LPIC-2 Practice Test 10 — 10 Questions

Question 1

During kernel development, a developer modifies only a few source files in a module directory. Which make target should be used to rebuild only that module without compiling the entire kernel?

Accepted Answer

make M=./drivers/net. The `M=./drivers/net` argument tells the kernel build system to build only the module(s) in the specified directory as external modules, without recompiling the entire kernel tree. This is the standard way to rebuild a single kernel module after modifying its source files, leveraging the already configured kernel build environment.

Answer

make oldconfig && make

Answer

make modules

Answer

make modules_install

Question 2

A user reports that the command 'smbclient -L //fileserver' fails with a timeout. What is the most likely cause?

Accepted Answer

A firewall on the client or server is blocking TCP port 445.. The command 'smbclient -L //fileserver' uses SMB protocol to list shares. A timeout indicates the client cannot establish a TCP connection to the server on port 445, which is the default SMB port. A firewall blocking TCP 445 would prevent the connection, causing a timeout, while other issues like a stopped smbd service or unreachable server would typically produce different errors (e.g., 'connection refused' or 'no route to host').

Answer

The smbd service on the server is not running.

Answer

The user does not have an account on the server.

Answer

The server is not reachable via ping.

Question 3

A system fails to boot due to a corrupted initramfs. Which TWO methods can be used to recover? (Choose two.)

Accepted Answer

Use the rescue mode of the installation media (e.g., RHEL rescue, Ubuntu recovery). Booting from installation media (e.g., RHEL rescue or Ubuntu recovery) provides a minimal environment that can mount the root filesystem, chroot into it, and then rebuild the initramfs using the system's own kernel and modules. This method does not require a working initramfs on the disk, as the rescue environment supplies its own kernel and initial RAM disk.

Answer

Edit GRUB command line to add 'init=/bin/bash' and then rebuild initramfs from that shell

Answer

Reinstall the kernel package from the GRUB command line using a network boot

Answer

Use kexec to boot a different kernel

Question 4

A system fails to boot with a kernel panic: 'Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)'. The administrator suspects the root filesystem is not being detected. Which kernel parameter should be checked first?

Accepted Answer

root=/dev/sda1. The kernel panic 'VFS: Unable to mount root fs on unknown-block(0,0)' indicates the kernel cannot locate the root filesystem. The 'root=' kernel parameter specifies the device for the root filesystem (e.g., root=/dev/sda1). Checking this parameter first is critical because if it is missing, incorrect, or the device name is wrong, the kernel will fail to mount the root filesystem and panic.

Answer

init=/sbin/init

Answer

ro

Answer

panic=10

Question 5

An organization is migrating from SysV init to systemd. What systemd command should be used to check the status of the HTTP service?

Accepted Answer

systemctl status httpd. The correct command to check the status of a service in systemd is `systemctl status httpd`. This command displays the current state, recent log entries, and process details for the specified unit. The `systemctl` utility is the primary interface for managing systemd services, while `systemd` itself is the init system daemon, not a user-facing command.

Answer

systemd-analyze httpd

Answer

systemctl list-units httpd

Answer

systemd status httpd

Question 6

Which TWO Samba security modes are considered insecure and should be avoided? (Choose two.)

Accepted Answer

share. Samba's 'share' security mode (deprecated in Samba 3.0) and 'server' security mode (removed in Samba 3.6) are both considered insecure. 'share' mode allowed anonymous access without per-user authentication, relying on share-level passwords that were transmitted in plaintext or weak hashes. 'server' mode delegated authentication to another Samba server (e.g., 'security = server' with 'password server = *'), which often fell back to plaintext or LANMAN hashes over an unencrypted connection, exposing credentials to interception.

Answer

domain

Answer

user

Answer

ads

Question 7

After installing a new kernel on a system using GRUB2, which command should be run to update the boot menu configuration file?

Accepted Answer

grub-mkconfig -o /boot/grub/grub.cfg. After installing a new kernel on a system using GRUB2, the boot menu configuration file must be regenerated to include the new kernel entry. The command `grub-mkconfig -o /boot/grub/grub.cfg` reads the configuration snippets in `/etc/default/grub` and scripts in `/etc/grub.d/`, then writes the updated GRUB2 configuration to the specified output file (`/boot/grub/grub.cfg`). This is the standard method on most Linux distributions that use GRUB2 (e.g., Debian, Ubuntu, RHEL 7+).

Answer

grub-install /dev/sda

Answer

update-grub

Answer

grub2-mkconfig -o /boot/grub2/grub.cfg

Question 8

A company has a server with two network interfaces: eth0 (public IP) and eth1 (private IP). The administrator wants to allow SSH from the public network only. Which iptables rule set achieves this?

Accepted Answer

iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT; iptables -A INPUT -i eth1 -p tcp --dport 22 -j DROP. It explicitly allows SSH (TCP port 22) traffic arriving on the public interface (eth0) and then drops SSH traffic on the private interface (eth1). This ensures SSH is only accessible from the public network while blocking it on the private network. The order of rules matters: the ACCEPT rule for eth0 must come before any default DROP policy or later rules that might affect it.

Answer

iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT

Answer

iptables -A INPUT -p tcp --dport 22 -j DROP; iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT

Answer

iptables -A INPUT -p tcp --dport 22 -j DROP

Question 9

A kernel module has been recompiled. Which command updates the module dependency information?

Accepted Answer

depmod. The `depmod` command is used to generate a list of module dependencies, stored in the modules.dep file, based on the symbols exported by each kernel module. After recompiling a module, this file becomes outdated, and running `depmod -a` (or simply `depmod`) rebuilds the dependency information so that tools like `modprobe` can correctly load modules and their prerequisites.

Answer

modprobe

Answer

insmod

Answer

modinfo

Question 10

A Linux server exports a directory /data via NFS to a client. The client mounts it with 'mount -t nfs server:/data /mnt/data'. Write operations from the client fail with 'Permission denied' on some files. The server's /etc/exports contains: /data 192.168.1.0/24(rw,root_squash). What is the most likely issue?

Accepted Answer

root_squash maps root to nobody. The 'root_squash' option in /etc/exports maps the UID 0 (root) on the client to the 'nobody' user (typically UID 65534) on the server. When a client user with UID 0 attempts to write to files owned by other users or with restrictive permissions, the server sees the request as coming from 'nobody', which lacks write access, resulting in 'Permission denied'. This is the most likely cause because the client mount command does not specify 'no_root_squash', and the server's export explicitly enables root squashing.

Answer

NFS version mismatch

Answer

Client mount option 'noexec'

Answer

Missing 'rw' option in /etc/exports