LPIC-2 Practice Test 1 — 10 Questions

Question 1

Which of the following is the primary configuration file for the udev device manager?

Accepted Answer

/etc/udev/udev.conf. The primary configuration file for the udev device manager is /etc/udev/udev.conf. This file sets global parameters such as the device timeout, logging priority, and the default permissions for device nodes. While custom rules are placed in /etc/udev/rules.d/, the main configuration file that controls udev's behavior is udev.conf.

Answer

/etc/udev/rules.d/

Answer

/lib/udev/rules.d/

Answer

/etc/udev/rules.d/

Question 2

A system's root filesystem on /dev/sda1 is offline. The administrator boots into rescue mode and needs to check the filesystem integrity. Which command should be used first?

Accepted Answer

e2fsck -p /dev/sda1. `e2fsck -p` runs an automatic, non-interactive filesystem check on the ext2/ext3/ext4 filesystem, which is the safest first step when the root filesystem is offline and the administrator is in rescue mode. The `-p` flag automatically repairs any problems that can be safely fixed without user intervention, minimizing risk of further damage. This command is specifically designed for ext-family filesystems and is the recommended initial integrity check before attempting any manual repairs.

Answer

dumpe2fs /dev/sda1

Answer

fsck.ext4 -f /dev/sda1

Answer

fsck -N /dev/sda1

Question 3

Which sysctl parameter controls the system's behavior when a kernel oops occurs (e.g., automatically reboot)?

Accepted Answer

kernel.panic_on_oops. The `kernel.panic_on_oops` sysctl parameter controls the system's behavior when a kernel oops occurs. Setting it to 1 causes the kernel to panic on an oops, and if `kernel.panic` is also set to a positive value (e.g., seconds before reboot), the system will automatically reboot after the panic. This is the correct parameter for triggering a reboot on an oops.

Answer

vm.panic_on_oom

Answer

kernel.unknown_nmi_panic

Answer

kernel.oops

Question 4

Which TWO of the following commands can be used to list currently loaded kernel modules? (Choose two.)

Accepted Answer

cat /proc/modules. `/proc/modules` is a virtual file maintained by the kernel that lists all currently loaded kernel modules, including their size, usage count, and dependent modules. Reading this file provides a real-time snapshot of the kernel's module state. Option E is correct because `lsmod` is a user-space utility that parses `/proc/modules` and formats the output in a human-readable table, making it the standard command for listing loaded modules.

Answer

modinfo -l

Answer

ls /lib/modules/$(uname -r)

Answer

depmod -e

Question 5

Refer to the exhibit. Which kernel version will be booted by default when using a standard GRUB2 configuration that uses the symlinks vmlinuz and initrd.img?

Accepted Answer

5.10.0-9-amd64. In a standard GRUB2 configuration, the symlinks `vmlinuz` and `initrd.img` point to the latest installed kernel version. When GRUB2 generates its boot menu using `update-grub` (or `grub-mkconfig`), it reads these symlinks to create the default boot entry. Therefore, the default booted kernel is the one pointed to by these symlinks, which in this case is 5.10.0-9-amd64.

Answer

Depends on GRUB_DEFAULT setting, but if not set, it will boot the highest versioned kernel

Answer

It will prompt to choose between the two kernels

Answer

5.10.0-8-amd64

Question 6

A company uses BIND9 as the authoritative name server for its public zone example.com. External users report that they cannot resolve the MX record for the domain, but internal users can. What is the most likely cause?

Accepted Answer

The allow-query ACL restricts queries to the internal network.. The allow-query ACL in BIND9 restricts which source IP addresses are permitted to send queries to the server. If it is set to allow only the internal network (e.g., 192.168.0.0/16), external users' queries are rejected, causing resolution failures for MX records and all other records. Internal users succeed because their IPs match the ACL, while external users receive a REFUSED response or no answer.

Answer

The zone file lacks an MX record.

Answer

The server is behind a firewall that blocks UDP port 53.

Answer

The recursion is set to no.

Question 7

Which TWO parameters in the [global] section are REQUIRED for a Samba server to act as a standalone server (not a member of a domain)?

Accepted Answer

workgroup. For a Samba standalone server, the `workgroup` parameter defines the NetBIOS workgroup name that the server will appear in, which is essential for browsing and identification on the local network. The `security = user` parameter is required because it sets the server to authenticate users locally against its own passdb backend, rather than relying on an external domain controller. Without these two, the server cannot function as a standalone unit.

Answer

server string

Answer

netbios name

Answer

passdb backend = tdbsam

Question 8

Which file is used to configure the LDAP client for system authentication on a modern Linux system using nss-pam-ldapd?

Accepted Answer

/etc/nslcd.conf. /etc/nslcd.conf is the configuration file for nslcd, the LDAP name service daemon used by nss-pam-ldapd to perform LDAP queries for system authentication and user/group lookups. This daemon communicates with the LDAP server and provides the results to NSS and PAM modules, making it the central configuration point for LDAP client authentication on modern Linux systems.

Answer

/etc/openldap/ldap.conf

Answer

/etc/nsswitch.conf

Answer

/etc/ldap.conf

Question 9

An administrator configures a Samba share with guest access. After testing, guests are prompted for a password. Which directive should be added to the [global] section to allow guest access without a password?

Accepted Answer

map to guest = Bad User. The 'map to guest = Bad User' directive in the [global] section tells Samba to automatically map any login attempt with an invalid username to the guest account, bypassing password authentication. This is the correct setting to allow guest access without a password prompt, as it treats unknown users as guests.

Answer

guest account = nobody

Answer

security = user

Answer

encrypt passwords = yes

Question 10

Which THREE of the following actions are recommended as initial security hardening steps after installing a new Linux server? (Choose three.)

Accepted Answer

Update all packages using the package manager.. Immediately updating all packages via the package manager (e.g., `apt upgrade` or `yum update`) applies the latest security patches to the kernel, libraries, and services, closing known vulnerabilities that could be exploited by attackers. This is a foundational step in the initial hardening process, as a newly installed system often ships with outdated packages that have published CVEs.

Answer

Install a graphical desktop environment for easier administration.

Answer

Set up a web server to monitor system status.