LPIC-2 Practice Test 24 — 15 Questions

Question 1

Which TWO tools can be used to send test email messages from the command line?

Accepted Answer

sendmail. B is correct because the `sendmail` command can be used directly from the command line to inject a test email into the local MTA queue, bypassing a full MUA. It accepts a recipient address and message body via standard input, making it a reliable tool for testing mail delivery without a full mail client.

Answer

netcat

Answer

mutt

Answer

telnet

Question 2

Based on the sshd configuration, user 'charlie' attempts to log in using public key authentication. What will happen?

Accepted Answer

Login is denied because the DenyUsers directive explicitly blocks charlie.. The DenyUsers directive in sshd_config explicitly blocks the user 'charlie' from logging in, regardless of the authentication method. Since DenyUsers takes precedence over AllowUsers and other authentication settings, public key authentication will still be denied for charlie. The correct answer is A because the directive explicitly denies charlie, overriding any other configuration.

Answer

Login is allowed because PasswordAuthentication is disabled, but public key authentication is enabled.

Answer

Login is allowed because AllowUsers includes other users but does not deny charlie.

Answer

Login is denied because charlie's IP address is not in the allowed list.

Question 3

Which THREE directives are essential for configuring an OpenLDAP client in /etc/ldap/ldap.conf? (Choose three.)

Accepted Answer

BASE. The BASE directive defines the starting point for LDAP searches (e.g., dc=example,dc=com) and is essential for client configuration to know which subtree to query. Without it, the client cannot determine the search base for directory lookups.

Answer

SIZELIMIT

Answer

BINDDN

Question 4

Given the smb.conf exhibit, which share(s) allow write access to user 'alice' who is a member of the 'staff' group?

Accepted Answer

share1 only. In the smb.conf exhibit, share1 has 'write list = @staff' which grants write access to all members of the staff group, including user alice. share2 has 'read only = yes' and no write list, so it is read-only for everyone. share3 has 'valid users = bob' and 'write list = bob', so only bob can write; alice is not listed and is not in the bob group, so she has no write access.

Answer

share1 and share3

Answer

share3 only

Answer

share2 only

Question 5

Which THREE commands can be used to display routing information?

Accepted Answer

route -n. The `route -n` command displays the kernel's IPv4 routing table with numeric addresses, avoiding DNS lookups. It is a standard tool for viewing routing information on Linux systems, making option B correct.

Answer

ping -R

Answer

traceroute

Question 6

A Linux server with two Ethernet interfaces (eth0 and eth1) has been set up as a transparent bridge using brctl. The bridge is up and shows both interfaces as members. However, hosts connected to eth0 cannot communicate with hosts on eth1. What is the most likely cause?

Accepted Answer

Spanning Tree Protocol (STP) is enabled and is blocking one of the ports.. When Spanning Tree Protocol (STP) is enabled on a Linux bridge using brctl, it will automatically transition ports into the blocking state to prevent loops. If the bridge has only two ports and no redundant paths, STP may still keep one port in the blocking state (e.g., during the listening/learning phase or due to a misconfiguration), which prevents frames from being forwarded between eth0 and eth1. This is the most likely cause because STP is enabled by default in brctl and can block ports even in a simple two-port bridge.

Answer

The bridge filtering rules in ebtables are dropping frames.

Answer

The bridge has no IP address assigned.

Answer

The interfaces are not in promiscuous mode.

Question 7

An administrator wants to convert an ext4 filesystem to Btrfs without losing data. Which procedure should be used?

Accepted Answer

btrfs-convert /dev/sda1. The correct procedure is to use `btrfs-convert /dev/sda1`, which is a dedicated tool that performs an in-place conversion of an existing ext2/3/4 filesystem to Btrfs while preserving all existing data. It works by creating a Btrfs filesystem that wraps the original ext4 data structures, then allowing a gradual migration to native Btrfs features via a background process.

Answer

mkfs.btrfs /dev/sda1

Answer

cp -a /mnt/ext4 /mnt/btrfs

Answer

btrfs device add /dev/sda1 /mnt

Question 8

A system administrator notices that a new 1TB NVMe drive (/dev/nvme0n1) is not detected by the kernel. The hardware is confirmed working. Which troubleshooting step should be taken first to check if the drive is recognized by the system's PCI subsystem?

Accepted Answer

Run lspci to verify the NVMe controller is detected.. The NVMe drive is not detected by the kernel, but the hardware is confirmed working. The first step is to verify whether the PCI subsystem sees the NVMe controller, because NVMe devices are connected via the PCI Express bus. Running lspci lists all PCI devices, including the NVMe controller; if it does not appear, the issue is at the PCI or hardware level, not the block layer.

Answer

Run lsblk to list all block devices.

Answer

Check dmesg output for errors.

Answer

Run fdisk -l /dev/nvme0n1 to probe the drive.

Question 9

Which file is used by GRUB2 to load the kernel and initramfs?

Accepted Answer

/boot/grub/grub.cfg. GRUB2 uses /boot/grub/grub.cfg as its main configuration file, which contains the menu entries, kernel paths, and initramfs locations. This file is generated by update-grub (or grub-mkconfig) based on scripts in /etc/grub.d/ and settings in /etc/default/grub, and it is read directly by the GRUB2 bootloader at boot time to load the kernel and initramfs.

Answer

/etc/lilo.conf

Answer

/etc/default/grub

Answer

/boot/grub/menu.lst

Question 10

During boot, a server's video driver causes a freeze. At the GRUB2 menu, the administrator needs to interactively add the kernel parameter 'nomodeset' to the boot entry. Which key should be pressed to access the kernel command line editor?

Accepted Answer

e. Pressing 'e' at the GRUB2 menu enters the edit mode for the selected boot entry, allowing the administrator to modify kernel parameters interactively. This is the standard GRUB2 keybinding to access the kernel command line editor, where 'nomodeset' can be added to the 'linux' line to disable kernel mode-setting and prevent the video driver from freezing during boot.

Answer

a

Answer

Tab

Answer

c

Question 11

Which THREE of the following are valid Linux bonding modes? (Choose three.)

Accepted Answer

balance-rr. Balance-rr (round-robin) is a valid Linux bonding mode that transmits packets in sequential order from the first available slave to the last, providing load balancing and fault tolerance. It is one of the seven standard bonding modes defined in the Linux kernel bonding driver.

Answer

link-aggregation

Answer

802.1ad

Question 12

A web server running Apache is receiving many failed login attempts. Which tool should be used to dynamically block IPs after a configurable number of failures?

Accepted Answer

fail2ban. fail2ban is the correct tool because it monitors log files (e.g., /var/log/apache2/error.log) for repeated failed login attempts and dynamically updates iptables or nftables rules to block the offending IP address after a configurable threshold (e.g., maxretry = 5). It is purpose-built for this task, offering flexible jails and ban actions, unlike static or system-wide mechanisms.

Answer

TCP Wrappers

Answer

/etc/hosts.deny

Answer

iptables

Question 13

A company uses a Samba server (version 4.12) on Ubuntu 20.04 to provide file sharing for the engineering department. The server has a share [projects] defined in smb.conf with the following parameters: `path = /srv/projects`, `valid users = @engineers`, `read only = no`, `create mask = 0660`, `directory mask = 0770`. All users in the engineers group can authenticate and list the share contents but they report that they cannot create new files or modify existing ones. The command `ls -ld /srv/projects` shows `drwxrwxr-x`, and the directory is owned by root:engineers. The sysadmin has confirmed that the file system permissions on /srv/projects are set to 2775, but the setgid bit does not appear in the ls output. Additionally, users are able to create files in other shares on the same server that are configured similarly. Which of the following is the most likely cause and solution?

Accepted Answer

The directory lacks the setgid bit and new files do not inherit the engineers group. Add `force group = engineers` and `inherit permissions = yes` to the share configuration.. The directory /srv/projects lacks the setgid bit (shown as 2775 but ls output shows drwxrwxr-x, indicating the setgid bit is not effective), so new files and directories created by users in the @engineers group will be owned by the user's primary group (typically the user's default group) rather than the engineers group. Adding `force group = engineers` forces all new files to have the engineers group, and `inherit permissions = yes` ensures that the directory's permissions and setgid behavior are propagated to new subdirectories, resolving the permission mismatch that prevents writes.

Answer

The valid users parameter should be changed to include '%engineers' instead of '@engineers'.

Answer

The create mask is too restrictive. Change it to 0666 to allow more permissions.

Answer

The parameter `read only = no` is being overridden by a global setting. Add `writable = yes` to the share.

Question 14

A system administrator needs to configure a Linux client to use a specific DNS server for a particular domain. Which file should be modified to achieve this?

Accepted Answer

Edit /etc/resolv.conf. The /etc/resolv.conf file is the primary configuration file for DNS resolution on Linux systems. It allows specifying DNS servers (nameserver entries) and search domains, and can be configured to use a specific DNS server for a particular domain by adding a 'domain' or 'search' directive along with the appropriate nameserver. This file is read by the resolver library (glibc) during DNS lookups.

Answer

Edit /etc/hosts

Answer

Edit /etc/networks

Answer

Edit /etc/nsswitch.conf

Question 15

A developer has compiled a custom kernel with a new feature. The kernel modules are installed in /lib/modules/$(uname -r)/. However, when the system boots, the kernel fails to load some modules with 'Exec format error'. What is the most likely cause?

Accepted Answer

The modules were compiled against a different kernel version.. The 'Exec format error' indicates that the kernel module binary is incompatible with the running kernel. This most commonly occurs when modules are compiled against a different kernel version (e.g., different kernel source tree or configuration), as the module's vermagic string must exactly match the kernel's vermagic. The kernel's module loader checks this version magic before loading; a mismatch causes the exec format error.

Answer

The kernel configuration has disabled module loading.

Answer

The modules have incorrect file permissions.

Answer

The modules are not properly ordered in the dependency file.