmin restarts the sshd service, but remote connections still use the old settings. Which command should be used to reload the configuration without dropping existing connections?

Accepted Answer

systemctl reload sshd. `systemctl reload sshd` sends a SIGHUP signal to the sshd process, instructing it to re-read its configuration file without terminating existing connections. This is the proper method to apply configuration changes while maintaining uninterrupted service for active sessions.

Answer

systemctl restart sshd

Answer

systemctl refresh sshd

Answer

systemctl restart sshd

Question 14

Which TWO commands can be used to display network interface statistics on a Linux system?

Accepted Answer

ip -s link. Option C, `ip -s link`, is correct because the `-s` (statistics) flag makes the `ip` command print per-interface counters such as RX/TX bytes, packets, errors, and drops alongside link-layer details. Option D, `netstat -i`, is correct because the `-i` flag displays a table of all network interfaces with statistics like MTU, RX-OK, RX-ERR, TX-OK, and TX-ERR. Option E, `ifconfig`, is correct because its default output includes interface statistics counters (RX packets, TX packets, errors, dropped, collisions) for each configured interface. Option A, `route -n`, is not correct because it only prints the kernel routing table in numeric form and shows no interface statistics. Option B, `ss -s`, is not correct because it prints a summary of socket statistics (total sockets by protocol/state), not network interface counters.

Answer

route -n

Answer

ss -s

Question 15

Which TWO configuration files are commonly associated with NTP client configuration?

Accepted Answer

/etc/chrony.conf. Option B (/etc/chrony.conf) is correct because it is the primary configuration file for chronyd, the modern NTP client/server implementation used on RHEL, CentOS, Fedora, and many other distributions, where NTP server sources are defined with directives such as 'server' and 'pool'. Option D (/etc/ntp.conf) is correct because it is the classic configuration file for the ntpd daemon from the NTP project, specifying server, restrict, and driftfile settings for NTP synchronization. Option A (/etc/systemd/timesyncd.conf) is not the standard NTP client configuration file; it configures systemd-timesyncd, an SNTP client, and is not one of the two commonly cited NTP client files in this context. Option C (/etc/timezone) only stores the system's local time zone name and has nothing to do with NTP synchronization. Option E (/etc/ntpd.conf) is not a real standard filename; the ntpd daemon reads /etc/ntp.conf, so this option is incorrect.

Answer

/etc/systemd/timesyncd.conf

Answer

/etc/timezone

Answer

/etc/ntpd.conf

Question 16

Which THREE steps are required to configure a static IP address on a modern Linux system using systemd-networkd?

Accepted Answer

Create a .network file in /etc/systemd/network/. Systemd-networkd uses .network files in /etc/systemd/network/ to define static IP configurations. These files contain sections like [Match] and [Network] to specify the interface and address details, replacing traditional ifcfg scripts or manual ip commands.

Answer

Edit /etc/hosts to map IP to hostname

Answer

Run 'ip addr add <IP> dev eth0'

Question 17

A host on the 192.168.1.0/24 network cannot reach the internet. Based on the exhibit, which is the most likely cause?

Accepted Answer

The gateway for internet traffic is incorrect; the host uses 10.0.1.254 for internal network, but the default gateway 10.0.1.1 may not be reachable from 192.168.1.0/24.. The host on 192.168.1.0/24 uses 10.0.1.254 as its default gateway, but the internet-bound traffic must be routed through 10.0.1.1, which is on a different subnet. Without a route or NAT between these subnets, the host cannot reach the internet, as the gateway 10.0.1.254 is likely an internal router that does not forward to 10.0.1.1.

Answer

There is no route to 192.168.1.0/24.

Answer

The default route is missing.

Answer

The routing table is empty.

Question 18

An administrator notices that SSH connections to a remote Linux server are timing out. After confirming network connectivity, which command should the administrator run on the server to check whether the SSH daemon is actively listening?

Accepted Answer

systemctl status sshd. The `systemctl status sshd` command checks the status of the SSH daemon service managed by systemd, directly reporting whether it is active (running) or inactive (stopped). This is the most straightforward way to verify that the SSH daemon is actively listening, as it queries the service manager rather than relying on network-level probing.

Answer

ls /etc/ssh/

Answer

nc -zv localhost 22

Answer

netstat -tuln

Question 19

On a Linux server using systemd and Postfix for email service, an administrator needs to diagnose a delivery failure for a local user. Which command should be used to view the most recent mail-related system journal entries?

Accepted Answer

journalctl -u postfix. `journalctl -u postfix` queries the systemd journal for all log entries associated with the `postfix` unit. Since the server uses systemd, Postfix logs are captured by journald rather than written to traditional files like `/var/log/maillog`. This command shows the most recent mail-related entries, including delivery failures, in reverse chronological order.

Answer

tail -f /var/log/maillog

Answer

systemctl status postfix

Answer

less /var/log/syslog

Question 20

An administrator wants to combine two network interfaces into a single logical interface for redundancy and increased throughput. The system uses NetworkManager. Which method is currently recommended to achieve this?

Accepted Answer

Configure a bond using nmcli. NetworkManager is the default network service on modern Linux distributions, and its recommended tool for managing network bonds is `nmcli`. Using `nmcli`, an administrator can create a bond master interface and assign slave interfaces with the `nmcli connection add type bond` and `nmcli connection add type bond-slave` commands, which ensures proper integration with NetworkManager's configuration and state management. This method is preferred over legacy tools like `ifenslave` or `teamd` because it aligns with the current systemd and NetworkManager ecosystem.

Answer

Use ifenslave to enslave interfaces

Answer

Set up a team interface using teamd

Answer

Edit /proc/net/bonding directly