LPIC-2 Network Client Management Practice Test 6 — 15 Questions

Question 1

A Linux client is configured with the following in /etc/nslcd.conf: 'uri ldap://10.0.0.1/', 'base dc=example,dc=com'. Which command can be used to test connectivity to the LDAP server and verify the base DN?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

ldapsearch -x -H ldap://10.0.0.1 -b dc=example,dc=com. The `ldapsearch` command with `-x` (simple authentication), `-H ldap://10.0.0.1` (specifying the LDAP URI), and `-b dc=example,dc=com` (setting the search base DN) directly performs an anonymous LDAP search against the server. If the server is reachable and the base DN exists, it returns entries, confirming both connectivity and the validity of the base DN. This matches the configuration in `/etc/nslcd.conf` and is the standard tool for testing LDAP server responses.

Answer

authconfig --test

Answer

getent passwd

Answer

nslcd -d

Question 2

In a PAM configuration file, which control flag is used for modules that are not required but can provide additional functionality?

Accepted Answer

optional. In PAM (Pluggable Authentication Modules) configuration files, the 'optional' control flag indicates that the module's success or failure is not critical to the overall authentication result. It is used for modules that provide additional functionality, such as logging or session recording, without affecting whether access is granted or denied. This allows administrators to add supplementary checks without breaking existing authentication flows.

Answer

required

Answer

sufficient

Answer

requisite

Question 3

Which of the following is a valid NTP configuration file directive to specify a broadcast client?

Accepted Answer

broadcastclient. The `broadcastclient` directive in an NTP configuration file instructs the NTP daemon to listen for NTP broadcast messages on the local network. This is the standard way to configure a client to synchronize time from a broadcast server without specifying individual server addresses.

Answer

peer

Answer

server

Answer

broadcast

Question 4

Which command can be used to test the entire name resolution order as defined in nsswitch.conf?

Accepted Answer

getent hosts. The `getent hosts` command queries the system's Name Service Switch (NSS) configured sources in the exact order defined in `/etc/nsswitch.conf`. It uses the `gethostbyname()` or `getaddrinfo()` library calls, which respect the `hosts:` line in nsswitch.conf (e.g., `files dns myhostname`), testing resolution through each source sequentially until a result is found or all sources are exhausted.

Answer

host

Answer

nslookup

Answer

dig

Question 5

Which THREE statements about PAM configuration are correct? (Select three.)

Accepted Answer

The order of modules in a stack affects the outcome.. Option C is correct because PAM processes each module type's stack in the order listed in the configuration file, and the sequence determines which modules run and how their results combine, so reordering can change the final outcome. Option D is correct because the 'requisite' control flag requires the module to succeed, and on failure it returns immediately without invoking any remaining modules in that stack. Option E is correct because 'sufficient' means that if the module succeeds and no prior required/requisite module has failed, PAM grants success immediately and skips the rest of the stack. Option A is not correct as stated because 'required' failure does not halt processing immediately; PAM continues evaluating the remaining modules and only fails after the stack completes. Option B is not correct because 'auth' performs authentication (verifying identity, e.g., password), whereas account management is handled by the 'account' module type.

Answer

The control flag 'required' means the module must succeed; if it fails, authentication fails immediately.

Answer

The module type 'auth' is used for account management.

Question 6

A system administrator needs to configure an NFS client to automatically mount an exported filesystem from a remote server whenever a user accesses the mount point. Which configuration approach is most appropriate?

Accepted Answer

Configure automount using autofs with an indirect map.. Autofs with an indirect map allows the NFS filesystem to be mounted on-demand when a user accesses the mount point, and automatically unmounted after a period of inactivity. This is the standard Linux approach for dynamic, on-demand NFS mounting without requiring a persistent entry in /etc/fstab or manual intervention.

Answer

Add an entry to /etc/fstab with the 'defaults' option.

Answer

Use the 'mount -t nfs' command each time a user needs access.

Answer

Place a mount command in /etc/rc.local.

Question 7

What is the recommended way to configure a Linux host to obtain an IP address automatically via DHCP on the eth0 interface?

Accepted Answer

Set 'BOOTPROTO=dhcp' in /etc/sysconfig/network-scripts/ifcfg-eth0.. On Red Hat-based Linux distributions, the recommended way to configure an interface for DHCP is to set 'BOOTPROTO=dhcp' in the interface configuration file /etc/sysconfig/network-scripts/ifcfg-eth0. This instructs the network service to use the DHCP protocol to obtain an IP address automatically from a DHCP server. The value 'dhcp' is the standard keyword recognized by the ifcfg scripts, not 'dhclient'.

Answer

Set 'BOOTPROTO=dhclient' in /etc/sysconfig/network-scripts/ifcfg-eth0.

Answer

Edit /etc/dhcp/dhcpd.conf to include the host's MAC address.

Answer

Use 'networkctl' to set DHCP=yes on eth0.

Question 8

An administrator configures an NIS client by running 'ypbind' and updating /etc/nsswitch.conf to include 'nis' for passwd, shadow, and group. However, 'getent passwd' still shows only local users. Which step is most likely missing?

Accepted Answer

Edit /etc/yp.conf to specify the NIS server's domain and address.. The NIS client must know which NIS server to contact for domain information. This is configured in /etc/yp.conf, which specifies the NIS domain name and the server's hostname or IP address. Without this file, ypbind cannot locate a server, so getent falls back to local sources despite nsswitch.conf listing 'nis'.

Answer

Restart the ypserv service on the client.

Answer

Execute 'yppasswd' to initialize NIS client.

Answer

Run 'make -C /var/yp' on the client.

Question 9

Which TWO daemons are commonly used by DHCP clients on Linux to obtain an IP address? (Choose two.)

Accepted Answer

dhclient. dhclient (A) is the classic ISC DHCP client daemon that sends DHCPDISCOVER/DHCPREQUEST messages to obtain a lease and configure the interface, making it a correct answer. dhcpcd (B) is another widely used DHCP client daemon (common on many distros and embedded systems) that performs the same client-side lease acquisition, so it is also correct. dhcrelay (C) is a DHCP relay agent that forwards DHCP messages between clients and servers on different subnets, not a client. dhcpd (D) is the ISC DHCP server daemon that assigns addresses, not a client. tcpdump (E) is a packet capture tool, not a DHCP client daemon.

Answer

dhcrelay

Answer

dhcpd

Answer

tcpdump

Question 10

Which TWO are true about the autofs automounter configuration? (Choose two.)

Accepted Answer

The master configuration file is /etc/auto.master.. Option C is correct because /etc/auto.master is indeed the master configuration file for autofs; it lists mount points along with the map files that define the individual mounts, and it is the primary file the automounter reads. Option E is correct because direct maps allow autofs to manage mount points at arbitrary absolute paths that do not fall under a single parent directory such as /net or /home, unlike indirect maps which require a common base directory. Option A is incorrect because autofs mounts are typically unmounted automatically after a timeout period of inactivity, not kept indefinitely. Option B is incorrect because autofs uses its own map files (such as /etc/auto.master and associated maps) rather than /etc/fstab to define automount points. Option D is incorrect because autofs supports many filesystem types beyond NFS, including local filesystems, CIFS/SMB, and others.

Answer

Autofs mounts remain indefinitely once accessed.

Answer

Autofs uses /etc/fstab to define automount points.

Answer

Autofs can only be used with NFS filesystems.

Question 11

A DHCP client reports it cannot obtain an IP address. The Ethernet cable is connected and the interface is up. The administrator runs 'dhclient eth0' but gets 'No DHCPOFFERS received'. The network has a DHCP server on the same subnet. Which command should the administrator use next to diagnose the problem?

Accepted Answer

Run 'tcpdump -i eth0 port 67 or port 68' to monitor DHCP packets.. The client is not receiving DHCPOFFERs, indicating a network-level issue with DHCP traffic. Using tcpdump to capture packets on ports 67 (BOOTP server) and 68 (BOOTP client) allows the administrator to see if DHCPDISCOVER packets are leaving the client and whether any DHCPOFFER packets arrive from the server. This directly isolates whether the problem is a lack of server response, packet filtering, or a misconfigured relay agent.

Answer

Run 'route -n' to see if a default route exists.

Answer

Run 'netstat -i eth0' to check packet errors.

Answer

Run 'ifconfig eth0' to check the interface status.

Question 12

A user reports that they cannot SSH to a remote server using the usual command 'ssh user@remote.example.com'. The administrator tests and gets 'Permission denied (publickey,gssapi-keyex,gssapi-with-mic)'. The user's public key is in ~/.ssh/authorized_keys on the remote server. The local client has the matching private key. Which step should the administrator take to resolve the issue?

Accepted Answer

Check /var/log/auth.log on the remote server to see why the key was rejected.. The error message indicates that the SSH server rejected all offered authentication methods, including publickey. Since the user's public key is in the remote server's authorized_keys file and the client has the matching private key, the most likely cause is a file permission or SELinux/AppArmor issue on the remote server, or a key format mismatch. Checking /var/log/auth.log on the remote server will show the exact reason for the rejection, such as 'bad permissions' or 'key not recognized', allowing targeted troubleshooting.

Answer

Generate a new RSA key pair on the client with ssh-keygen.

Answer

Run 'ssh-add' to add the private key to the SSH agent.

Answer

Restart the sshd service on the client.

Question 13

A Linux client is configured to use PAM for authentication against an LDAP server. The /etc/pam.d/system-auth includes 'auth required pam_ldap.so'. Users can authenticate successfully. However, when a user runs 'id username', it shows 'uid=1000(username) gid=100(users) groups=100(users)' but the LDAP group membership is not shown. Which configuration file is most likely misconfigured?

Accepted Answer

The /etc/nsswitch.conf 'group' line does not include 'ldap'.. The 'id' command queries the Name Service Switch (NSS) to resolve user and group information. Even though PAM (via pam_ldap.so) successfully authenticates the user against LDAP, the group membership lookup fails because NSS is not configured to consult LDAP for group data. The /etc/nsswitch.conf file must include 'ldap' in the 'group' line (e.g., 'group: files ldap') to enable the system to retrieve LDAP group memberships.

Answer

The PAM configuration uses 'required' instead of 'sufficient' for pam_ldap.

Answer

The /etc/ldap.conf file is missing the 'nss_base_group' line.

Answer

The autofs service is not running.

Question 14

Which TWO statements about the DHCP client on Linux are correct?

Accepted Answer

The dhclient command can be used to release and renew a DHCP lease.. Option A is correct because dhclient supports the -r flag to release the current lease and the -n/-1 or simply re-running it to renew, making it the standard ISC DHCP client tool for managing leases on Linux. Option B is correct because /etc/dhcp/dhclient.conf accepts the 'send host-name "name";' directive, which controls the hostname the client transmits to the DHCP server in its DHCPDISCOVER/DHCPREQUEST messages. Option C is wrong because dhclient-script is invoked by dhclient to configure the interface (IP address, routes, DNS) based on the lease, not to parse /etc/resolv.conf; the script writes resolv.conf rather than parsing it. Option D is wrong because dhcpcd is one of several clients (alongside dhclient, NetworkManager's internal client, and systemd-networkd) and is not the standard on all distributions. Option E is wrong because /etc/dhcpd.conf configures the DHCP server daemon (dhcpd), not the client; the client configuration file is /etc/dhcp/dhclient.conf.

Answer

The dhclient-script is used to parse the /etc/resolv.conf file.

Answer

The dhcpcd daemon is the standard DHCP client on all Linux distributions.

Answer

The /etc/dhcpd.conf file configures the DHCP client.

Question 15

Refer to the exhibit. A client with MAC address 08:00:27:ab:cd:ef on the 192.168.1.0/24 network receives IP 192.168.2.10 instead of an IP from the 192.168.1.0 subnet. What is the most likely explanation?

Accepted Answer

The server's host declaration assigns a fixed-address from a different subnet.. The DHCP server's host declaration explicitly assigns a fixed-address to the client's MAC address (08:00:27:ab:cd:ef) from a different subnet (192.168.2.10). In ISC DHCP, the 'host' block with a 'fixed-address' directive overrides any subnet pool selection, forcing the server to offer that specific IP regardless of the relay agent or client's subnet. This is a common misconfiguration when administrators copy host declarations between subnet definitions without updating the address.

Answer

The relay agent is misconfigured and forwards requests to the wrong subnet.

Answer

The client's network interface is set to a static IP address.

Answer

The client sent a DHCP request with an incorrect subnet mask.