LPIC-2 Practice Test 12 — 15 Questions

Question 1

Which user can execute any command as any user without any password restriction?

Accepted Answer

root. The root user (UID 0) has unrestricted superuser privileges by default on Linux systems. Unlike regular users, root can execute any command as any user without needing to provide a password, as there is no sudo or su password requirement for the root account itself. This is a fundamental security property of the Unix/Linux permission model.

Answer

alice

Answer

charlie

Answer

bob

Question 2

Which TWO commands can be used to list currently loaded iptables rules in the filter table? (Choose two.)

Accepted Answer

iptables -nL. Option B, `iptables -nL`, is correct because `-L` lists all rules in the default filter table and `-n` disables DNS resolution, showing numeric addresses and ports; since the filter table is the default when no `-t` is specified, this lists the currently loaded filter rules. Option C, `iptables -L -t filter`, is correct because `-L` lists the rules and `-t filter` explicitly selects the filter table, which is exactly the table requested. Option A, `iptables -L -t nat`, is wrong because it targets the nat table rather than the filter table. Option D, `iptables -Z`, is wrong because it zeroes packet and byte counters instead of listing rules. Option E, `iptables -F`, is wrong because it flushes (deletes) all rules in a table rather than listing them.

Answer

iptables -L -t nat

Answer

iptables -Z

Answer

iptables -F

Question 3

An administrator has configured Samba as a domain member for an Active Directory environment. For user authentication via winbind, which daemon must be running?

Accepted Answer

winbindd. In a Samba domain member configuration for Active Directory, the winbindd daemon is responsible for resolving user and group information from the Windows domain and providing authentication services via the Winbind protocol. It communicates with the Active Directory domain controller using DCE/RPC and LDAP to map Windows SIDs to Unix UIDs/GIDs, enabling seamless user authentication. Without winbindd running, winbind-based authentication (e.g., via PAM or nsswitch) will fail, even if smbd and nmbd are active.

Answer

smbd

Answer

samba

Answer

nmbd

Question 4

An administrator wants to automatically mount home directories from an NFS server when a user logs in. Which service should be configured?

Accepted Answer

autofs. Autofs is the correct service because it provides on-demand mounting of NFS home directories triggered by user login. It uses the automount daemon to mount directories only when accessed, reducing network overhead and avoiding permanent mount entries in /etc/fstab. This is the standard Linux solution for dynamic NFS home directory mounting.

Answer

rpcbind

Answer

smb

Answer

nfs

Question 5

Match each network service to its purpose.

Accepted Answer

DNS: Translates domain names to IP addresses. DNS translates domain names to IP addresses; DHCP assigns IP configurations; HTTP serves web pages; NFS shares files. Common confusions involve swapping these roles.

Answer

DNS: Provides network file sharing

Answer

HTTP: Translates domain names to IP addresses

Question 6

A system fails to boot with a kernel panic: 'Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)'. The administrator suspects the root filesystem is not being detected. Which kernel parameter should be checked first?

Accepted Answer

root=/dev/sda1. The kernel panic 'VFS: Unable to mount root fs on unknown-block(0,0)' indicates the kernel cannot locate the root filesystem. The 'root=' kernel parameter specifies the device for the root filesystem (e.g., root=/dev/sda1). Checking this parameter first is critical because if it is missing, incorrect, or the device name is wrong, the kernel will fail to mount the root filesystem and panic.

Answer

init=/sbin/init

Answer

ro

Answer

panic=10

Question 7

Arrange the steps to configure a Linux system as an Apache virtual host.

Accepted Answer

1. Create document root, 2. Create site configuration, 3. Enable the site, 4. Reload Apache, 5. Test. The correct order to configure an Apache virtual host is: first, create the document root directory with appropriate permissions; second, create a site configuration file in /etc/apache2/sites-available/; third, enable the site using a2ensite; fourth, reload Apache with systemctl reload apache2; fifth, test by accessing the site. Option A follows this sequence. Option B is incorrect because the site configuration must be created before enabling. Option C is incorrect because enabling occurs after configuration creation. Option D is incorrect because reloading must happen after enabling.

Answer

1. Create site configuration, 2. Create document root, 3. Enable the site, 4. Reload Apache, 5. Test

Answer

1. Create document root, 2. Enable the site, 3. Create site configuration, 4. Reload Apache, 5. Test

Answer

1. Create document root, 2. Create site configuration, 3. Reload Apache, 4. Enable the site, 5. Test

Question 8

A firewall rule set is implemented using iptables. The administrator wants to allow incoming SSH connections only from the 192.168.1.0/24 subnet, while all other incoming traffic is dropped. Which set of rules achieves this?

Accepted Answer

iptables -A INPUT -p tcp --dport 22 -s 192.168.1.0/24 -j ACCEPT
iptables -A INPUT -j DROP. It first adds a rule to accept TCP traffic on port 22 (SSH) from the 192.168.1.0/24 subnet, then adds a default DROP rule for all other incoming traffic. Since iptables processes rules in order, the ACCEPT rule matches allowed SSH connections first, and the subsequent DROP rule catches all other incoming packets, effectively dropping everything else including SSH from other sources.

Answer

iptables -A INPUT -p tcp --sport 22 -s 192.168.1.0/24 -j ACCEPT
iptables -A INPUT -j DROP

Answer

iptables -A INPUT -p tcp --dport 22 -j DROP
iptables -A INPUT -s 192.168.1.0/24 -p tcp --dport 22 -j ACCEPT

Answer

iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -s 192.168.1.0/24 -j DROP

Answer

iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -j DROP

Question 9

An organization is migrating from SysV init to systemd. What systemd command should be used to check the status of the HTTP service?

Accepted Answer

systemctl status httpd. The correct command to check the status of a service in systemd is `systemctl status httpd`. This command displays the current state, recent log entries, and process details for the specified unit. The `systemctl` utility is the primary interface for managing systemd services, while `systemd` itself is the init system daemon, not a user-facing command.

Answer

systemd-analyze httpd

Answer

systemctl list-units httpd

Answer

systemd status httpd

Question 10

An administrator sets up a Samba server with 'security = user'. Users are stored in the local smbpasswd file. After changing a user's Unix password, the user cannot access Samba shares. What should the administrator do?

Accepted Answer

Run 'smbpasswd username' to set the SMB password.. When Samba is configured with 'security = user', each user must have a separate SMB password stored in the smbpasswd file (or the tdbsam backend). Changing the Unix password does not automatically update the SMB password. Running 'smbpasswd username' sets the SMB password for that user, allowing them to authenticate to Samba shares.

Answer

Add the user to the 'valid users' list.

Answer

Restart the smbd service.

Answer

Run 'pdbedit -u username' to modify the password.

Question 11

A laptop user frequently moves between different networks. The administrator wants the DNS configuration to update automatically when the laptop connects to a new network via DHCP. Which service or tool is most appropriate for this task?

Accepted Answer

NetworkManager. NetworkManager is the most appropriate tool because it is designed to manage network connections on modern Linux systems, automatically detecting network changes and reconfiguring DNS settings based on DHCP-provided information. It integrates with various backends (e.g., systemd-resolved, resolvconf) to update the system's DNS configuration dynamically, making it ideal for a laptop that frequently moves between networks.

Answer

systemd-resolved

Answer

dhcpcd

Answer

resolvconf

Question 12

During boot, the kernel panics with 'VFS: Unable to mount root fs on unknown-block(0,0)'. Which of the following is the most likely cause?

Accepted Answer

The kernel lacks the driver for the storage controller.. The error 'VFS: Unable to mount root fs on unknown-block(0,0)' indicates the kernel cannot find a driver for the block device containing the root filesystem. This most commonly occurs when the kernel lacks the necessary storage controller driver (e.g., for SATA, NVMe, or SCSI controllers), often because the driver was built as a module and not included in the initramfs or compiled into the kernel.

Answer

The kernel image is corrupted.

Answer

The init process is missing.

Answer

The root filesystem is formatted with an unsupported filesystem.

Question 13

A system administrator needs to configure an NFS client to automatically mount an exported filesystem from a remote server whenever a user accesses the mount point. Which configuration approach is most appropriate?

Accepted Answer

Configure automount using autofs with an indirect map.. Autofs with an indirect map allows the NFS filesystem to be mounted on-demand when a user accesses the mount point, and automatically unmounted after a period of inactivity. This is the standard Linux approach for dynamic, on-demand NFS mounting without requiring a persistent entry in /etc/fstab or manual intervention.

Answer

Add an entry to /etc/fstab with the 'defaults' option.

Answer

Use the 'mount -t nfs' command each time a user needs access.

Answer

Place a mount command in /etc/rc.local.

Question 14

A user alice is connected to the 'data' share via smbd, but a file is locked. Which command can forcibly close the file?

Accepted Answer

smbcontrol smbd close-share data. `smbcontrol smbd close-share data` sends a message to the smbd process to forcibly close all open files on the 'data' share, releasing any locks held by users like alice. This command directly targets the Samba daemon's internal state without disrupting the entire service or other shares.

Answer

smbpasswd -L -e alice

Answer

systemctl restart nmbd

Answer

kill -9 $(pgrep smbd)

Question 15

Order the steps to configure a Linux system to send system logs to a remote syslog server.

Accepted Answer

Edit the syslog configuration file (e.g., /etc/rsyslog.conf), add the destination line for the remote server, restart the syslog service, generate a test log message, then verify it appears on the remote server.. The correct sequence for configuring remote syslog logging is to first edit the configuration file (e.g., /etc/rsyslog.conf) and add the remote server destination, then restart the syslog service to apply changes, next generate a test log message (e.g., using logger), and finally verify that the message appears on the remote server. This order ensures that the configuration is properly applied before testing and verification.

Answer

Add the destination line for the remote server, restart the syslog service, edit the syslog configuration file, generate a test log message, then verify on the remote server.

Answer

Generate a test log message, edit the syslog configuration file, add the destination line, restart the syslog service, then verify on the remote server.

Answer

Edit the syslog configuration file, restart the syslog service, add the destination line, generate a test log message, then verify on the remote server.