Courseiva

LFCS · topic practice

Operation of Running Systems practice questions

This domain covers keeping a running Linux system healthy: managing systemd services and targets, scheduling jobs with cron, at, and systemd timers, reading logs with journalctl, controlling boot behavior, and performing recovery tasks like resetting a forgotten root password or assembling LVM storage. LFCS tests these as hands-on performance items, not multiple choice, so you must execute commands correctly on a live system.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Editorial oversight:Johnson Ajibi· MSc IT Security, IEEE Senior Member
20 questionsDomain: Operation of Running Systems

What the exam tests

What to know about Operation of Running Systems

You must be able to control services and boot targets, schedule jobs, read logs, and recover a system, all from the command line. The single most important thing: know when to use enable versus start, since persistence across reboots is what most tasks actually require.

Starting, stopping, enabling, and masking units with systemctl, and reading unit state with systemctl status

Scheduling recurring and one-time jobs using crontab, /etc/cron.d, at, and systemd timer units

Inspecting and filtering logs with journalctl, including by unit, boot, priority, and time range

Managing boot targets, GRUB parameters, and single-user or rescue mode recovery procedures

Watch out for

Common Operation of Running Systems exam traps

  • ▸Using systemctl start instead of systemctl enable when the requirement is automatic startup after reboot or crash recovery
  • ▸Forgetting that at and batch jobs need the atd service running, or misreading the at time format so the job fires at the wrong hour
  • ▸Editing /etc/fstab or GRUB without verifying syntax, then rebooting into an unbootable system with no recovery plan

Practice set

Operation of Running Systems questions

20 questions · select your answer, then reveal the explanation

A system administrator needs to ensure that a specific service, 'myapp', starts automatically after a system crash and also restarts if it fails. Which systemd unit directive should be used to achieve this behavior?

A Linux system reports 'Out of memory' errors frequently. The administrator checks memory usage with 'free -m' and notices that most memory is used by file cache. Which command can the administrator run to immediately free up the cache without affecting running processes?

An administrator needs to schedule a cron job that runs a script every day at 3:00 AM, but the system is in a different time zone (UTC) than the administrator's local time (EST). The administrator wants the job to run at 3:00 AM local time regardless of system time zone changes. What is the best approach?

Which TWO commands can be used to display the current runlevel or target of a systemd-based system?

Which THREE steps are necessary to permanently disable a systemd service from starting at boot?

A systems administrator receives reports that a web server running Nginx is intermittently unresponsive. The server has 8 GB of RAM and 4 CPU cores. The administrator runs 'free -m' and sees that available memory is low, and 'top' shows that several nginx worker processes are using a high percentage of CPU. Which of the following is the most likely cause of the issue?

A Linux server experiences a kernel panic during boot. The administrator needs to capture the kernel panic message for debugging. Which of the following methods would allow capturing the panic message?

You are a systems administrator for a company that runs a high-traffic web application on a Linux server with 32 GB of RAM and 8 CPU cores. The application uses Apache with mod_php and MySQL. Recently, the server has been experiencing intermittent slowdowns, especially during peak hours. Monitoring tools show that the CPU usage spikes to 100% for several minutes and then returns to normal. The 'top' command shows that the 'mysqld' process is often the top CPU consumer during these spikes. You notice that the MySQL slow query log contains many entries with long execution times. The database is heavily used by the web application for read-heavy workloads. After analyzing the situation, you suspect that the issue is related to MySQL configuration. Which of the following actions is most likely to resolve the performance issue?

You are a systems administrator for a company that runs a web application on a Linux server with 16 GB of RAM and 4 CPU cores. The application uses Apache with mod_php and PostgreSQL. Recently, the server has been experiencing high load average (above 10) and the website is responding slowly. The 'top' command shows that many 'httpd' processes are in 'D' (uninterruptible sleep) state. The 'iostat -x 1' output shows high disk utilization (over 90%) and high average wait times (await > 200 ms) on the disk where PostgreSQL data is stored. The database is write-heavy, and you suspect that disk I/O is the bottleneck. Which of the following actions is most likely to improve the performance?

A Linux administrator is troubleshooting a service that is running as the 'nobody' user but keeps failing because it cannot write to its log file. The log file is located at /var/log/app.log. Which TWO of the following methods will allow the service to write to the log file while maintaining security best practices?

Match each Linux networking command to its primary function.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Show/manipulate routing, devices, tunnels

Investigate sockets

Capture and analyze network traffic

Manage NetworkManager

Print network connections (legacy)

A developer reports that a web application is running out of file descriptors. Which sysctl parameter should be reviewed and potentially increased?

A service is using a port that conflicts with another application. Which command can be used to identify which process is listening on a specific TCP port?

Question 14hardmultiple choice
Review the full routing breakdown →

A server with multiple network interfaces has intermittent connectivity issues. The administrator suspects routing table misconfiguration. Which command would show the current routing table?

Which TWO of the following are valid methods to check the status of a systemd service named 'httpd'? (Select TWO.)

Which TWO of the following commands can be used to display the current kernel ring buffer messages? (Select TWO.)

Which THREE of the following are valid options for the `lsblk` command to display more detailed information about block devices? (Select THREE.)

Refer to the exhibit. What is the most likely issue with the Apache web server?

Exhibit

Refer to the exhibit.
```
$ systemctl status apache2
● apache2.service - The Apache HTTP Server
   Loaded: loaded (/lib/systemd/system/apache2.service; enabled; vendor preset: enabled)
   Active: active (running) since Tue 2025-03-18 10:15:23 UTC; 2h 15min ago
 Main PID: 1234 (apache2)
    Tasks: 5 (limit: 1000)
   Memory: 15.2M
   CGroup: /system.slice/apache2.service
           ├─1234 /usr/sbin/apache2 -k start
           ├─1235 /usr/sbin/apache2 -k start
           ├─1236 /usr/sbin/apache2 -k start
           ├─1237 /usr/sbin/apache2 -k start
           └─1238 /usr/sbin/apache2 -k start

Apr 18 10:15:23 server systemd[1]: Starting The Apache HTTP Server...
Apr 18 10:15:23 server apachectl[1190]: AH00112: Warning: DocumentRoot [/var/www/html] does not exist
Apr 18 10:15:23 server systemd[1]: Started The Apache HTTP Server.
```

Refer to the exhibit. Which filesystem is close to full capacity?

Exhibit

Refer to the exhibit.
```
$ df -h
Filesystem      Size  Used Avail Use% Mounted on
/dev/sda1        20G   15G  5.0G  75% /
/dev/sdb1       100G   90G   10G  90% /data
```

A Linux server experiences intermittent high load averages but low CPU utilization. The administrator suspects an I/O bottleneck. Which command best identifies the specific device causing the bottleneck?

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Focused Operation of Running Systems sessions

Start a Operation of Running Systems only practice session

Every question in these sessions is drawn from the Operation of Running Systems domain — nothing else.

Related practice questions

Related LFCS topic practice pages

Move into related areas when this topic feels solid.

Frequently asked questions

What does the LFCS exam test about Operation of Running Systems?
You must be able to control services and boot targets, schedule jobs, read logs, and recover a system, all from the command line. The single most important thing: know when to use enable versus start, since persistence across reboots is what most tasks actually require.
How should I use these practice questions?
Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Operation of Running Systems questions in a focused session?
Yes — the session launcher on this page draws every question from the Operation of Running Systems domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other LFCS topics?
Use the topic links above to move to related areas, or go back to the LFCS question bank to see all topics.
Are these real exam questions or dumps?
These are original practice questions written to test the same concepts the LFCS exam covers. They are not copied from any real exam or dump site.