LPIC-2 Practice Test 16 — 15 Questions

Question 1

Arrange the steps to configure a Linux system as a DNS server using BIND.

Accepted Answer

Install BIND, define the zone in named.conf, create zone file, check configuration syntax, restart named service, test resolution. After installing BIND, define the zone, create zone file, check syntax, then restart and test.

Answer

Define zone, create zone file, check syntax, install BIND, restart and test

Answer

Install BIND, create zone file, define zone, check syntax, restart and test

Answer

Install BIND, define zone, check syntax, create zone file, restart and test

Question 2

A company has two BIND DNS servers, a primary and a secondary. The secondary fails to receive zone updates. Which command can be used to check if the primary allows zone transfers to the secondary?

Accepted Answer

dig axfr example.com @primary. The `dig axfr example.com @primary` command performs an AXFR (full zone transfer) request against the primary DNS server. If the primary allows zone transfers to the secondary, the command will return the entire zone file; if it is denied, it will return a 'Transfer failed' or 'refused' message. This directly tests the allow-transfer ACL configuration on the primary, which is the most common cause of secondary servers failing to receive zone updates.

Answer

host -l example.com primary

Answer

dig -x 192.0.2.1 @primary

Answer

nslookup -type=any example.com primary

Question 3

A company requires two-factor authentication for SSH logins. Which PAM module can be used to implement this if the system uses a time-based one-time password (TOTP)?

Accepted Answer

pam_google_authenticator.so. `pam_google_authenticator.so` is a PAM module specifically designed to implement time-based one-time password (TOTP) authentication as defined in RFC 6238. It integrates with SSH by requiring users to provide a six-digit code generated by the Google Authenticator app (or compatible TOTP client) in addition to their regular password, enabling two-factor authentication.

Answer

pam_radius.so

Answer

pam_ldap.so

Answer

pam_krb5.so

Question 4

Which two commands display information about LVM physical volumes? (Choose two.)

Accepted Answer

pvs. The `pvs` command (option A) provides a concise, configurable listing of all LVM physical volumes, showing key attributes like PV name, VG name, size, and free space. The `pvdisplay` command (option E) offers a detailed, verbose display of physical volume properties, including metadata areas, PE size, and allocation status. Both are standard LVM utilities for querying PV information.

Answer

pvcreate

Answer

pvck

Answer

pvscan

Question 5

A Linux router running FRR (Free Range Routing) needs to participate in OSPF with adjacent Cisco routers. Which configuration file should be modified to enable OSPF?

Accepted Answer

/etc/frr/frr.conf. FRR (Free Range Routing) stores its unified routing protocol configuration in /etc/frr/frr.conf. This file is the primary configuration file for all FRR daemons, including OSPF, and is read by the frr service at startup. Modifying this file and then reloading FRR enables OSPF on the Linux router to peer with adjacent Cisco routers.

Answer

/etc/quagga/ospfd.conf

Answer

/etc/network/interfaces

Answer

/etc/ospfd.conf

Question 6

A DHCP client reports it cannot obtain an IP address. The Ethernet cable is connected and the interface is up. The administrator runs 'dhclient eth0' but gets 'No DHCPOFFERS received'. The network has a DHCP server on the same subnet. Which command should the administrator use next to diagnose the problem?

Accepted Answer

Run 'tcpdump -i eth0 port 67 or port 68' to monitor DHCP packets.. The client is not receiving DHCPOFFERs, indicating a network-level issue with DHCP traffic. Using tcpdump to capture packets on ports 67 (BOOTP server) and 68 (BOOTP client) allows the administrator to see if DHCPDISCOVER packets are leaving the client and whether any DHCPOFFER packets arrive from the server. This directly isolates whether the problem is a lack of server response, packet filtering, or a misconfigured relay agent.

Answer

Run 'route -n' to see if a default route exists.

Answer

Run 'netstat -i eth0' to check packet errors.

Answer

Run 'ifconfig eth0' to check the interface status.

Question 7

Which TWO commands can be used to display the current iptables rules for the filter table?

Accepted Answer

iptables -L. `iptables -L` lists the current rules in the default filter table without needing to specify the table explicitly. Option C is correct because `iptables -t filter -L` explicitly selects the filter table and lists its rules, which is functionally equivalent to the default behavior of `iptables -L`.

Answer

iptables -S

Answer

iptables -t nat -L

Answer

iptables -t mangle -L

Question 8

An Apache web server is experiencing high memory usage under heavy load. The administrator wants to reduce the number of idle child processes. Which configuration directive should be adjusted?

Accepted Answer

MinSpareThreads. MinSpareThreads controls the minimum number of idle threads that should be available to handle incoming requests. By reducing this value, the administrator ensures fewer idle child processes are kept running, which lowers memory usage under heavy load. This directive is specific to Apache's worker MPM (Multi-Processing Module) and directly influences the number of spare processes.

Answer

ServerLimit

Answer

MaxRequestWorkers

Answer

KeepAliveTimeout

Question 9

A user alice is connected to the 'data' share via smbd, but a file is locked. Which command can forcibly close the file?

Accepted Answer

smbcontrol smbd close-share data. `smbcontrol smbd close-share data` sends a message to the smbd process to forcibly close all open files on the 'data' share, releasing any locks held by users like alice. This command directly targets the Samba daemon's internal state without disrupting the entire service or other shares.

Answer

smbpasswd -L -e alice

Answer

systemctl restart nmbd

Answer

kill -9 $(pgrep smbd)

Question 10

Which THREE of the following are valid bonding modes in Linux?

Accepted Answer

mode 2 (balance-xor). (mode 2, balance-xor) is a valid bonding mode that uses a hash policy (typically based on MAC addresses) to select a slave interface for outgoing traffic, providing both load balancing and fault tolerance. It is one of the seven standard bonding modes defined in the Linux kernel bonding driver (modes 0 through 6).

Answer

mode 8

Answer

mode 7

Question 11

Refer to the exhibit. What is the root filesystem device as specified in the kernel command line?

Accepted Answer

/dev/sda2. The kernel command line includes the parameter `root=/dev/sda2`, which explicitly specifies the root filesystem device as `/dev/sda2`. This is the standard way to indicate the partition where the root filesystem is mounted during boot, making option D correct.

Answer

Could not be determined

Answer

/dev/sda1

Answer

/dev/sda3

Question 12

Which Apache module is used to rewrite URLs based on rules?

Accepted Answer

mod_rewrite. mod_rewrite is the correct Apache module for rewriting URLs based on rules. It uses a regular expression engine to match incoming request URIs against patterns defined in .htaccess or server configuration files, then transforms them according to specified substitution rules. This module is essential for creating clean URLs, redirecting traffic, and implementing URL-based access control.

Answer

mod_proxy

Answer

mod_alias

Answer

mod_redirect

Question 13

Match each NFS version to its feature.

Accepted Answer

NFSv2: Stateless protocol using UDP, limited to 32-bit file handles. NFS versions evolved from stateless NFSv2 (UDP, 32-bit) to NFSv3 (TCP, 64-bit, async writes) to stateful NFSv4 (compound RPC, security, delegation). Common confusions include attributing v4 features to v2 and v2 limitations to v3.

Answer

NFSv2: Introduced compound RPC and stateful operations

Answer

NFSv3: Limited to UDP and 32-bit file handles

Question 14

An administrator needs to prioritize traffic for a VoIP application over other traffic on a Linux router. Which tool should be used to implement traffic shaping and prioritization?

Accepted Answer

tc (traffic control). B is correct because the `tc` (traffic control) command is the standard Linux utility for traffic shaping, prioritization, and bandwidth management. It operates at the kernel's QoS layer, allowing the administrator to define queuing disciplines (qdiscs) such as HTB or PRIO to prioritize VoIP packets based on classification rules, ensuring low latency for real-time traffic.

Answer

ip route with priority

Answer

tcpdump with filters

Answer

iptables with the mangle table

Question 15

Which TWO smb.conf parameters can be used to restrict access to a share based on client IP address or network?

Accepted Answer

hosts deny. The `hosts allow` and `hosts deny` parameters in smb.conf control access to Samba shares based on the client's IP address or network. `hosts allow` explicitly permits connections from specified hosts or networks, while `hosts deny` explicitly blocks them. These parameters are evaluated in order, with `hosts deny` taking precedence if both are specified, making them the correct pair for IP-based access restriction.

Answer

valid users

Answer

allow hosts

Answer

invalid users