LPIC-1 Essential System Services and Networking Practice Test 4 — 15 Questions

Question 1

Refer to the exhibit. A system administrator finds this line in /etc/rsyslog.conf. What is the effect of this configuration?

Accepted Answer

All syslog messages are forwarded via UDP to the server at 192.168.1.100 on port 514.. The line `*.* @192.168.1.100:514` in rsyslog.conf uses the `@` symbol to indicate UDP forwarding. The `*.*` selector means all facilities and all priorities, so every syslog message is forwarded via UDP to the server at 192.168.1.100 on port 514. This is a standard rsyslog syntax for remote logging.

Answer

Only messages with facility *.info are forwarded.

Answer

All syslog messages are forwarded via TCP to the server.

Answer

Only authentication-related messages are forwarded.

Question 2

Refer to the exhibit. A system administrator runs 'ip route show default' and gets this output. What does it indicate?

Accepted Answer

The default route points to gateway 192.168.1.1 on interface eth0.. The command 'ip route show default' displays the default route entry in the kernel routing table. The output shows that the default route (destination 0.0.0.0/0) is via gateway 192.168.1.1 and uses interface eth0, meaning all traffic not matching a more specific route is sent to that gateway on that interface.

Answer

The DNS server is 192.168.1.1.

Answer

The system has no internet access.

Answer

The IP address of the system is 192.168.1.1.

Question 3

A system administrator notices that the system clock is consistently 5 minutes ahead of the actual time. The NTP service is enabled and running. Which command should the administrator run to force an immediate time synchronization?

Accepted Answer

ntpdate pool.ntp.org. `ntpdate` is a legacy command that forces an immediate, one-time synchronization of the system clock with an NTP server (e.g., pool.ntp.org). Even though NTP is running, it may take several polling intervals (typically 64–1024 seconds) to correct a large offset; `ntpdate` bypasses this gradual adjustment and sets the clock instantly.

Answer

ntpq -p

Answer

systemctl restart ntpd

Answer

timedatectl set-time ...

Question 4

A company runs a web server using Apache with multiple virtual hosts. The administrator needs to restrict access to a specific virtual host based on the client IP address. Which configuration directive should be placed inside the <VirtualHost> block to deny IP 192.168.1.100?

Accepted Answer

Require not ip 192.168.1.100. In Apache 2.4 and later, access control is managed using the `Require` directive with the `not` modifier to deny specific IP addresses. Placing `Require not ip 192.168.1.100` inside the `<VirtualHost>` block will deny access to that IP while allowing all others, as the default behavior is to require all IPs unless a `Require` directive explicitly grants access.

Answer

Require host 192.168.1.100

Answer

Deny from 192.168.1.100

Answer

Require valid-user

Question 5

An administrator is configuring a DHCP server to assign IP addresses to clients in the 192.168.10.0/24 subnet. The server should provide the default gateway as 192.168.10.1 and DNS server as 8.8.8.8. Which option in /etc/dhcp/dhcpd.conf defines the default gateway?

Accepted Answer

option routers 192.168.10.1;. The `option routers` directive in the ISC DHCP server configuration file `/etc/dhcp/dhcpd.conf` explicitly defines the default gateway (router) that clients should use. This directive sends the Router Option (option 3) in the DHCPOFFER and DHCPACK messages, instructing clients to set their default route to the specified IP address.

Answer

option subnet-mask 255.255.255.0;

Answer

option broadcast-address 192.168.10.255;

Answer

option domain-name-servers 8.8.8.8;

Question 6

A mail server using Postfix is rejecting emails from a partner domain. The administrator checks the maillog and sees 'relay access denied'. Which Postfix configuration parameter is most likely misconfigured?

Accepted Answer

mynetworks. (mynetworks) is correct because it defines which client IP addresses are allowed to relay mail through the server. The 'relay access denied' error indicates that the partner domain's mail server is not in the trusted network list. Option A (mydestination) specifies local destination domains, not relay permissions. Option B (inet_interfaces) controls listening interfaces. Option C (relayhost) sets the next-hop relay for outbound mail. Therefore, mynetworks is the likely misconfiguration.

Answer

mydestination

Answer

inet_interfaces

Answer

relayhost

Question 7

A system administrator wants to monitor network traffic on a specific port (TCP/443) entering the server. Which command will capture packets on interface eth0 and display them in real-time?

Accepted Answer

tcpdump -i eth0 port 443. C is correct because `tcpdump -i eth0 port 443` captures packets on interface eth0 filtering for TCP port 443 (HTTPS) and displays them in real-time as they arrive. This command uses the libpcap library to intercept raw network frames, making it the standard tool for live packet capture and analysis.

Answer

netstat -tulpn | grep :443

Answer

ss -tulpn | grep :443

Answer

iptables -L -n -v

Question 8

An organization's DNS server (BIND) is authoritatively serving the example.com zone. The administrator needs to add a mail exchange record for mail.example.com with priority 10. Which resource record should be added to the zone file?

Accepted Answer

example.com. IN MX 10 mail.example.com.. An MX record specifies the mail exchange server for a domain, and the syntax 'example.com. IN MX 10 mail.example.com.' defines a priority of 10 for the mail server mail.example.com. This record tells other mail servers to deliver email for @example.com to mail.example.com, with lower priority values preferred.

Answer

mail.example.com. IN A 192.168.1.10

Answer

mail.example.com. IN CNAME example.com.

Answer

example.com. IN TXT "v=spf1 mx -all"

Question 9

A security administrator needs to allow SSH access from the 10.0.0.0/8 network but deny all other traffic to port 22. The firewall uses iptables with default policy ACCEPT on the INPUT chain. Which set of rules should be added?

Accepted Answer

iptables -A INPUT -s 10.0.0.0/8 -p tcp --dport 22 -j ACCEPT; iptables -A INPUT -p tcp --dport 22 -j DROP. Iptables processes rules in order, and the first match determines the action. By placing the ACCEPT rule for the 10.0.0.0/8 source first, traffic from that network is allowed. The subsequent DROP rule for all other traffic to port 22 ensures that any packet not matching the first rule is denied, effectively implementing the required allow-from-specific-source, deny-all-others policy.

Answer

iptables -A INPUT -p tcp --dport 22 -j DROP; iptables -A INPUT -s 10.0.0.0/8 -p tcp --dport 22 -j ACCEPT

Answer

iptables -A INPUT -s 10.0.0.0/8 -p tcp --dport 22 -j DROP; iptables -A INPUT -p tcp --dport 22 -j ACCEPT

Answer

iptables -A INPUT -s 10.0.0.0/8 -p tcp --dport 22 -j ACCEPT

Question 10

A technician is troubleshooting network connectivity. The server's IP is 192.168.1.10/24, and the gateway is 192.168.1.1. The server can ping the gateway but cannot ping 8.8.8.8. Which command is most appropriate to check if the default route is configured?

Accepted Answer

route -n. The `route -n` command displays the kernel IP routing table without resolving hostnames, showing the default route (destination 0.0.0.0) and its gateway. Since the server can ping the gateway but not 8.8.8.8, the issue is likely a missing or incorrect default route, which `route -n` directly reveals.

Answer

ifconfig eth0

Answer

ping 192.168.1.1

Answer

arp -n

Question 11

A developer asks the system administrator to configure a local web server for testing using Apache. The server should serve files from /var/www/test. Which directive must be set in the Apache configuration to set this document root?

Accepted Answer

DocumentRoot /var/www/test. The DocumentRoot directive in Apache defines the top-level directory from which it serves files for a given virtual host or the main server. Setting DocumentRoot /var/www/test tells Apache to map incoming HTTP requests to files under that directory, making it the correct choice for serving files from /var/www/test.

Answer

Alias /test /var/www/test

Answer

ServerRoot /var/www/test

Answer

DirectoryIndex /var/www/test

Question 12

Which TWO commands can be used to display the current firewall rules in a system using nftables? (Choose two.)

Accepted Answer

nft list ruleset. `nft list ruleset` is the primary command in nftables to display the entire ruleset, including all tables, chains, and rules, regardless of the address family. Option D is also correct because `nft list table inet filter` specifically displays the rules within the 'filter' table of the 'inet' family, which is a valid way to show a subset of the firewall rules. Both commands rely on the nftables framework, which is the modern replacement for iptables on Linux.

Answer

systemctl status nftables

Answer

iptables -L -n

Answer

firewall-cmd --list-all

Question 13

Which THREE steps are required to configure a network interface with a static IP address using the ip command (assuming interface eth0)? (Choose three.)

Accepted Answer

ip route add default via 192.168.1.1. The `ip route add default via 192.168.1.1` command sets the default gateway for the system, which is essential for routing traffic to networks beyond the local subnet. Without a default route, the static IP configuration would only allow communication within the local network (192.168.1.0/24), making this step mandatory for full network connectivity.

Answer

ifconfig eth0 192.168.1.10 netmask 255.255.255.0

Answer

echo 'nameserver 8.8.8.8' > /etc/resolv.conf

Question 14

Which TWO tools can be used to query DNS records? (Choose two.)

Accepted Answer

nslookup. A is correct because nslookup is a classic DNS query tool that sends DNS queries to name servers to resolve domain names to IP addresses or vice versa. It directly queries DNS records (A, AAAA, MX, CNAME, etc.) using the DNS protocol (UDP/TCP port 53).

Answer

ss

Answer

ping

Answer

traceroute

Question 15

Refer to the exhibit. The administrator is unable to SSH into the server (TCP port 22) from a remote host. The iptables rules are as shown. What is the most likely cause?

Accepted Answer

The second rule drops all incoming traffic, including SSH.. The second rule in the iptables ruleset explicitly drops all incoming traffic with `iptables -A INPUT -j DROP`. Since SSH traffic on TCP port 22 is incoming from a remote host, it matches this rule before any later rule could accept it. The default policy being ACCEPT does not override explicit DROP rules; iptables processes rules sequentially, and the DROP rule terminates the packet's traversal, preventing SSH access.

Answer

The default policy is ACCEPT, so SSH should be accepted.

Answer

The SSH service is not running.

Answer

The first rule only allows loopback, not SSH.