LPIC-1 Essential System Services and Networking Practice Test 5 — 15 Questions

Question 1

An administrator wants systemd-journald logs to persist across reboots. What must be created?

Accepted Answer

The directory /var/log/journal. By default, systemd-journald stores logs in a volatile tmpfs at /run/log/journal, which is cleared on reboot. To make logs persistent, the directory /var/log/journal must be created. When systemd-journald detects this directory exists, it automatically switches to persistent storage, writing logs to /var/log/journal and preserving them across reboots.

Answer

The directory /run/log/journal

Answer

The file /etc/journald.conf

Answer

The directory /var/spool/journal

Question 2

After running 'ip route show default', a system administrator sees no output. Users on that system can only communicate with hosts on the local subnet. What is the most likely cause?

Accepted Answer

The default gateway is missing. The `ip route show default` command displays the default gateway entry in the routing table. An empty output indicates that no default route is configured. Without a default gateway, the system cannot route packets to destinations outside its local subnet, which explains why users can only communicate with hosts on the local subnet.

Answer

DNS is misconfigured

Answer

A firewall is blocking all traffic

Answer

The network interface is down

Question 3

Which three files are essential for network configuration and name resolution on a typical Linux system? (Choose three.)

Accepted Answer

/etc/hosts. The `/etc/hosts` file provides static hostname-to-IP address mapping, allowing name resolution before DNS is queried. It is essential for local network configuration and fallback resolution, as defined by RFC 952 and the glibc Name Service Switch (NSS) framework.

Answer

/etc/network/interfaces

Answer

/etc/sysctl.conf

Question 4

An administrator needs to monitor real-time network bandwidth usage on a Linux server. Which two tools are specifically designed for this purpose? (Choose two.)

Accepted Answer

nload. B (nload) is correct because it is a command-line tool that displays real-time network traffic and bandwidth usage on a per-interface basis, showing incoming and outgoing data rates with a dynamic graph. E (iftop) is correct because it listens to network traffic on a specified interface and displays a real-time table of bandwidth usage per connection, similar to top for processes. Both tools are specifically designed for monitoring live bandwidth consumption, unlike general networking utilities.

Answer

netstat

Answer

traceroute

Answer

ping

Question 5

Refer to the exhibit. A system administrator finds this line in /etc/rsyslog.conf. What is the effect of this configuration?

Accepted Answer

All syslog messages are forwarded via UDP to the server at 192.168.1.100 on port 514.. The line `*.* @192.168.1.100:514` in rsyslog.conf uses the `@` symbol to indicate UDP forwarding. The `*.*` selector means all facilities and all priorities, so every syslog message is forwarded via UDP to the server at 192.168.1.100 on port 514. This is a standard rsyslog syntax for remote logging.

Answer

Only messages with facility *.info are forwarded.

Answer

All syslog messages are forwarded via TCP to the server.

Answer

Only authentication-related messages are forwarded.

Question 6

Refer to the exhibit. A system administrator runs 'ip route show default' and gets this output. What does it indicate?

Accepted Answer

The default route points to gateway 192.168.1.1 on interface eth0.. The command 'ip route show default' displays the default route entry in the kernel routing table. The output shows that the default route (destination 0.0.0.0/0) is via gateway 192.168.1.1 and uses interface eth0, meaning all traffic not matching a more specific route is sent to that gateway on that interface.

Answer

The DNS server is 192.168.1.1.

Answer

The system has no internet access.

Answer

The IP address of the system is 192.168.1.1.

Question 7

A company runs a web server using Apache with multiple virtual hosts. The administrator needs to restrict access to a specific virtual host based on the client IP address. Which configuration directive should be placed inside the <VirtualHost> block to deny IP 192.168.1.100?

Accepted Answer

Require not ip 192.168.1.100. In Apache 2.4 and later, access control is managed using the `Require` directive with the `not` modifier to deny specific IP addresses. Placing `Require not ip 192.168.1.100` inside the `<VirtualHost>` block will deny access to that IP while allowing all others, as the default behavior is to require all IPs unless a `Require` directive explicitly grants access.

Answer

Require host 192.168.1.100

Answer

Deny from 192.168.1.100

Answer

Require valid-user

Question 8

An administrator is configuring a DHCP server to assign IP addresses to clients in the 192.168.10.0/24 subnet. The server should provide the default gateway as 192.168.10.1 and DNS server as 8.8.8.8. Which option in /etc/dhcp/dhcpd.conf defines the default gateway?

Accepted Answer

option routers 192.168.10.1;. The `option routers` directive in the ISC DHCP server configuration file `/etc/dhcp/dhcpd.conf` explicitly defines the default gateway (router) that clients should use. This directive sends the Router Option (option 3) in the DHCPOFFER and DHCPACK messages, instructing clients to set their default route to the specified IP address.

Answer

option subnet-mask 255.255.255.0;

Answer

option broadcast-address 192.168.10.255;

Answer

option domain-name-servers 8.8.8.8;

Question 9

A system administrator wants to monitor network traffic on a specific port (TCP/443) entering the server. Which command will capture packets on interface eth0 and display them in real-time?

Accepted Answer

tcpdump -i eth0 port 443. C is correct because `tcpdump -i eth0 port 443` captures packets on interface eth0 filtering for TCP port 443 (HTTPS) and displays them in real-time as they arrive. This command uses the libpcap library to intercept raw network frames, making it the standard tool for live packet capture and analysis.

Answer

netstat -tulpn | grep :443

Answer

ss -tulpn | grep :443

Answer

iptables -L -n -v

Question 10

An organization's DNS server (BIND) is authoritatively serving the example.com zone. The administrator needs to add a mail exchange record for mail.example.com with priority 10. Which resource record should be added to the zone file?

Accepted Answer

example.com. IN MX 10 mail.example.com.. An MX record specifies the mail exchange server for a domain, and the syntax 'example.com. IN MX 10 mail.example.com.' defines a priority of 10 for the mail server mail.example.com. This record tells other mail servers to deliver email for @example.com to mail.example.com, with lower priority values preferred.

Answer

mail.example.com. IN A 192.168.1.10

Answer

mail.example.com. IN CNAME example.com.

Answer

example.com. IN TXT "v=spf1 mx -all"

Question 11

A technician is troubleshooting network connectivity. The server's IP is 192.168.1.10/24, and the gateway is 192.168.1.1. The server can ping the gateway but cannot ping 8.8.8.8. Which command is most appropriate to check if the default route is configured?

Accepted Answer

route -n. The `route -n` command displays the kernel IP routing table without resolving hostnames, showing the default route (destination 0.0.0.0) and its gateway. Since the server can ping the gateway but not 8.8.8.8, the issue is likely a missing or incorrect default route, which `route -n` directly reveals.

Answer

ifconfig eth0

Answer

ping 192.168.1.1

Answer

arp -n

Question 12

A developer asks the system administrator to configure a local web server for testing using Apache. The server should serve files from /var/www/test. Which directive must be set in the Apache configuration to set this document root?

Accepted Answer

DocumentRoot /var/www/test. The DocumentRoot directive in Apache defines the top-level directory from which it serves files for a given virtual host or the main server. Setting DocumentRoot /var/www/test tells Apache to map incoming HTTP requests to files under that directory, making it the correct choice for serving files from /var/www/test.

Answer

Alias /test /var/www/test

Answer

ServerRoot /var/www/test

Answer

DirectoryIndex /var/www/test

Question 13

Which TWO commands can be used to display the current firewall rules in a system using nftables? (Choose two.)

Accepted Answer

nft list ruleset. `nft list ruleset` is the primary command in nftables to display the entire ruleset, including all tables, chains, and rules, regardless of the address family. Option D is also correct because `nft list table inet filter` specifically displays the rules within the 'filter' table of the 'inet' family, which is a valid way to show a subset of the firewall rules. Both commands rely on the nftables framework, which is the modern replacement for iptables on Linux.

Answer

systemctl status nftables

Answer

iptables -L -n

Answer

firewall-cmd --list-all

Question 14

Which THREE steps are required to configure a network interface with a static IP address using the ip command (assuming interface eth0)? (Choose three.)

Accepted Answer

ip route add default via 192.168.1.1. The `ip route add default via 192.168.1.1` command sets the default gateway for the system, which is essential for routing traffic to networks beyond the local subnet. Without a default route, the static IP configuration would only allow communication within the local network (192.168.1.0/24), making this step mandatory for full network connectivity.

Answer

ifconfig eth0 192.168.1.10 netmask 255.255.255.0

Answer

echo 'nameserver 8.8.8.8' > /etc/resolv.conf

Question 15

Which TWO tools can be used to query DNS records? (Choose two.)

Accepted Answer

nslookup. A is correct because nslookup is a classic DNS query tool that sends DNS queries to name servers to resolve domain names to IP addresses or vice versa. It directly queries DNS records (A, AAAA, MX, CNAME, etc.) using the DNS protocol (UDP/TCP port 53).

Answer

ss

Answer

ping

Answer

traceroute