LPIC-2 Practice Test 32 — 15 Questions

Question 1

An administrator needs to mount an NFSv4 export from server:/exports/data onto /mnt/data on a client. The requirement is to use Kerberos security, a hard mount, and ensure that the NFS server does not squash root's privileges. Which line in /etc/fstab correctly implements these requirements?

Accepted Answer

server:/exports/data /mnt/data nfs4 defaults,sec=krb5,hard 0 0. Option D is correct because it specifies NFSv4 with Kerberos security (sec=krb5) and a hard mount, which meets the requirements. The no_root_squash option is not a valid mount option in /etc/fstab for the client side; it is an export option set on the NFS server in /etc/exports. Thus, D correctly omits it, as the client cannot enforce root squashing behavior.

Answer

server:/exports/data /mnt/data nfs4 defaults,sec=none,hard,no_root_squash 0 0

Answer

server:/exports/data /mnt/data nfs4 defaults,sec=krb5,soft 0 0

Answer

server:/exports/data /mnt/data nfs4 defaults,sec=krb5,hard,no_root_squash 0 0

Question 2

A Samba share is configured with 'valid users = @staff' but users in the staff group still get 'NT_STATUS_ACCESS_DENIED' when accessing the share. The server uses 'security = user'. Which additional configuration is required?

Accepted Answer

Run smbpasswd -a for each user. With 'security = user', Samba requires each user to have a separate Samba password stored in the smbpasswd file (or another passdb backend). Even if a user is a member of the 'staff' group and exists in the system's /etc/passwd, they cannot authenticate to the share without an smbpasswd entry. Running 'smbpasswd -a' for each user creates that entry, resolving the NT_STATUS_ACCESS_DENIED error.

Answer

Set 'guest ok = yes'

Answer

Set 'force group = staff'

Answer

Add the share to [global]

Question 3

Given the mount options shown, which of the following events will cause the NFS mount to become unresponsive (hang)?

Accepted Answer

The NFS server reboots.. When the NFS server reboots, the client's TCP connection to the server is broken. With the `hard` mount option (default), the client will retry indefinitely until the server comes back online, causing all processes accessing the mount to hang (become unresponsive). The `intr` option (if not set) prevents interruption by signals, making the hang persistent until the server responds.

Answer

The network becomes saturated.

Answer

The client runs out of disk space on /mnt/data.

Answer

The /mnt/data directory is deleted locally.

Question 4

Which file on a Linux client determines the order in which different name resolution methods (e.g., hosts file, DNS, LDAP) are consulted?

Accepted Answer

/etc/nsswitch.conf. Option C is correct because /etc/nsswitch.conf (Name Service Switch) controls the order and sources for system databases like 'hosts', 'passwd', and 'group'. For hostname resolution, the 'hosts' line specifies the lookup order (e.g., 'files dns ldap'), meaning the system checks /etc/hosts first, then DNS, then LDAP. This file is the central configuration for name resolution order on Linux systems.

Answer

/etc/host.conf

Answer

/etc/resolv.conf

Answer

/etc/named.conf

Question 5

To ensure LDAP communication is encrypted, an administrator configures LDAP over SSL (LDAPS) on port 636. Which configuration file on the client should be modified to specify the LDAP server with TLS?

Accepted Answer

/etc/ldap/ldap.conf. Option D is correct because the LDAP client configuration file on Linux systems is typically located at /etc/ldap/ldap.conf (or /etc/openldap/ldap.conf on some distributions). This file is used by LDAP client libraries (e.g., libldap) to specify the LDAP server URI, including the use of TLS/SSL via the ldaps:// scheme or the TLS_REQCERT directive. Modifying this file allows the client to connect to an LDAP server over port 636 with encryption.

Answer

/etc/pam_ldap.conf

Answer

/etc/openldap/ldap.conf

Answer

/etc/nsswitch.conf

Question 6

Which TWO authentication modules can be used with PAM to integrate LDAP authentication on a Linux client?

Accepted Answer

pam_krb5. Option B (pam_krb5) is correct because it allows PAM to authenticate users against a Kerberos KDC, which is commonly used alongside LDAP for single sign-on in enterprise environments. Option E (pam_ldap) is correct because it directly enables PAM to bind to an LDAP directory server for user authentication, typically using the LDAP BIND operation. Both modules are standard choices for integrating LDAP authentication on a Linux client.

Answer

pam_unix

Answer

pam_radius

Answer

pam_tally2

Question 7

Which command can be used to test the entire name resolution order as defined in nsswitch.conf?

Accepted Answer

getent hosts. The `getent hosts` command queries the system's Name Service Switch (NSS) configured sources in the exact order defined in `/etc/nsswitch.conf`. It uses the `gethostbyname()` or `getaddrinfo()` library calls, which respect the `hosts:` line in nsswitch.conf (e.g., `files dns myhostname`), testing resolution through each source sequentially until a result is found or all sources are exhausted.

Answer

host

Answer

nslookup

Answer

dig

Question 8

Which TWO DHCP options are commonly used to provide network configuration to clients? (Choose two.)

Accepted Answer

routers. Option A (routers) is correct because the DHCP option 3 (Router) provides the default gateway address to clients, enabling them to route traffic outside their local subnet. Option E (domain-name-servers) is correct because DHCP option 6 (Domain Name Server) supplies the DNS server addresses, allowing clients to resolve domain names. Both are essential for basic network connectivity and are almost universally configured in DHCP scopes.

Answer

subnet-mask

Answer

ntp-servers

Answer

host-name

Question 9

Which THREE files are commonly involved in configuring a Linux client for LDAP authentication?

Accepted Answer

/etc/pam.d/system-auth. Option C is correct because /etc/pam.d/system-auth (or its equivalent, such as /etc/pam.d/common-auth on Debian-based systems) is the central PAM configuration file that defines authentication modules. For LDAP authentication, the pam_ldap module is typically stacked here to allow LDAP-based user credential verification, making it essential for integrating LDAP into the system's authentication flow.

Answer

/etc/hosts

Answer

/etc/resolv.conf

Question 10

Which TWO are true about the autofs automounter configuration? (Choose two.)

Accepted Answer

The master configuration file is /etc/auto.master.. Option C is correct because the autofs automounter uses /etc/auto.master as its master configuration file. This file defines the base directories for automount points and references subordinate map files (e.g., /etc/auto.home) that specify the actual mount details. The automounter daemon (automount) reads this master file to determine which directories to manage and how to mount filesystems on demand.

Answer

Autofs mounts remain indefinitely once accessed.

Answer

Autofs uses /etc/fstab to define automount points.

Answer

Autofs can only be used with NFS filesystems.

Question 11

Which command is used to list the NFS exports available from a specific server?

Accepted Answer

showmount -e server. The `showmount -e server` command queries the NFS server's mount daemon (rpc.mountd) to list the exported filesystems that are currently available. This is the standard method for a client to discover which NFS shares a server is offering, as it directly interrogates the server's export list via the RPC protocol.

Answer

mount -t nfs4 server:/export /mnt

Answer

nfsstat

Answer

exportfs -a

Question 12

Which file is used to configure the LDAP client for system authentication on a modern Linux system using nss-pam-ldapd?

Accepted Answer

/etc/nslcd.conf. Option C is correct because /etc/nslcd.conf is the configuration file for nslcd, the LDAP name service daemon used by nss-pam-ldapd to perform LDAP queries for system authentication and user/group lookups. This daemon communicates with the LDAP server and provides the results to NSS and PAM modules, making it the central configuration point for LDAP client authentication on modern Linux systems.

Answer

/etc/openldap/ldap.conf

Answer

/etc/nsswitch.conf

Answer

/etc/ldap.conf

Question 13

Which TWO commands can be used to query a DHCP server's lease database on a Linux server running ISC DHCP? (Assume default paths.) (Select two.)

Accepted Answer

cat /var/lib/dhcp/dhcpd.leases. Option B is correct because the ISC DHCP server stores its lease database in a plain-text file at `/var/lib/dhcp/dhcpd.leases` by default. Reading this file with `cat` directly displays all active and expired leases, including IP addresses, MAC addresses, and lease durations. Option C is correct because `dhcp-lease-list` is a utility that parses the same lease file and presents the data in a formatted, human-readable table.

Answer

dhcpd -t

Answer

less /etc/dhcp/dhcpd.conf

Answer

dhcpd -p

Question 14

An LDAP client fails to authenticate users against an LDAP server. The /etc/nsswitch.conf includes 'passwd: files ldap' and the /etc/pam.d/system-auth has appropriate pam_ldap.so entries. However, 'getent passwd' shows only local users. Which command should the administrator run first to diagnose the issue?

Accepted Answer

Run 'ldapsearch -x -H ldap://server -b dc=example,dc=com' to test connectivity.. Option B is correct because the first step in diagnosing an LDAP authentication failure is to verify basic connectivity to the LDAP server. Running 'ldapsearch -x -H ldap://server -b dc=example,dc=com' tests whether the client can reach the server and perform a simple anonymous search. If this fails, no amount of configuration tweaking will resolve the issue, as the root cause is likely network or server availability.

Answer

View the contents of /etc/nsswitch.conf.

Answer

Restart the nslcd service.

Answer

Check the syntax of /etc/ldap.conf with 'slaptest -f /etc/ldap.conf'.

Question 15

Which two commands display information about LVM physical volumes? (Choose two.)

Accepted Answer

pvs. The `pvs` command (option A) provides a concise, configurable listing of all LVM physical volumes, showing key attributes like PV name, VG name, size, and free space. The `pvdisplay` command (option E) offers a detailed, verbose display of physical volume properties, including metadata areas, PE size, and allocation status. Both are standard LVM utilities for querying PV information.

Answer

pvcreate

Answer

pvck

Answer

pvscan