Linux Foundation Certified System Administrator LFCS (LFCS) — Questions 376–406

Persistent identifiers such as UUIDs or by-path symlinks decouple the mount configuration from the kernel's enumeration order, and nofail prevents a temporarily missing iSCSI LUN from delaying or blocking boot. Together they make the fstab entry resilient to device renumbering. Changing to a device-mapper path, adding _netdev, or forcing a udev rename do not address enumeration stability and can introduce new problems.

The `cat` command (option C) is a standard Unix utility that reads files sequentially and outputs their contents to the standard output. It is one of the most basic and direct ways to view the entire content of a file in the terminal.

The `find` command with `-mtime -7` searches for files whose modification time (content change) is less than 7 days ago, which matches the requirement of 'modified in the last 7 days'. The `-type f` restricts the search to regular files, and `/var/log` is the target directory.

Correct matches: service manages processes, socket handles socket activation, timer schedules events, target groups units. Common confusion: mixing socket and timer responsibilities is typical.

`du -ah /var/log` calculates the disk usage of all files and directories in `/var/log` in human-readable format, then `sort -hr` sorts them by size in descending order, and `head -10` shows the top 10 largest entries. This directly identifies the largest log files in the hierarchy, which is exactly what the administrator needs.

Soft lockup errors on CentOS 7 often indicate kernel bugs or hardware/firmware issues that cause CPUs to stall for extended periods. Updating the BIOS/firmware can resolve underlying hardware timing problems, while kernel updates may include patches for known soft lockup bugs. This approach addresses the root cause without disabling or weakening the watchdog mechanism, preserving system stability.

blkid reads filesystem superblocks and reports the type without mounting or altering the device, making it the safest and most direct way to identify the filesystem on /dev/nvme0n1p2. fdisk shows partition-table type codes rather than real filesystem metadata, mounting is unnecessarily invasive, and lsblk -f is a broader listing that is less targeted for a single-device query.

The `host` command is a simple DNS lookup utility that queries DNS servers to resolve a hostname to an IP address. It directly performs forward DNS resolution using the system's configured resolvers and returns the A or AAAA record for the given name.

The --no-clobber option makes cp skip the operation entirely when the destination already exists, leaving the existing backup intact while still performing the copy when the destination is absent. The other options either ignore existence altogether, base the decision on timestamps, or rename the old file, all of which still result in the destination being replaced.

To add a user to a supplementary group while preserving existing memberships, use usermod with the -a (append) and -G (supplementary groups) options. Without -a, the -G option replaces all supplementary groups. This command safely adds the new group without affecting others, ensuring the user retains all necessary access.

`systemctl status service` is the most appropriate command because it displays the current state of the service unit, including whether it is active, failed, or inactive, along with the last several log entries from the journal for that unit. This provides both the failure status and the contextual log output needed to diagnose why the service failed, all in a single command.

To activate a new swap partition immediately, you must first initialize it with mkswap, then enable it with swapon. These two commands prepare and activate the swap space without requiring a reboot. Adding an fstab entry is for persistence across reboots, and swapoff or mount are not appropriate for enabling swap.

The `ss -tln` command displays listening TCP sockets by using the `-t` flag for TCP, `-l` for listening sockets, and `-n` to show numeric addresses and ports without resolving service names. It reads socket information directly from the kernel's netlink interface, making it the modern replacement for netstat on Linux systems.

To prevent automatic startup while retaining the ability to start manually, the service must be disabled. Disabling removes the boot-time symlinks but leaves the unit file intact. Masking would prevent manual start, and stopping or killing only affects the current runtime state.

The correct line is 'nameserver 8.8.8.8'. The resolver reads nameserver entries in order, so placing it at the top makes it the first server used. The other options use invalid keywords or syntax that would not be recognized by the resolver.

The correct procedure is to create the logical volume with lvcreate -L 8G -n lv_swap vg_sys, initialize it with mkswap, and activate it with swapon. The -L option specifies an absolute size in gigabytes, which matches the 8 GB requirement. Persistent activation requires an /etc/fstab entry, but the immediate creation and activation sequence is as shown.

Viewing the start of a large file efficiently calls for head, which stops after the requested lines. Following appended entries in real time calls for tail -f, which keeps the file open and prints new data. Commands that scan the entire file, such as cat piped to less, grep over the whole file, or wc, do not meet the efficiency or following requirements.

The /etc/passwd file stores all user account information, and using cat to pipe its contents through grep allows the administrator to search for the specific username 'newuser'. If the user exists, grep will output the matching line; if not, no output is returned. This is a standard, quick method to verify user existence without modifying system state.

exFAT was designed for flash and removable media and is supported out of the box by modern Linux, Windows, and macOS. It also has no 4 GB per-file ceiling, unlike FAT32, so it satisfies both the cross-platform and large-file requirements. The other filesystems either impose a size limit or lack native support on one of the required operating systems.

Persistent mounting in /etc/fstab should use a stable identifier such as UUID= or LABEL= rather than a kernel device name. The entry must also specify the correct filesystem type and avoid options like noauto that prevent boot-time mounting. The UUID form with ext4 and a pass value of 2 satisfies all requirements.

The `ss -tlnp` command displays listening (`-l`) TCP (`-t`) sockets with numeric addresses (`-n`) and the associated process (`-p`), which directly confirms that a service is bound to TCP port 8080 on a specific interface (e.g., 0.0.0.0:8080 or 192.168.1.10:8080). This ensures the service is listening on the correct interface and is reachable from remote hosts.

The `head` command is specifically designed to display the first 10 lines of a file by default. Running `head data.csv` will output the first 10 lines of the CSV file, making it the correct choice for this task.

The script currently has permissions `-rw-r--r--`, meaning the owner has read and write but not execute permission. The `chmod u+x` command adds the execute permission for the owner only, which is exactly what the user needs to run the script without affecting group or others.

For internal clients to reach the internet through a router, their private source addresses must be translated to the router's public address. This is done with a MASQUERADE rule in the nat table's POSTROUTING chain, applied to packets leaving the external interface. The other options either use the wrong chain, only permit forwarding without translation, or masquerade in the wrong direction.

The correct export entry must specify the exact client, grant read-write access, and enable root squashing. The entry /srv/data 192.168.10.25(rw,root_squash) accomplishes all three requirements. root_squash is the default, but explicitly including it ensures the security policy is applied even if defaults change.