LPIC-2 Network Client Management Practice Test 5 — 15 Questions

Question 1

A DHCP server is configured to serve multiple subnets but only clients on one subnet receive IP addresses. The server is connected to a router that does not forward DHCP broadcasts. What should be configured to support the other subnets?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Set up a DHCP relay agent on the other subnets. The router does not forward DHCP broadcasts, so clients on other subnets cannot reach the DHCP server. A DHCP relay agent (e.g., `dhcrelay` or `ip helper-address`) intercepts broadcast requests on those subnets and forwards them as unicast to the DHCP server, allowing the server to assign addresses from the appropriate subnet pools. This is the standard solution per RFC 1542 when routers do not support BOOTP forwarding.

Answer

Add more subnet declarations to the DHCP server

Answer

Add 'shared-network' declarations

Answer

Configure the router to act as a DHCP server

Question 2

An administrator wants to automatically mount home directories from an NFS server when a user logs in. Which service should be configured?

Accepted Answer

autofs. Autofs is the correct service because it provides on-demand mounting of NFS home directories triggered by user login. It uses the automount daemon to mount directories only when accessed, reducing network overhead and avoiding permanent mount entries in /etc/fstab. This is the standard Linux solution for dynamic NFS home directory mounting.

Answer

rpcbind

Answer

smb

Answer

nfs

Question 3

Which TWO Samba security modes are considered insecure and should be avoided? (Choose two.)

Accepted Answer

share. Options A (share) and B (server) are the two insecure Samba security modes that should be avoided. In share mode, Samba performs no authentication at all — each client is mapped to a single guest or specified user, so anyone with network access can read/write shares without credentials, which is why it is deprecated and dangerous. In server mode, Samba delegates authentication to a separate SMB server (typically a Windows server) by passing the username and plaintext password to that remote host; this exposes credentials on the wire and relies on an external, often untrusted, authentication source, making it insecure. By contrast, C (domain) makes Samba a domain member authenticating against a domain controller, D (user) is the default mode where Samba itself validates credentials against its local smbpasswd/tdbsam database, and E (ads) makes Samba an Active Directory domain member using Kerberos — all three are the recommended, secure modes.

Answer

domain

Answer

user

Answer

ads

Question 4

A client mounts the export with 'mount -t nfs server:/data /mnt/data' and root on the client can write files. Which option in /etc/exports allows root to retain its privileges?

Accepted Answer

no_root_squash. (no_root_squash) is correct because it prevents the NFS server from mapping the client's root user (UID 0) to the anonymous 'nobody' user. By default, NFS exports use root_squash, which maps root to an unprivileged user for security. With no_root_squash, the client's root retains UID 0 on the server, allowing write access to files owned by root on the export.

Answer

root_squash

Answer

rw

Answer

async

Question 5

Which file on a Linux client determines the order in which different name resolution methods (e.g., hosts file, DNS, LDAP) are consulted?

Accepted Answer

/etc/nsswitch.conf. /etc/nsswitch.conf (Name Service Switch) controls the order and sources for system databases like 'hosts', 'passwd', and 'group'. For hostname resolution, the 'hosts' line specifies the lookup order (e.g., 'files dns ldap'), meaning the system checks /etc/hosts first, then DNS, then LDAP. This file is the central configuration for name resolution order on Linux systems.

Answer

/etc/host.conf

Answer

/etc/resolv.conf

Answer

/etc/named.conf

Question 6

An administrator notices that an NFS mount on a client becomes unresponsive when the NFS server goes offline. The admin wants the mount to return an error to the application after a short timeout instead of hanging indefinitely. Which mount option should be added to the fstab entry?

Accepted Answer

soft. The `soft` mount option causes the NFS client to return an error to the application after a short timeout (typically 60 seconds by default) if the NFS server becomes unresponsive, rather than hanging indefinitely. This is the correct choice because the administrator specifically wants the mount to return an error after a short timeout instead of hanging.

Answer

intr

Answer

bg

Answer

hard

Question 7

Which command is used to list the NFS exports available from a specific server?

Accepted Answer

showmount -e server. The `showmount -e server` command queries the NFS server's mount daemon (rpc.mountd) to list the exported filesystems that are currently available. This is the standard method for a client to discover which NFS shares a server is offering, as it directly interrogates the server's export list via the RPC protocol.

Answer

mount -t nfs4 server:/export /mnt

Answer

nfsstat

Answer

exportfs -a

Question 8

A laptop user frequently moves between different networks. The administrator wants the DNS configuration to update automatically when the laptop connects to a new network via DHCP. Which service or tool is most appropriate for this task?

Accepted Answer

NetworkManager. NetworkManager is the most appropriate tool because it is designed to manage network connections on modern Linux systems, automatically detecting network changes and reconfiguring DNS settings based on DHCP-provided information. It integrates with various backends (e.g., systemd-resolved, resolvconf) to update the system's DNS configuration dynamically, making it ideal for a laptop that frequently moves between networks.

Answer

systemd-resolved

Answer

dhcpcd

Answer

resolvconf

Question 9

Which protocol does Samba implement to provide file sharing services to Windows clients?

Accepted Answer

SMB. Samba implements the SMB (Server Message Block) protocol, specifically the CIFS variant, to provide file and printer sharing services to Windows clients. SMB operates over TCP port 445 (direct hosting) or NetBIOS over TCP/IP (ports 137-139), enabling cross-platform file access in mixed Linux/Windows environments.

Answer

HTTP

Answer

AFP

Answer

NFS

Question 10

The DHCP client lease file shows a lease for 192.168.1.100. If the client fails to contact the original DHCP server by the rebind time (12:00), what will occur?

Accepted Answer

The client will attempt to contact any DHCP server to extend the lease.. When a DHCP client reaches the rebind time (T2, default 87.5% of lease duration) without contacting the original server, it enters the REBINDING state. In this state, the client broadcasts a DHCPREQUEST to any available DHCP server to extend the lease. Option D correctly describes this behavior, as defined in RFC 2131.

Answer

The client will continue to use the address until the expire time without any further attempts.

Answer

The client will immediately release the address.

Answer

The client will rebind with a new IP address from any server.

Question 11

Which TWO commands can be used to connect to a Samba share from a Linux command line?

Accepted Answer

smbclient. smbclient (B) is correct because it is the Samba client utility designed to connect to SMB/CIFS shares from the Linux command line, e.g. 'smbclient //server/share -U user', allowing browsing and file transfer over the SMB protocol. mount.cifs (D) is correct because it mounts a remote SMB/CIFS share into the local filesystem, typically via 'mount -t cifs //server/share /mnt/point -o username=user', which is the standard way to access a Samba share as a mounted directory. sshfs (A) is wrong because it mounts shares over SFTP/SSH, not the SMB/CIFS protocol used by Samba. nfsmount (C) is wrong because it is not a real command and NFS is a different protocol from SMB/CIFS. ftp (E) is wrong because it uses the FTP protocol, which is unrelated to Samba's SMB/CIFS sharing.

Answer

sshfs

Answer

nfsmount

Answer

ftp

Question 12

Which THREE files are commonly involved in configuring a Linux client for LDAP authentication?

Accepted Answer

/etc/pam.d/system-auth. Option C, /etc/pam.d/system-auth, is correct because PAM (Pluggable Authentication Modules) must be configured to route authentication requests to the LDAP server via modules such as pam_ldap.so or pam_sss.so, and on RHEL/CentOS systems this is the primary PAM stack file for system authentication. Option D, /etc/ldap.conf, is correct because it holds the LDAP client parameters — the server URI (e.g., ldap://ldap.example.com), base DN, and TLS settings — that the pam_ldap and nss_ldap libraries read to contact the directory. Option E, /etc/nsswitch.conf, is correct because its passwd, shadow, and group lines must include ldap (e.g., 'passwd: files ldap') so the Name Service Switch actually queries LDAP for user and group lookups. Option A, /etc/hosts, is not required for LDAP authentication since it only provides static hostname-to-IP mappings and is unrelated to directory service configuration. Option B, /etc/resolv.conf, is not required either, as it merely configures DNS resolution and is not a file that configures LDAP authentication itself.

Answer

/etc/hosts

Answer

/etc/resolv.conf

Question 13

Which file is used to configure the LDAP client for system authentication on a modern Linux system using nss-pam-ldapd?

Accepted Answer

/etc/nslcd.conf. /etc/nslcd.conf is the configuration file for nslcd, the LDAP name service daemon used by nss-pam-ldapd to perform LDAP queries for system authentication and user/group lookups. This daemon communicates with the LDAP server and provides the results to NSS and PAM modules, making it the central configuration point for LDAP client authentication on modern Linux systems.

Answer

/etc/openldap/ldap.conf

Answer

/etc/nsswitch.conf

Answer

/etc/ldap.conf

Question 14

Which directive in dhcpd.conf sets the maximum lease time?

Accepted Answer

max-lease-time. The `max-lease-time` directive in `dhcpd.conf` explicitly sets the maximum lease time (in seconds) that the DHCP server will assign to a client, overriding any client request for a longer lease. This ensures the server enforces an upper bound on lease duration, preventing clients from monopolizing IP addresses indefinitely.

Answer

option lease-time

Answer

default-lease-time

Answer

lease-time

Question 15

An administrator notices that clients are unable to obtain IP addresses from the DHCP server. The server logs show 'no free leases' error. What is the most likely cause?

Accepted Answer

The DHCP server's address range is exhausted.. The 'no free leases' error indicates that the DHCP server has exhausted all available IP addresses in its configured pool. This occurs when the address range defined in the dhcpd.conf file has been fully allocated to clients and no leases are available for new requests. The server logs confirm this specific condition, making address exhaustion the most likely cause.

Answer

The DHCP server's subnet declaration does not match the client's network.

Answer

The dhcpd.conf file has invalid syntax.

Answer

The DHCP relay agent is misconfigured.