LPIC-2 Practice Exam 4 — 20 Questions

Question 1

A developer compiled a custom kernel, installed it, but the system hangs before init starts. The previous kernel works. Which step was most likely missed?

Accepted Answer

Not rebuilding initramfs. When a custom kernel is compiled and installed, the initramfs must be rebuilt to include the necessary kernel modules for mounting the root filesystem at boot. If the initramfs is not regenerated, the kernel may lack critical drivers (e.g., for storage controllers or filesystems), causing the system to hang before init starts because it cannot access the root device. The previous kernel works because its initramfs was built with the correct modules for that kernel version.

Answer

Not updating GRUB configuration

Answer

Not running depmod

Answer

Not setting the correct root filesystem

Question 2

An administrator needs to ensure a kernel module is never loaded, even if requested. Which file should be used?

Accepted Answer

/etc/modprobe.d/blacklist.conf. The standard mechanism to prevent a kernel module from loading is to add a `blacklist` directive in a file under `/etc/modprobe.d/`, typically named `blacklist.conf`. The `modprobe` utility reads all `.conf` files in this directory, and a `blacklist <module_name>` entry ensures the module is never automatically loaded or loaded via `modprobe`, even if explicitly requested.

Answer

/etc/modprobe.d/deny.conf

Answer

/lib/modprobe.d/blacklist.conf

Answer

/etc/modules-load.d/blacklist.conf

Question 3

An administrator wants to limit the size of the kernel ring buffer to prevent memory overflow. Which kernel boot parameter should be used?

Accepted Answer

log_buf_len. `log_buf_len` is the kernel boot parameter that explicitly sets the size of the kernel ring buffer (dmesg buffer). By specifying a value (e.g., `log_buf_len=4M`), the administrator can increase or limit the buffer size to prevent memory overflow when a large volume of kernel messages is generated.

Answer

log_size

Answer

kernel.log.size

Answer

dmesg_size

Question 4

A system administrator needs to ensure that a custom kernel module loads automatically at boot. The module is named 'my_driver' and is built for the current kernel. Which configuration file should be modified to ensure the module loads automatically?

Accepted Answer

Add a configuration file in /etc/modules-load.d/. Systemd-based Linux distributions use /etc/modules-load.d/ to specify kernel modules that should be loaded automatically at boot. Placing a configuration file (e.g., my_driver.conf) containing the module name 'my_driver' in this directory instructs systemd-modules-load.service to load the module during early boot. This is the modern, distribution-agnostic method for ensuring a custom kernel module loads automatically.

Answer

Add the insmod command in /etc/rc.local

Answer

Add the module name to /etc/modules.conf

Answer

Add a configuration file in /etc/modprobe.d/

Question 5

During boot, the kernel panics because the root filesystem cannot be mounted. Which kernel parameter should be added at the GRUB prompt to try an alternative root device?

Accepted Answer

root=/dev/sdb1. The kernel parameter 'root=' specifies the device for the root filesystem. When the default root device fails to mount, adding 'root=/dev/sdb1' at the GRUB prompt overrides the compiled-in root and tells the kernel to attempt mounting from that alternative block device. This is the standard method to redirect the root mount during boot troubleshooting.

Answer

init=/bin/sh

Answer

rescue

Answer

single

Question 6

A system administrator notices that the 'pcspkr' kernel module is causing beeps on the server console. The administrator wants to prevent this module from loading permanently. Which of the following is the correct method to blacklist the module?

Accepted Answer

Add 'blacklist pcspkr' to /etc/modprobe.d/blacklist.conf. The standard method to permanently prevent a kernel module from loading is to add a 'blacklist' directive to a file in /etc/modprobe.d/. The 'blacklist pcspkr' line tells modprobe not to load the pcspkr module automatically, even if it is requested by hardware detection or dependencies. This is the recommended approach on modern Linux distributions using modprobe's configuration system.

Answer

Add 'install pcspkr /bin/false' to /etc/modprobe.conf

Answer

Set the kernel parameter 'pcspkr=off' in GRUB

Answer

Remove the module file from /lib/modules/$(uname -r)/kernel/drivers/input/misc/

Question 7

Refer to the exhibit. Which kernel version will be booted by default when using a standard GRUB2 configuration that uses the symlinks vmlinuz and initrd.img?

Accepted Answer

5.10.0-9-amd64. In a standard GRUB2 configuration, the symlinks `vmlinuz` and `initrd.img` point to the latest installed kernel version. When GRUB2 generates its boot menu using `update-grub` (or `grub-mkconfig`), it reads these symlinks to create the default boot entry. Therefore, the default booted kernel is the one pointed to by these symlinks, which in this case is 5.10.0-9-amd64.

Answer

Depends on GRUB_DEFAULT setting, but if not set, it will boot the highest versioned kernel

Answer

It will prompt to choose between the two kernels

Answer

5.10.0-8-amd64

Question 8

Which file is used by the NetworkManager daemon to store connection profiles on a Linux system?

Accepted Answer

/etc/NetworkManager/system-connections/. NetworkManager stores per-connection profiles in the `/etc/NetworkManager/system-connections/` directory. Each profile is a keyfile (`.nmconnection` file) containing connection parameters such as SSID, security settings, and IP configuration. When NetworkManager starts or a connection is modified, it reads and writes these files to persist network configurations across reboots.

Answer

/etc/sysconfig/network-scripts/

Answer

/etc/netctl/

Answer

/etc/systemd/network/

Question 9

Which Postfix configuration parameter specifies the domain that is appended to unqualified email addresses?

Accepted Answer

myorigin. The `myorigin` parameter in Postfix controls the domain that is appended to locally-originated mail from unqualified addresses (e.g., 'user' becomes 'user@example.com'). By default, it uses the value of `myhostname`, but it is commonly set to `$mydomain` to append the domain rather than the full hostname. This ensures that outbound mail has a consistent and clean sender domain.

Answer

myhostname

Answer

mydomain

Answer

mydomainname

Question 10

Which of the following commands creates a new network namespace named 'test'?

Accepted Answer

ip netns add test. The correct command to create a new network namespace named 'test' is 'ip netns add test'. The 'ip netns' command is part of the iproute2 suite and is the standard tool for managing network namespaces in Linux. The 'add' subcommand creates a new namespace by binding it to a mount point under /var/run/netns/.

Answer

netns add test

Answer

network namespace add test

Answer

ip netns create test

Question 11

Which Apache module is used to rewrite URLs based on rules?

Accepted Answer

mod_rewrite. mod_rewrite is the correct Apache module for rewriting URLs based on rules. It uses a regular expression engine to match incoming request URIs against patterns defined in .htaccess or server configuration files, then transforms them according to specified substitution rules. This module is essential for creating clean URLs, redirecting traffic, and implementing URL-based access control.

Answer

mod_proxy

Answer

mod_alias

Answer

mod_redirect

Question 12

Which THREE actions are typically required to configure a VLAN interface on a Linux system?

Accepted Answer

Create the VLAN interface using ip link.. The `ip link` command is used to create a VLAN interface by specifying the parent physical interface and the VLAN ID (e.g., `ip link add link eth0 name eth0.10 type vlan id 10`). This creates a virtual network interface that tags outgoing frames with the specified 802.1Q VLAN ID and strips tags from incoming frames.

Answer

Add the physical interface to a bridge.

Answer

Configure iptables rules for the VLAN.

Question 13

A company requires two-factor authentication for SSH logins. Which PAM module can be used to implement this if the system uses a time-based one-time password (TOTP)?

Accepted Answer

pam_google_authenticator.so. `pam_google_authenticator.so` is a PAM module specifically designed to implement time-based one-time password (TOTP) authentication as defined in RFC 6238. It integrates with SSH by requiring users to provide a six-digit code generated by the Google Authenticator app (or compatible TOTP client) in addition to their regular password, enabling two-factor authentication.

Answer

pam_radius.so

Answer

pam_ldap.so

Answer

pam_krb5.so

Question 14

To protect against SSH brute-force attacks, a system administrator installs fail2ban. Which configuration file should be modified to enable the SSH jail with default settings?

Accepted Answer

/etc/fail2ban/jail.local. Fail2ban uses jail.local to override default settings from jail.conf without modifying the package-managed file. The SSH jail is defined in jail.conf but enabling it with default settings requires creating or editing jail.local, which takes precedence over jail.conf. This ensures that customizations survive package updates.

Answer

/etc/fail2ban/fail2ban.conf

Answer

/etc/ssh/sshd_config

Answer

/etc/fail2ban/jail.conf

Question 15

A company wants to use Samba to share files with Windows clients. Which service must be enabled in Samba to support Windows Active Directory domain membership?

Accepted Answer

winbind. Winbind (winbindd) is the Samba service that integrates with Windows Active Directory by resolving user and group information from the domain controller. It uses the Microsoft Active Directory authentication protocol (Kerberos) and LDAP to map Windows domain users to local Unix accounts, enabling domain membership and single sign-on.

Answer

nmbd

Answer

smbd

Answer

swat

Question 16

Refer to the exhibit. What is the root filesystem device as specified in the kernel command line?

Accepted Answer

/dev/sda2. The kernel command line includes the parameter `root=/dev/sda2`, which explicitly specifies the root filesystem device as `/dev/sda2`. This is the standard way to indicate the partition where the root filesystem is mounted during boot, making option D correct.

Answer

Could not be determined

Answer

/dev/sda1

Answer

/dev/sda3

Question 17

A system administrator wants to verify the integrity of a downloaded package using a GPG signature. Which command should be used after importing the distributor's public key?

Accepted Answer

gpg --verify package.tar.gz.asc package.tar.gz. The `--verify` option is used to check the authenticity and integrity of a file against a detached GPG signature file. After importing the distributor's public key, running `gpg --verify package.tar.gz.asc package.tar.gz` confirms that the package was signed by the corresponding private key and has not been altered since signing.

Answer

gpg --encrypt package.tar.gz

Answer

gpg --decrypt package.tar.gz.asc

Answer

gpg --sign package.tar.gz

Question 18

An administrator wants to enhance the security of a web server running Apache. Which TWO of the following actions are recommended best practices?

Accepted Answer

Disable directory listing in the Apache configuration using Options -Indexes.. Option B is correct because disabling directory listing with 'Options -Indexes' prevents Apache from automatically generating browsable file indexes when no DirectoryIndex file (e.g., index.html) exists, closing an information-disclosure vector that could reveal sensitive files. Option D is correct because Apache should bind to privileged port 80/443 as root but then drop privileges so worker/child processes run as an unprivileged account like www-data, limiting the impact of a compromise via the principle of least privilege. Option A is not recommended because mod_info exposes detailed server configuration and module information that aids attackers, so it should be disabled or tightly restricted. Option C is not a best practice because .htaccess files allow decentralized per-directory overrides, increase parsing overhead, and can introduce misconfigurations; centralizing configuration in the main server config with 'AllowOverride None' is preferred. Option E is not recommended because the HTTP TRACE method can be abused in Cross-Site Tracing (XST) attacks to steal cookies or credentials, so it should be disabled with 'TraceEnable Off'.

Answer

Enable the mod_info module to monitor server configuration.

Answer

Enable .htaccess files to allow per-directory configuration changes.

Answer

Enable the HTTP TRACE method for debugging purposes.

Question 19

A system fails to boot with the error shown. Which kernel parameter should be added to the kernel command line to resolve the issue?

Accepted Answer

rootdelay=10. The error indicates that the system cannot find the root filesystem, often because the storage device is not ready when the kernel attempts to mount it. Adding `rootdelay=10` instructs the kernel to wait 10 seconds before attempting to mount the root device, giving USB, SCSI, or other slow-to-probe controllers time to initialize. This is a common fix for boot failures on systems with external or hot-pluggable storage.

Answer

root=/dev/sda1

Answer

noprompt

Answer

rootfstype=ext4

Answer

single

Question 20

Refer to the exhibit. The /data filesystem is nearly full. The administrator has added a new disk /dev/sdc with 10GB capacity. The VG currently has no free space. Which steps will increase the available space for /data using LVM and ext4?

Accepted Answer

pvcreate /dev/sdc; vgextend vg /dev/sdc; lvextend -l +100%FREE /dev/vg/data; resize2fs /dev/vg/data. It follows the proper LVM workflow: create a physical volume (pvcreate), add it to the volume group (vgextend), extend the logical volume using all free space in the VG (lvextend -l +100%FREE), and then resize the ext4 filesystem (resize2fs). This ensures the new 10GB disk is fully utilized for /data.

Answer

vgextend vg /dev/sdc; lvextend -L +10G /dev/vg/data; resize2fs /dev/vg/data

Answer

pvcreate /dev/sdc; lvextend -L +10G /dev/vg/data; resize2fs /dev/vg/data

Answer

pvcreate /dev/sdc; vgextend vg /dev/sdc; lvextend -l +50%FREE /dev/vg/data; resize2fs /dev/vg/data