LPIC-2 Practice Test 8 — 10 Questions

Question 1

A server reports packet loss on a bonded interface (mode 4). The switch configuration is verified correct. Running ethtool shows all slaves are connected at 1 Gbps full duplex. Which command should be used to check if the LACP negotiation is successful?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

cat /proc/net/bonding/bond0. `/proc/net/bonding/bond0` displays the current bonding status, including LACP negotiation details such as the LACP state (e.g., 'negotiated' or 'expired'), partner system MAC, and port key. This is the standard Linux interface to verify that LACP (802.3ad) has successfully established a link aggregation group with the switch.

Answer

tcpdump -i bond0 ether proto 0x8809

Answer

ethtool -S bond0

Answer

ip link show bond0

Answer

bridge link show

Question 2

A system administrator notices that the network bond interface bond0 is not operational. The bond is configured using mode 1 (active-backup). The physical interfaces eth0 and eth1 are both up but bond0 shows 'DOWN'. Which of the following is the most likely cause?

Accepted Answer

The physical interfaces must be set to the 'down' state before being added as slaves.. In Linux bonding, when adding physical interfaces as slaves to a bond in mode 1 (active-backup), the slave interfaces must be in the 'down' state before being enslaved. If they are already 'up', the bond may fail to recognize them correctly, leaving bond0 in a 'DOWN' state even though the physical links are up. This is because the bonding driver expects to take control of the interface's link state and will not properly manage a slave that is already administratively up.

Answer

The bond mode is set to an unsupported value.

Answer

The bonding module has not been loaded into the kernel.

Answer

The bond0 interface has not been assigned an IP address.

Question 3

A Linux router needs to forward DHCP broadcasts from clients on subnet 192.168.1.0/24 (eth0) to a DHCP server at 10.0.0.5. Which command starts a DHCP relay agent?

Accepted Answer

dhcrelay -i eth0 10.0.0.5. The correct command is `dhcrelay -i eth0 10.0.0.5`. This starts the DHCP relay agent (ISC DHCP relay) on interface eth0, listening for DHCP broadcast packets (UDP port 67) from clients on subnet 192.168.1.0/24 and forwarding them as unicast to the DHCP server at 10.0.0.5. The relay agent also relays the server's unicast replies back to the client, enabling DHCP service across subnets without a local DHCP server.

Answer

dhcpd -cf /etc/dhcp/dhcpd.conf

Answer

iptables -A INPUT -i eth0 -p udp --dport 67 -j REDIRECT

Answer

dnsmasq -i eth0

Question 4

Which TWO tools are commonly used for traffic shaping and QoS on Linux? (Choose two.)

Accepted Answer

wondershaper. Wondershaper is a user-friendly shell script that wraps the `tc` command to simplify traffic shaping by limiting bandwidth on a network interface. It uses the Linux kernel's QoS capabilities, specifically the HTB (Hierarchical Token Bucket) queuing discipline, to prioritize and throttle traffic. This makes it a common tool for basic traffic shaping tasks on Linux.

Answer

ethtool

Answer

iptables

Answer

route

Question 5

A Samba share is used by macOS clients. File names with special characters (e.g., ©) appear garbled. Which parameter should be added to the share configuration?

Accepted Answer

fruit:aapl = yes. The `fruit:aapl = yes` parameter enables the Samba VFS module for macOS (Apple Filing Protocol) compatibility, which handles special characters like © by mapping them to Unicode-compatible representations that macOS clients expect. Without this, macOS clients may misinterpret or garble filenames with non-ASCII characters when accessing Samba shares.

Answer

vfs objects = catia

Answer

dos charset = CP850

Answer

mangled names = yes

Question 6

Which TWO of the following are valid methods to join a Samba server to an Active Directory domain using Samba 4?

Accepted Answer

`net ads join`. `net ads join` is the traditional Samba tool for joining an Active Directory domain using the LDAP and Kerberos protocols over TCP/IP, which is the standard method for Samba 3 and later versions. Option D is correct because `samba-tool domain join` is the native Samba 4 command that directly integrates with the built-in AD domain controller functionality, allowing a Samba server to join an existing AD domain as a member server.

Answer

`smbpasswd -j`

Answer

`winbindd -j`

Answer

`net rpc join`

Question 7

A Postfix mail server is configured to use Dovecot SASL for authentication. Users report that they can send emails but are prompted for password repeatedly and see "SASL authentication failed" in the logs. The Dovecot SASL socket is configured correctly. What is the most likely cause?

Accepted Answer

The postfix user does not have permission to access the Dovecot auth socket.. The most common cause of repeated password prompts and 'SASL authentication failed' errors when Postfix is configured to use Dovecot SASL is a permissions issue on the Dovecot auth socket. Even if the socket path is correct in Postfix's `smtpd_sasl_path`, the Postfix process (typically running as the `postfix` user) must have read/write access to that socket file. Without proper permissions, Postfix cannot communicate with Dovecot's authentication service, causing SASL failures despite correct authentication mechanisms and enabled settings.

Answer

The mynetworks parameter in Postfix is set to the wrong subnet.

Answer

The Dovecot auth mechanism is set to 'login' but Postfix expects 'PLAIN'.

Answer

The smtpd_sasl_auth_enable parameter is set to no.

Question 8

A Samba server is configured as above. Users alice and bob have local system accounts but neither can connect to the share. What is the most likely cause?

Accepted Answer

The users have not been added to the Samba password database.. Samba maintains its own password database separate from the local system accounts. Even though alice and bob have valid local UNIX accounts, they must also be added to the Samba password database using `smbpasswd -a` or `pdbedit -a` before they can authenticate to any Samba share. Without this step, Samba will reject their connection attempts regardless of share permissions or path validity.

Answer

The share path /srv/share does not exist or has incorrect permissions.

Answer

The parameter 'read only = no' is misspelled; it should be 'writable = yes'.

Answer

The valid users list must use group names with '@' prefix, not individual names.

Question 9

Refer to the exhibit. A user cannot connect to the 'share2' Samba share. What is the most likely cause?

Accepted Answer

The share path does not exist or is not accessible.. The most common cause of a user being unable to connect to a Samba share is that the share path specified in the smb.conf file does not exist or is not accessible by the Samba service. Samba does not create the underlying directory; it only maps the share name to a path. If the path is missing, permissions are wrong, or the filesystem is not mounted, the connection will fail with an error like 'NT_STATUS_OBJECT_PATH_NOT_FOUND'.

Answer

The Samba service is not running.

Answer

The user does not have permission to read the share.

Answer

The share name is too long.

Question 10

After modifying /etc/samba/smb.conf, an administrator runs a command to validate the configuration. Which command is correct?

Accepted Answer

testparm. The correct command is `testparm`, which is specifically designed to validate the syntax and configuration of the `/etc/samba/smb.conf` file. It checks for errors in parameters, missing sections, and logical inconsistencies without restarting the Samba services, making it the standard tool for configuration verification.

Answer

smbpasswd

Answer

smbcontrol

Answer

samba-tool