LPIC-2 Practice Test 33 — 15 Questions

Question 1

An administrator needs to configure an NFS client to mount an export from an NFSv4 server that requires Kerberos authentication. The client should mount the export at boot time. Which of the following must be ensured for the mount to succeed automatically?

Accepted Answer

The client must have a valid keytab for its host principal.. For an NFSv4 client to automatically mount an export requiring Kerberos authentication at boot time, the client must possess a valid keytab file containing its host principal (e.g., nfs/client.example.com@REALM). This keytab allows the system to obtain Kerberos credentials without interactive user input, enabling the kernel's NFS client to authenticate to the server during the mount process. Without a keytab, the mount would fail because no user is present to run kinit, and the system lacks the cryptographic material to prove its identity.

Answer

The NFS server must have the same hostname as the client.

Answer

The user must run kinit before mounting.

Answer

The mount must be performed via an autofs map.

Question 2

An administrator notices that clients are unable to obtain IP addresses from the DHCP server. The server logs show 'no free leases' error. What is the most likely cause?

Accepted Answer

The DHCP server's address range is exhausted.. The 'no free leases' error indicates that the DHCP server has exhausted all available IP addresses in its configured pool. This occurs when the address range defined in the dhcpd.conf file has been fully allocated to clients and no leases are available for new requests. The server logs confirm this specific condition, making address exhaustion the most likely cause.

Answer

The DHCP server's subnet declaration does not match the client's network.

Answer

The dhcpd.conf file has invalid syntax.

Answer

The DHCP relay agent is misconfigured.

Question 3

A new user has been added to the LDAP directory, but the user cannot log in. The admin confirms the LDAP server is reachable and the user entry exists. Which of the following is the most likely missing configuration?

Accepted Answer

The PAM configuration does not include pam_ldap.. D is correct because even if the LDAP server is reachable and the user entry exists, the system must be configured to use LDAP for authentication. PAM (Pluggable Authentication Modules) controls how authentication is performed; without pam_ldap (or pam_ldap.so) in the PAM stack, the system will not consult the LDAP server during login, so authentication fails regardless of the LDAP directory contents.

Answer

The LDAP server does not have the correct schema for the user.

Answer

The nscd cache is stale and needs to be cleared.

Answer

The nsswitch.conf file should have 'ldap' before 'files' for passwd.

Question 4

In a PAM configuration file, which control flag is used for modules that are not required but can provide additional functionality?

Accepted Answer

optional. In PAM (Pluggable Authentication Modules) configuration files, the 'optional' control flag indicates that the module's success or failure is not critical to the overall authentication result. It is used for modules that provide additional functionality, such as logging or session recording, without affecting whether access is granted or denied. This allows administrators to add supplementary checks without breaking existing authentication flows.

Answer

required

Answer

sufficient

Answer

requisite

Question 5

Which directive in ntp.conf enables the NTP server to respond to queries from clients?

Accepted Answer

restrict. The `restrict` directive in ntp.conf controls access to the NTP server, including whether it responds to client queries. By default, NTP servers restrict all access; adding a `restrict` line with the `nomodify` and `notrap` flags (or no restrictive flags) allows clients to query the server. Option C is correct because `restrict` is the directive that explicitly permits or denies NTP queries from clients.

Answer

broadcast

Answer

peer

Answer

server

Question 6

Which THREE statements about PAM configuration are correct? (Select three.)

Accepted Answer

The order of modules in a stack affects the outcome.. Option C is correct because PAM (Pluggable Authentication Modules) processes modules in a defined order within a stack, and the control flags (required, requisite, sufficient, optional) determine how the success or failure of each module affects the overall authentication result. The order matters because a 'sufficient' module that succeeds can cause authentication to succeed immediately, bypassing later modules, while a 'required' module that fails can cause authentication to fail after all modules in the stack have been evaluated.

Answer

The control flag 'required' means the module must succeed; if it fails, authentication fails immediately.

Answer

The module type 'auth' is used for account management.

Question 7

A developer frequently needs to access a remote database server that is only accessible via SSH from a jump host. To simplify access, the administrator wants to create a local port forward so that the developer can connect to localhost:3306 and reach the remote database's MySQL port 3306. Which SSH command achieves this?

Accepted Answer

ssh -L 3306:db.internal:3306 user@jump.example.com. Option B is correct because the `-L` flag creates a local port forward, mapping a local port (3306) to a remote destination (db.internal:3306) via the SSH connection to the jump host (user@jump.example.com). The syntax `-L 3306:db.internal:3306` tells SSH to listen on localhost:3306 and forward all traffic through the jump host to db.internal:3306, which is reachable from the jump host. This allows the developer to connect to localhost:3306 and reach the remote MySQL database.

Answer

ssh -J user@jump.example.com -L 3306:localhost:3306 db.internal

Answer

ssh -L localhost:3306:db.internal:3306 user@jump.example.com

Answer

ssh -R 3306:localhost:3306 user@jump.example.com

Question 8

A system administrator needs to configure an NFS client to automatically mount an exported filesystem from a remote server whenever a user accesses the mount point. Which configuration approach is most appropriate?

Accepted Answer

Configure automount using autofs with an indirect map.. Option A is correct because autofs with an indirect map allows the NFS filesystem to be mounted on-demand when a user accesses the mount point, and automatically unmounted after a period of inactivity. This is the standard Linux approach for dynamic, on-demand NFS mounting without requiring a persistent entry in /etc/fstab or manual intervention.

Answer

Add an entry to /etc/fstab with the 'defaults' option.

Answer

Use the 'mount -t nfs' command each time a user needs access.

Answer

Place a mount command in /etc/rc.local.

Question 9

Which TWO daemons are commonly used by DHCP clients on Linux to obtain an IP address? (Choose two.)

Accepted Answer

dhclient. dhclient is the default DHCP client for many Linux distributions, including those based on Red Hat and Debian. It uses the DHCP protocol (RFC 2131) to discover, request, and lease an IP address from a DHCP server, configuring the network interface accordingly.

Answer

dhcrelay

Answer

dhcpd

Answer

tcpdump

Question 10

What is the recommended way to configure a Linux host to obtain an IP address automatically via DHCP on the eth0 interface?

Accepted Answer

Set 'BOOTPROTO=dhcp' in /etc/sysconfig/network-scripts/ifcfg-eth0.. Option D is correct because on Red Hat-based Linux distributions, the recommended way to configure an interface for DHCP is to set 'BOOTPROTO=dhcp' in the interface configuration file /etc/sysconfig/network-scripts/ifcfg-eth0. This instructs the network service to use the DHCP protocol to obtain an IP address automatically from a DHCP server. The value 'dhcp' is the standard keyword recognized by the ifcfg scripts, not 'dhclient'.

Answer

Set 'BOOTPROTO=dhclient' in /etc/sysconfig/network-scripts/ifcfg-eth0.

Answer

Edit /etc/dhcp/dhcpd.conf to include the host's MAC address.

Answer

Use 'networkctl' to set DHCP=yes on eth0.

Question 11

Which two commands can be used to create a swap space on a partition /dev/sdb2? (Choose two.)

Accepted Answer

mkswap /dev/sdb2. The `mkswap` command initializes a partition or file for use as swap space by writing a swap signature (UUID and superblock) to the device. Option A is correct because `mkswap /dev/sdb2` creates the swap filesystem on the specified partition. Option D is also correct because `mkswap -L swap /dev/sdb2` does the same but additionally assigns a label 'swap' to the swap area, which is a valid variant of the command.

Answer

swapon /dev/sdb2

Answer

dd if=/dev/zero of=/dev/sdb2 bs=1M count=1024

Answer

mkfs.swap /dev/sdb2

Question 12

Given the LDAP client configuration shown in the exhibit, which THREE additional components are required for LDAP authentication to work? (Choose three.)

Accepted Answer

Edit /etc/nsswitch.conf to include ldap in passwd, shadow, and group lines.. Option A is correct because /etc/nsswitch.conf controls which sources the system uses for user, group, and password lookups. Adding 'ldap' to the passwd, shadow, and group lines directs the Name Service Switch (NSS) to query the LDAP directory for authentication-related information, which is essential for integrating LDAP as an identity source.

Answer

Install and configure autofs.

Answer

Configure /etc/krb5.conf for Kerberos.

Question 13

A storage administrator sees the following output from multipath -ll: 'dm-3 (3600605b0038f1f0019f1f7e00000000) size=10G features='0' hwhandler='0' wp=rw' but the paths are all 'failed'. The scsi devices are listed in /proc/scsi/scsi. What is the most likely cause?

Accepted Answer

The SAN fiber cables are disconnected. The output from multipath -ll shows the multipath device dm-3 with its WWID and size, but all paths are 'failed'. Since /proc/scsi/scsi lists the SCSI devices, the host bus adapters (HBAs) and drivers are functioning at the OS level. The most common cause for all paths to fail simultaneously is a physical connectivity issue, such as disconnected SAN fiber cables, which prevents the initiator from reaching the target LUNs.

Answer

The device mapper is not configured

Answer

The multipathd daemon is not running

Answer

The multipath configuration uses user_friendly_names but the bindings file is missing

Question 14

An administrator needs to configure iSCSI multipathing. After setting up two paths, which command should be used to verify the multipath topology?

Accepted Answer

multipath -l. The `multipath -l` command displays the current multipath topology, showing the aggregated device mapper (dm) devices, their underlying paths, and their status (active/passive or active/active). This is the standard tool for verifying multipath configuration after setting up iSCSI paths, as it reads the multipathd state and presents a human-readable map of the multipath devices.

Answer

lsscsi

Answer

dmsetup ls

Answer

iscsiadm -m session -P 3

Question 15

A database server experiences performance degradation. Analysis shows high I/O wait on a LVM logical volume that uses striping across two physical volumes. What is the most effective way to improve performance?

Accepted Answer

Add a cache layer using lvmcache on a fast SSD. Adding a cache layer using lvmcache on a fast SSD is the most effective way to reduce high I/O wait because it places frequently accessed (hot) data on the faster SSD while keeping the bulk of data on the slower striped HDDs. This directly addresses the I/O bottleneck without requiring data migration or downtime, and it leverages the existing striped layout for sequential throughput while improving latency for random reads/writes.

Answer

Increase the stripe size and recreate the LV

Answer

Add an additional PV to the VG and extend the LV

Answer

Convert the LV to use linear mapping instead of striping