LPIC-2 Timed Practice Test 1 — 10 Questions

Question 1

Arrange the steps to perform a disaster recovery from a full system backup using tar.

Accepted Answer

Boot into rescue mode, then prepare disks, then mount the root filesystem, then extract backup using tar, then reboot.. The correct sequence for disaster recovery from a full system backup using tar ensures a logical progression: first gain access to a recovery environment (rescue mode), then prepare the storage devices, mount the target filesystem, restore the data from the backup archive, and finally reboot to the restored system. Any deviation leads to errors such as missing filesystem or incomplete restoration.

Answer

Boot into rescue mode, then mount the root filesystem, then prepare disks, then extract backup using tar, then reboot.

Answer

Boot into rescue mode, then prepare disks, then extract backup using tar, then mount the root filesystem, then reboot.

Answer

Boot into rescue mode, then prepare disks, then mount the root filesystem, then reboot, then extract backup using tar.

Question 2

Which TWO of the following commands can be used to list currently loaded kernel modules? (Choose two.)

Accepted Answer

cat /proc/modules. `/proc/modules` is a virtual file maintained by the kernel that lists all currently loaded kernel modules, including their size, usage count, and dependent modules. Reading this file provides a real-time snapshot of the kernel's module state. Option E is correct because `lsmod` is a user-space utility that parses `/proc/modules` and formats the output in a human-readable table, making it the standard command for listing loaded modules.

Answer

modinfo -l

Answer

ls /lib/modules/$(uname -r)

Answer

depmod -e

Question 3

A company has multiple subnets and wants to implement policy-based routing to direct traffic from a specific development subnet (192.168.10.0/24) through a specialized firewall for content filtering, while all other traffic uses the default gateway. Which of the following steps is required to achieve this using iproute2 tools?

Accepted Answer

Create a new routing table (e.g., table 100), add a default route via the firewall in that table, and add an ip rule to use table 100 for traffic from 192.168.10.0/24.. Policy-based routing (PBR) with iproute2 requires creating a separate routing table, adding a default route via the firewall in that table, and then using an ip rule to match traffic from the source subnet (192.168.10.0/24) and direct it to that custom table. This allows traffic from the development subnet to follow a different path than the default gateway, while all other traffic continues to use the main routing table.

Answer

Use iptables to mark packets from the development subnet and then use ip rule to use the main table for marked packets.

Answer

Add an ip rule to route traffic from 192.168.10.0/24 to the firewall without creating a new table.

Answer

Add a static route to the main routing table for 192.168.10.0/24 pointing to the firewall.

Question 4

A company uses BIND9 as the authoritative name server for its public zone example.com. External users report that they cannot resolve the MX record for the domain, but internal users can. What is the most likely cause?

Accepted Answer

The allow-query ACL restricts queries to the internal network.. The allow-query ACL in BIND9 restricts which source IP addresses are permitted to send queries to the server. If it is set to allow only the internal network (e.g., 192.168.0.0/16), external users' queries are rejected, causing resolution failures for MX records and all other records. Internal users succeed because their IPs match the ACL, while external users receive a REFUSED response or no answer.

Answer

The zone file lacks an MX record.

Answer

The server is behind a firewall that blocks UDP port 53.

Answer

The recursion is set to no.

Question 5

An administrator needs to prioritize traffic for a VoIP application over other traffic on a Linux router. Which tool should be used to implement traffic shaping and prioritization?

Accepted Answer

tc (traffic control). B is correct because the `tc` (traffic control) command is the standard Linux utility for traffic shaping, prioritization, and bandwidth management. It operates at the kernel's QoS layer, allowing the administrator to define queuing disciplines (qdiscs) such as HTB or PRIO to prioritize VoIP packets based on classification rules, ensuring low latency for real-time traffic.

Answer

ip route with priority

Answer

tcpdump with filters

Answer

iptables with the mangle table

Question 6

An administrator wants to restrict access to a service using PAM. Which file order determines the authentication flow for a service?

Accepted Answer

/etc/pam.d/<service-name>. PAM (Pluggable Authentication Modules) uses per-service configuration files located in /etc/pam.d/ to define the authentication flow. When a service (e.g., sshd, login) calls PAM, it reads the file named after the service (e.g., /etc/pam.d/sshd) to determine the order of modules (auth, account, password, session) and their control flags (required, requisite, sufficient, optional). This file-based approach allows fine-grained, service-specific authentication policies.

Answer

/etc/nsswitch.conf

Answer

/etc/security/access.conf

Answer

/etc/pam.conf

Question 7

Arrange the steps to configure a Linux system as a DNS server using BIND.

Accepted Answer

Install BIND, define the zone in named.conf, create zone file, check configuration syntax, restart named service, test resolution. After installing BIND, define the zone, create zone file, check syntax, then restart and test.

Answer

Define zone, create zone file, check syntax, install BIND, restart and test

Answer

Install BIND, create zone file, define zone, check syntax, restart and test

Answer

Install BIND, define zone, check syntax, create zone file, restart and test

Question 8

Which TWO commands can be used to rebuild the initramfs on modern Linux systems? (Choose two.)

Accepted Answer

dracut -f. `dracut -f` forces the regeneration of the initramfs on modern Red Hat–based distributions (e.g., RHEL, CentOS, Fedora). Option C is correct because `update-initramfs -u` updates the initramfs on Debian/Ubuntu systems by rebuilding the current kernel's initramfs image. Both commands are the standard tools for rebuilding the initial RAM filesystem on their respective distributions.

Answer

mkinitrd

Answer

grub-mkconfig

Answer

mkinitramfs

Question 9

A new network card driver module is not being loaded at boot. The administrator wants to ensure the module is loaded automatically without modifying the kernel command line. Which file should be used?

Accepted Answer

/etc/modules-load.d/.conf. /etc/modules-load.d/.conf is the standard configuration directory used by systemd-modules-load.service to load kernel modules at boot without modifying the kernel command line. Files in this directory list module names (one per line) that are loaded automatically during early boot, making it the proper mechanism for ensuring a network card driver module is loaded.

Answer

/lib/modules/$(uname -r)/modules.builtin

Answer

/etc/modprobe.d/<name>.conf

Answer

/etc/rc.local

Question 10

After upgrading the kernel on a Red Hat Enterprise Linux system, the system fails to boot because the initramfs is missing. Which command can be used to regenerate the initramfs?

Accepted Answer

dracut -f. On Red Hat Enterprise Linux (RHEL) systems, the `dracut` utility is the standard tool for creating and regenerating initial RAM filesystem images (initramfs). The `-f` (force) option overwrites an existing initramfs file, which is necessary after a kernel upgrade to ensure the new kernel has the correct drivers and modules to mount the root filesystem during boot. Without a valid initramfs, the kernel cannot access the root filesystem, causing a boot failure.

Answer

mkinitrd -f

Answer

grub2-mkconfig -o /boot/grub2/grub.cfg

Answer

mkinitramfs -o /boot/initrd.img