LPIC-2 Network Client Management Practice Test 5 — 15 Questions

Question 1

Which command can be used to test the entire name resolution order as defined in nsswitch.conf?

Accepted Answer

getent hosts. The `getent hosts` command queries the system's Name Service Switch (NSS) configured sources in the exact order defined in `/etc/nsswitch.conf`. It uses the `gethostbyname()` or `getaddrinfo()` library calls, which respect the `hosts:` line in nsswitch.conf (e.g., `files dns myhostname`), testing resolution through each source sequentially until a result is found or all sources are exhausted.

Answer

host

Answer

nslookup

Answer

dig

Question 2

Which TWO options in dhcpd.conf are used to define the subnet and the address range for dynamic allocation? (Select two.)

Accepted Answer

range 192.168.1.10 192.168.1.100;. The `range` directive in `dhcpd.conf` explicitly defines the pool of IP addresses available for dynamic (DHCP) allocation. Option E is correct because the `subnet` declaration specifies the network segment and netmask, creating the context in which the `range` statement must be nested to function. Together, they define both the subnet boundary and the dynamic address pool.

Answer

option subnet-mask 255.255.255.0;

Answer

pool { ... }

Answer

host fixed-address 192.168.1.200;

Question 3

Which TWO commands can be used to query a DHCP server's lease database on a Linux server running ISC DHCP? (Assume default paths.) (Select two.)

Accepted Answer

cat /var/lib/dhcp/dhcpd.leases. The ISC DHCP server stores its lease database in a plain-text file at `/var/lib/dhcp/dhcpd.leases` by default. Reading this file with `cat` directly displays all active and expired leases, including IP addresses, MAC addresses, and lease durations. Option C is correct because `dhcp-lease-list` is a utility that parses the same lease file and presents the data in a formatted, human-readable table.

Answer

dhcpd -t

Answer

less /etc/dhcp/dhcpd.conf

Answer

dhcpd -p

Question 4

Which THREE statements about PAM configuration are correct? (Select three.)

Accepted Answer

The order of modules in a stack affects the outcome.. PAM (Pluggable Authentication Modules) processes modules in a defined order within a stack, and the control flags (required, requisite, sufficient, optional) determine how the success or failure of each module affects the overall authentication result. The order matters because a 'sufficient' module that succeeds can cause authentication to succeed immediately, bypassing later modules, while a 'required' module that fails can cause authentication to fail after all modules in the stack have been evaluated.

Answer

The control flag 'required' means the module must succeed; if it fails, authentication fails immediately.

Answer

The module type 'auth' is used for account management.

Question 5

A system administrator needs to configure an NFS client to automatically mount an exported filesystem from a remote server whenever a user accesses the mount point. Which configuration approach is most appropriate?

Accepted Answer

Configure automount using autofs with an indirect map.. Autofs with an indirect map allows the NFS filesystem to be mounted on-demand when a user accesses the mount point, and automatically unmounted after a period of inactivity. This is the standard Linux approach for dynamic, on-demand NFS mounting without requiring a persistent entry in /etc/fstab or manual intervention.

Answer

Add an entry to /etc/fstab with the 'defaults' option.

Answer

Use the 'mount -t nfs' command each time a user needs access.

Answer

Place a mount command in /etc/rc.local.

Question 6

An LDAP client fails to authenticate users against an LDAP server. The /etc/nsswitch.conf includes 'passwd: files ldap' and the /etc/pam.d/system-auth has appropriate pam_ldap.so entries. However, 'getent passwd' shows only local users. Which command should the administrator run first to diagnose the issue?

Accepted Answer

Run 'ldapsearch -x -H ldap://server -b dc=example,dc=com' to test connectivity.. The first step in diagnosing an LDAP authentication failure is to verify basic connectivity to the LDAP server. Running 'ldapsearch -x -H ldap://server -b dc=example,dc=com' tests whether the client can reach the server and perform a simple anonymous search. If this fails, no amount of configuration tweaking will resolve the issue, as the root cause is likely network or server availability.

Answer

View the contents of /etc/nsswitch.conf.

Answer

Restart the nslcd service.

Answer

Check the syntax of /etc/ldap.conf with 'slaptest -f /etc/ldap.conf'.

Question 7

What is the recommended way to configure a Linux host to obtain an IP address automatically via DHCP on the eth0 interface?

Accepted Answer

Set 'BOOTPROTO=dhcp' in /etc/sysconfig/network-scripts/ifcfg-eth0.. On Red Hat-based Linux distributions, the recommended way to configure an interface for DHCP is to set 'BOOTPROTO=dhcp' in the interface configuration file /etc/sysconfig/network-scripts/ifcfg-eth0. This instructs the network service to use the DHCP protocol to obtain an IP address automatically from a DHCP server. The value 'dhcp' is the standard keyword recognized by the ifcfg scripts, not 'dhclient'.

Answer

Set 'BOOTPROTO=dhclient' in /etc/sysconfig/network-scripts/ifcfg-eth0.

Answer

Edit /etc/dhcp/dhcpd.conf to include the host's MAC address.

Answer

Use 'networkctl' to set DHCP=yes on eth0.

Question 8

A developer frequently needs to access a remote database server that is only accessible via SSH from a jump host. To simplify access, the administrator wants to create a local port forward so that the developer can connect to localhost:3306 and reach the remote database's MySQL port 3306. Which SSH command achieves this?

Accepted Answer

ssh -L 3306:db.internal:3306 user@jump.example.com. `ssh -L 3306:db.internal:3306 user@jump.example.com` forwards local port 3306 to `db.internal:3306` through the jump host, allowing the developer to connect to localhost:3306 and reach the remote database. Option E is incorrect because `-L 3306:localhost:3306` forwards to the jump host's own localhost, not the database server; this would only work if the database were running on the jump host itself, which is not the case.

Answer

ssh -J user@jump.example.com -L 3306:localhost:3306 db.internal

Answer

ssh -L localhost:3306:db.internal:3306 user@jump.example.com

Answer

ssh -R 3306:localhost:3306 user@jump.example.com

Answer

ssh -L 3306:localhost:3306 user@jump.example.com

Question 9

An administrator configures an NIS client by running 'ypbind' and updating /etc/nsswitch.conf to include 'nis' for passwd, shadow, and group. However, 'getent passwd' still shows only local users. Which step is most likely missing?

Accepted Answer

Edit /etc/yp.conf to specify the NIS server's domain and address.. The NIS client must know which NIS server to contact for domain information. This is configured in /etc/yp.conf, which specifies the NIS domain name and the server's hostname or IP address. Without this file, ypbind cannot locate a server, so getent falls back to local sources despite nsswitch.conf listing 'nis'.

Answer

Restart the ypserv service on the client.

Answer

Execute 'yppasswd' to initialize NIS client.

Answer

Run 'make -C /var/yp' on the client.

Question 10

Which TWO daemons are commonly used by DHCP clients on Linux to obtain an IP address? (Choose two.)

Accepted Answer

dhclient. dhclient is the default DHCP client for many Linux distributions, including those based on Red Hat and Debian. It uses the DHCP protocol (RFC 2131) to discover, request, and lease an IP address from a DHCP server, configuring the network interface accordingly.

Answer

dhcrelay

Answer

dhcpd

Answer

tcpdump

Question 11

Given the LDAP client configuration shown in the exhibit, which THREE additional components are required for LDAP authentication to work? (Choose three.)

Accepted Answer

Edit /etc/nsswitch.conf to include ldap in passwd, shadow, and group lines.. /etc/nsswitch.conf controls which sources the system uses for user, group, and password lookups. Adding 'ldap' to the passwd, shadow, and group lines directs the Name Service Switch (NSS) to query the LDAP directory for authentication-related information, which is essential for integrating LDAP as an identity source.

Answer

Install and configure autofs.

Answer

Configure /etc/krb5.conf for Kerberos.

Question 12

Which TWO are true about the autofs automounter configuration? (Choose two.)

Accepted Answer

The master configuration file is /etc/auto.master.. The autofs automounter uses /etc/auto.master as its master configuration file. This file defines the base directories for automount points and references subordinate map files (e.g., /etc/auto.home) that specify the actual mount details. The automounter daemon (automount) reads this master file to determine which directories to manage and how to mount filesystems on demand.

Answer

Autofs mounts remain indefinitely once accessed.

Answer

Autofs uses /etc/fstab to define automount points.

Answer

Autofs can only be used with NFS filesystems.

Question 13

A company's file server uses NFS to export /data to clients. An administrator configures an NFS client by running 'mount -t nfs fileserver:/data /mnt/data'. The mount succeeds and the user can read files. However, after a network interruption, the client system becomes unresponsive when a user attempts to access /mnt/data. Which action should the administrator take to prevent this issue in the future?

Accepted Answer

Add the 'soft' option to the mount command: 'mount -t nfs -o soft fileserver:/data /mnt/data'.. Using a 'soft' mount causes NFS operations to return an error to the calling application after a timeout, rather than hanging indefinitely. This prevents the client system from becoming unresponsive when the NFS server is unreachable, as the kernel will not retry the request forever. The default 'hard' mount (used in the original command) will keep retrying until the server responds, which can block processes and make the system appear frozen.

Answer

Add the 'intr' mount option to allow signal interrupts.

Answer

Increase the timeout value with 'timeo=600' and keep the hard mount.

Answer

Use the 'noac' option to disable attribute caching.

Question 14

An organization uses LDAP for centralized authentication. The /etc/nsswitch.conf contains 'passwd: files ldap' and 'shadow: files ldap'. The /etc/pam.d/system-auth includes 'auth requisite pam_ldap.so' and 'account required pam_ldap.so'. However, users can log in using local accounts but not LDAP accounts. The ldapsearch command works correctly against the LDAP server. Logs show 'pam_ldap: error trying to bind as user (No such object)'. Which configuration change is most likely needed?

Accepted Answer

Ensure /etc/ldap.conf contains a valid 'binddn' and 'bindpw' for the search user.. The error 'pam_ldap: error trying to bind as user (No such object)' indicates that PAM LDAP cannot find the user entry in the LDAP directory. This typically occurs because the binddn (the search user) specified in /etc/ldap.conf is incorrect or missing, preventing PAM from performing the initial search to locate the user's DN. Since ldapsearch works manually, the LDAP server is reachable, but the PAM module lacks the credentials to bind and search for users.

Answer

Open TCP port 389 on the client firewall.

Answer

Add 'uri ldaps://ldap.example.com' to /etc/ldap.conf.

Answer

Restart the nscd service.

Question 15

A DHCP client reports it cannot obtain an IP address. The Ethernet cable is connected and the interface is up. The administrator runs 'dhclient eth0' but gets 'No DHCPOFFERS received'. The network has a DHCP server on the same subnet. Which command should the administrator use next to diagnose the problem?

Accepted Answer

Run 'tcpdump -i eth0 port 67 or port 68' to monitor DHCP packets.. The client is not receiving DHCPOFFERs, indicating a network-level issue with DHCP traffic. Using tcpdump to capture packets on ports 67 (BOOTP server) and 68 (BOOTP client) allows the administrator to see if DHCPDISCOVER packets are leaving the client and whether any DHCPOFFER packets arrive from the server. This directly isolates whether the problem is a lack of server response, packet filtering, or a misconfigured relay agent.

Answer

Run 'route -n' to see if a default route exists.

Answer

Run 'netstat -i eth0' to check packet errors.

Answer

Run 'ifconfig eth0' to check the interface status.