LPIC-2 Practice Test 2 — 25 Questions

Question 1

After modifying /etc/samba/smb.conf, an administrator runs a command to validate the configuration. Which command is correct?

Accepted Answer

testparm. The correct command is `testparm`, which is specifically designed to validate the syntax and configuration of the `/etc/samba/smb.conf` file. It checks for errors in parameters, missing sections, and logical inconsistencies without restarting the Samba services, making it the standard tool for configuration verification.

Answer

smbpasswd

Answer

smbcontrol

Answer

samba-tool

Question 2

Windows clients cannot see the Samba server in Network Neighborhood, but they can access shares by typing the UNC path. Which Samba daemon must be running?

Accepted Answer

nmbd. The nmbd daemon is responsible for NetBIOS name resolution and browsing, which enables Windows clients to discover Samba servers in Network Neighborhood. When nmbd is not running, clients can still connect via UNC paths because smbd handles file sharing directly, but browsing and name resolution fail.

Answer

smbd

Answer

samba

Answer

winbindd

Question 3

Given the smb.conf exhibit, which share(s) allow write access to user 'alice' who is a member of the 'staff' group?

Accepted Answer

share1 only. In the smb.conf exhibit, share1 has 'write list = @staff' which grants write access to all members of the staff group, including user alice. share2 has 'read only = yes' and no write list, so it is read-only for everyone. share3 has 'valid users = bob' and 'write list = bob', so only bob can write; alice is not listed and is not in the bob group, so she has no write access.

Answer

share1 and share3

Answer

share3 only

Answer

share2 only

Question 4

Arrange the steps to configure a Linux server as an NFS client that mounts a remote export.

Accepted Answer

1. Install the nfs-common package
2. Create a mount point directory
3. Add an entry to /etc/fstab
4. Mount the remote export
5. Verify the mount. The NFS client needs the nfs-common package, a mount point, an fstab entry, then mounting and verification.

Answer

1. Install the nfs-common package
2. Add an entry to /etc/fstab
3. Create a mount point directory
4. Mount the remote export
5. Verify the mount

Answer

1. Create a mount point directory
2. Mount the remote export
3. Add an entry to /etc/fstab
4. Install the nfs-common package
5. Verify the mount

Answer

1. Add an entry to /etc/fstab
2. Create a mount point directory
3. Install the nfs-common package
4. Mount the remote export
5. Verify the mount

Question 5

Order the steps to configure a Linux system as a DHCP client using dhclient.

Accepted Answer

Configure the interface for DHCP, then run dhclient, then check the IP address, then verify the default route, then test connectivity.. First configure the interface for DHCP, then run dhclient, check address, verify route, and test.

Answer

Run dhclient first, then configure the interface for DHCP, then check the IP address, then verify the default route, then test connectivity.

Answer

Check the IP address first, then configure the interface for DHCP, then run dhclient, then verify the default route, then test connectivity.

Answer

Configure the interface for DHCP, then check the IP address, then run dhclient, then verify the default route, then test connectivity.

Question 6

A security policy requires that all users must change their passwords every 90 days. Which command enforces maximum password age for an existing user 'jdoe'?

Accepted Answer

chage -M 90 jdoe. The `chage -M 90 jdoe` command sets the maximum number of days a password is valid for user 'jdoe' to 90 days, enforcing the security policy. The `-M` option directly controls the password aging parameter that defines when the password must be changed, as stored in `/etc/shadow`.

Answer

passwd -f jdoe

Answer

usermod -e 90 jdoe

Answer

chage -E 90 jdoe

Question 7

Which TWO daemons are commonly used by DHCP clients on Linux to obtain an IP address? (Choose two.)

Accepted Answer

dhclient. dhclient (A) is the classic ISC DHCP client daemon that sends DHCPDISCOVER/DHCPREQUEST messages to obtain a lease and configure the interface, making it a correct answer. dhcpcd (B) is another widely used DHCP client daemon (common on many distros and embedded systems) that performs the same client-side lease acquisition, so it is also correct. dhcrelay (C) is a DHCP relay agent that forwards DHCP messages between clients and servers on different subnets, not a client. dhcpd (D) is the ISC DHCP server daemon that assigns addresses, not a client. tcpdump (E) is a packet capture tool, not a DHCP client daemon.

Answer

dhcrelay

Answer

dhcpd

Answer

tcpdump

Question 8

After modifying /etc/samba/smb.conf, which command should be used to verify the syntax before restarting the Samba service?

Accepted Answer

testparm. The `testparm` command is specifically designed to parse and validate the syntax of the Samba configuration file `/etc/samba/smb.conf`. It checks for errors such as misspelled parameters, invalid values, or structural issues without requiring the Samba services to be running. This makes it the correct tool to verify syntax before restarting Samba.

Answer

nmblookup

Answer

smbclient

Answer

smbstatus

Question 9

A database server uses LVM with an XFS filesystem on /dev/vg_data/lv_db, mounted at /var/lib/mysql. The LV is at 95% capacity. A new 50GB disk /dev/sdd has been added and initialized as a physical volume, then added to the volume group vg_data. The database is running and cannot be stopped. The administrator must extend the LV and filesystem. What is the correct course of action?

Accepted Answer

Run `lvextend -L +50G /dev/vg_data/lv_db` followed by `xfs_growfs /var/lib/mysql`.. XFS filesystems must be grown while mounted using `xfs_growfs` with the mount point as the argument, not the block device. Since the database cannot be stopped, the LV can be extended online with `lvextend`, and then `xfs_growfs /var/lib/mysql` resizes the filesystem to fill the expanded LV without requiring unmounting or downtime.

Answer

Run `lvextend -L +50G /dev/vg_data/lv_db` followed by `resize2fs /dev/vg_data/lv_db`.

Answer

Unmount /var/lib/mysql, run `lvextend -L +50G /dev/vg_data/lv_db`, run `resize2fs /dev/vg_data/lv_db`, then remount.

Answer

Run `lvresize -L +50G /dev/vg_data/lv_db`.

Question 10

A Linux client is configured with two network interfaces: eth0 (connected to the internet) and eth1 (connected to a private LAN). The default route is set to eth0. The client can access the internet but cannot access hosts on the private LAN. What is the most likely cause?

Accepted Answer

There is no route to the private subnet via eth1.. Without a route to the private subnet via eth1, the client has no way to forward packets destined for the private LAN out of eth1. The default route via eth0 only handles traffic for destinations not explicitly matched by other routes; if the private subnet is not in the routing table, packets to that subnet will be sent to the default gateway (internet) and fail. The `ip route` command would show the missing entry, and adding a static route (e.g., `ip route add 192.168.1.0/24 dev eth1`) resolves the issue.

Answer

A firewall on the client is blocking ICMP packets on eth1.

Answer

The eth1 interface is not configured with an IP address.

Answer

The eth1 interface is not receiving a DHCP lease.

Question 11

Which Samba component provides NetBIOS name resolution and browsing services?

Accepted Answer

nmbd. The nmbd daemon is the Samba component responsible for NetBIOS name resolution and browsing services. It listens for NetBIOS name service requests (port 137/UDP) and datagram distribution (port 138/UDP), enabling Windows clients to resolve NetBIOS names to IP addresses and participate in network browsing (e.g., listing shares in Network Neighborhood). Without nmbd, Samba cannot provide legacy NetBIOS-based name resolution or browse lists, though modern Samba can also use DNS-based discovery.

Answer

swat

Answer

smbd

Answer

winbind

Question 12

Order the steps to configure a Linux system as a router using iptables.

Accepted Answer

Enable IP forwarding, set default iptables policies, add NAT and FORWARD rules, then save the iptables configuration.. When configuring a Linux system as a router using iptables, the proper order is: first enable IP forwarding (via sysctl), then set default iptables policies (e.g., DROP for FORWARD), then add NAT (e.g., MASQUERADE) and FORWARD rules, and finally save the iptables configuration to make it persistent. This sequence ensures the kernel is prepared for routing, policies are in place to control traffic flow, rules are applied correctly, and changes are saved.

Answer

Set default iptables policies, enable IP forwarding, add NAT and FORWARD rules, then save the iptables configuration.

Answer

Save the iptables configuration, enable IP forwarding, set default iptables policies, then add NAT and FORWARD rules.

Answer

Add NAT and FORWARD rules, enable IP forwarding, set default iptables policies, then save the iptables configuration.

Question 13

Which TWO files are commonly used by Samba for configuration and user authentication? (Choose two.)

Accepted Answer

/etc/samba/smbpasswd. Option E, /etc/samba/smb.conf, is correct because it is Samba's primary configuration file, defining global server settings and per-share parameters such as workgroup, security mode, and share paths. Option C, /etc/samba/smbpasswd, is correct because it is the traditional Samba file storing SMB/CIFS user account credentials (NT/LM password hashes) used for authenticating clients, managed via smbpasswd. Option A, /etc/samba/smbusers, is not correct because it only maps local Linux usernames to SMB aliases and does not store authentication credentials or main configuration. Option B, /etc/passwd, is not correct because it is the system's local account database, not Samba's authentication store, though Samba may reference system accounts. Option D, /etc/hosts.allow, is not correct because it is a TCP wrapper access-control file, not a Samba configuration or authentication file.

Answer

/etc/samba/smbusers

Answer

/etc/passwd

Answer

/etc/hosts.allow

Question 14

Which TWO statements about the DHCP client on Linux are correct?

Accepted Answer

The dhclient command can be used to release and renew a DHCP lease.. Option A is correct because dhclient supports the -r flag to release the current lease and the -n/-1 or simply re-running it to renew, making it the standard ISC DHCP client tool for managing leases on Linux. Option B is correct because /etc/dhcp/dhclient.conf accepts the 'send host-name "name";' directive, which controls the hostname the client transmits to the DHCP server in its DHCPDISCOVER/DHCPREQUEST messages. Option C is wrong because dhclient-script is invoked by dhclient to configure the interface (IP address, routes, DNS) based on the lease, not to parse /etc/resolv.conf; the script writes resolv.conf rather than parsing it. Option D is wrong because dhcpcd is one of several clients (alongside dhclient, NetworkManager's internal client, and systemd-networkd) and is not the standard on all distributions. Option E is wrong because /etc/dhcpd.conf configures the DHCP server daemon (dhcpd), not the client; the client configuration file is /etc/dhcp/dhclient.conf.

Answer

The dhclient-script is used to parse the /etc/resolv.conf file.

Answer

The dhcpcd daemon is the standard DHCP client on all Linux distributions.

Answer

The /etc/dhcpd.conf file configures the DHCP client.

Question 15

Which TWO statements are true regarding BIND DNS server security? (Choose two.)

Accepted Answer

The 'allow-recursion' ACL can be used to restrict which clients can use the server's recursive lookup feature.. Option B is correct because in BIND, the 'allow-recursion' ACL specifically controls which client addresses are permitted to use the server's recursive resolution capability, so only trusted clients perform recursion while others are limited to authoritative answers. Option E is correct because the 'allow-query' ACL defines which clients are allowed to send any DNS queries to the server, effectively restricting query access by source address. Option A is incorrect because 'allow-transfer' governs zone transfers (AXFR/IXFR) to secondary servers, not recursive query permissions. Option C is incorrect because the 'blackhole' ACL lists addresses the server will not answer or query at all; it does not prevent cache poisoning, which is mitigated by source-port randomization, DNSSEC, and bailiwick checking. Option D is incorrect because 'forwarders' specifies servers to which queries are forwarded, and recursion is disabled with 'recursion no', not with 'forwarders'.

Answer

The 'allow-transfer' ACL is used to restrict which clients can perform recursive queries.

Answer

The 'blackhole' ACL can be used to prevent cache poisoning attacks.

Answer

The 'forwarders' option can be used to disable recursion entirely.

Question 16

A system administrator needs to find out which kernel parameters were passed at boot time. Which command displays the kernel boot parameters?

Accepted Answer

cat /proc/cmdline. The correct command is `cat /proc/cmdline` because the Linux kernel stores the boot parameters (also known as the kernel command line) passed by the bootloader (e.g., GRUB) in the virtual file `/proc/cmdline`. Reading this file directly displays the exact parameters used during boot, such as `root=`, `quiet`, or `splash`.

Answer

dmesg

Answer

lsmod

Answer

cat /proc/version

Question 17

A DHCP server is configured to serve multiple subnets but only clients on one subnet receive IP addresses. The server is connected to a router that does not forward DHCP broadcasts. What should be configured to support the other subnets?

Accepted Answer

Set up a DHCP relay agent on the other subnets. The router does not forward DHCP broadcasts, so clients on other subnets cannot reach the DHCP server. A DHCP relay agent (e.g., `dhcrelay` or `ip helper-address`) intercepts broadcast requests on those subnets and forwards them as unicast to the DHCP server, allowing the server to assign addresses from the appropriate subnet pools. This is the standard solution per RFC 1542 when routers do not support BOOTP forwarding.

Answer

Add more subnet declarations to the DHCP server

Answer

Add 'shared-network' declarations

Answer

Configure the router to act as a DHCP server

Question 18

An administrator wants to disable the graphical splash screen during boot. What change should be made in /etc/default/grub?

Accepted Answer

Remove 'splash' from GRUB_CMDLINE_LINUX_DEFAULT. The graphical splash screen during boot is controlled by the 'splash' kernel parameter. Removing 'splash' from GRUB_CMDLINE_LINUX_DEFAULT in /etc/default/grub disables the splash screen, allowing verbose boot messages to be displayed. This parameter is passed to the kernel via the bootloader, and its absence prevents the plymouth or similar splash service from activating.

Answer

Set GRUB_CMDLINE_LINUX="nosplash"

Answer

Remove 'quiet' from GRUB_CMDLINE_LINUX_DEFAULT

Answer

Set GRUB_TIMEOUT=0

Question 19

A system administrator notices that the SSH service on a Linux server is failing to start. The log shows: 'sshd: error: Could not load host key: /etc/ssh/ssh_host_rsa_key'. What is the most likely cause and solution?

Accepted Answer

The host key file is missing or corrupt. Run 'ssh-keygen -A' to regenerate all missing host keys.. The error message indicates that the SSH daemon cannot load the RSA host key file. Host keys are generated during package installation or manually via ssh-keygen. Option D is correct because running 'ssh-keygen -A' automatically generates all missing host key types (RSA, ECDSA, Ed25519) that are configured for use, resolving the missing or corrupt key issue without manual intervention.

Answer

The sshd_config file has a syntax error. Run 'sshd -t' to check it.

Answer

The SSH service is managed by xinetd and the configuration is missing. Edit /etc/xinetd.d/ssh.

Answer

The /etc/ssh/sshd_config file has incorrect permissions. Change them to 600.

Question 20

An administrator wants to configure Samba to allow only specific users to access a share. Which TWO configuration parameters in smb.conf can be used to restrict access based on usernames?

Accepted Answer

invalid users. Option B, invalid users, is correct because it explicitly denies the listed usernames from accessing the share, so any account named there is blocked regardless of other permissions. Option D, valid users, is correct because it defines an allow-list of usernames (or groups) that are permitted to log in and access the share, restricting access to only those accounts. Together they provide username-based access control in smb.conf. Option A, hosts allow, is incorrect because it filters by client IP address or network, not by username. Option C, write list, is incorrect because it grants write permission to listed users but does not restrict who may access the share. Option E, read list, is incorrect because it grants read-only access to listed users rather than limiting share access by username.

Answer

hosts allow

Answer

write list

Answer

read list