CCNA The Linux Operating System Questions

The -a flag makes ls include entries beginning with a dot, which are hidden by default, so it lists all files including hidden ones as the stem requires. Plain ls omits dotfiles entirely, and -l only changes output format, not visibility.

Debian is a distribution: a complete Linux system built around the Linux kernel, packaged with GNU utilities and its own package manager (dpkg/APT). It satisfies the stem's requirement for a distribution example, unlike a kernel, shell or desktop environment.

whoami prints the effective username of the current user to standard output, which directly answers the need to know the login name from a terminal. It requires no arguments and works consistently across Linux distributions, making it the simplest and most reliable choice for a helpdesk technician to give a new employee.

Editing sudoers with visudo lets the administrator define a narrowly scoped rule, for example granting the colleague permission to run just the backup script as root. The visudo tool validates syntax before saving, preventing a broken sudoers file that could lock out all sudo access. Sudo also logs each invocation, satisfying the auditability requirement without sharing the root password.

When a terminal emulator opens inside an existing graphical session, it usually launches a non-login interactive shell. Bash reads .bashrc for such shells and skips .profile, which is reserved for login shells. That is why aliases defined in .bashrc take effect while variables placed only in .profile do not appear in the new terminal windows.

This is correct: /etc is reserved for host-specific configuration, and /var contains data that changes during normal operation, including logs, mail queues, and spool directories. Recognizing this split helps administrators locate configuration versus runtime data, and it aligns with the FHS definitions tested by LPI.

Ext4 is a native Linux filesystem, satisfying the stem's requirement for common Linux filesystems. It serves as the default on many distributions, including Debian and Ubuntu, and supports journaling, extents and volumes up to one exbibyte. This makes it a canonical, widely deployed example rather than a cross-platform or non-Linux filesystem.

top provides a continuously refreshing, interactive view of running processes with CPU and memory usage, and it accepts keystrokes such as P to sort by CPU, M to sort by memory, and k to send a signal to a process. That combination of live monitoring and in-session process termination matches the analyst's stated needs.

The passwd command allows a user to change their own password. When run without arguments, it prompts for the current password and then the new password. It is the standard utility for password changes and is available to all users, not just root.

`blkid` reads the filesystem superblock metadata directly from block devices and prints each partition's UUID, which is exactly the identifier `/etc/fstab` requires. Unlike `lsblk`, which reports device topology and mountpoints but not UUIDs by default, `blkid` satisfies the stem's constraint of retrieving the UUID for fstab entries.

On Linux, the shell searches only directories listed in PATH for commands, and the current directory is normally absent for security reasons. Prefixing the script name with ./ explicitly specifies the current directory as the path, allowing the shell to locate and execute the file that already has execute permission.

Chronyd implements the Network Time Protocol to discipline the system clock against external time servers, correcting drift continuously. This directly satisfies the requirement to synchronise server time with an external source, preventing the Kerberos authentication failures caused by clock skew exceeding the default five-minute tolerance.

Examining `dmesg` reveals kernel ring-buffer messages, including hardware detection events logged when the kernel probes the new drive. This directly satisfies the stem's requirement to verify kernel recognition, since `dmesg` records device discovery, driver binding and any SCSI or ATA attachment errors at boot or hotplug time.

The who command reads the system's login records and lists each currently logged-in user along with the terminal or remote origin and login time. It directly shows the usernames of active sessions, including remote SSH logins, which is exactly the information the engineer needs before notifying the affected person.

The netstat command with options -tulpn displays TCP and UDP listening sockets, including the PID and program name for each. Piping to grep :80 filters for port 80, directly showing which process is bound to that port. This is a standard and reliable method for identifying the service listening on a specific port, provided netstat is installed.

`journalctl` reads the systemd journal, exposing kernel and service messages through one queryable interface. It satisfies the stem's requirement for a valid log-viewing method on systemd-based Linux distributions, supporting filters by unit, priority and time. This contrasts with plain text files such as `/var/log/syslog`, which lack structured querying.

top provides a continuously refreshing real-time view of system load, CPU and memory usage, and active processes, satisfying the stem's real-time monitor constraint. Alternatives like ps or uptime give only static snapshots, so top is the appropriate utility here.

A subnet mask is a fundamental component of a standard network configuration because it defines which portion of an IP address identifies the network and which identifies the host. This enables devices to determine whether a destination is local or must be reached through a gateway, satisfying the requirement for basic IP addressing configuration.

Traceroute maps the hop-by-hop path to a remote host by sending packets with incrementally increasing TTL values, forcing each router along the route to reply. This directly satisfies the requirement to verify the path traffic takes, unlike ping, which only confirms reachability.

uname -r prints the kernel release string, which includes the upstream version and often the distribution's patch or build suffix. This is exactly the value driver vendors ask for when checking compatibility. It is the standard, concise way to report the running kernel release without extra system details.

pwd prints the absolute path of the current working directory to standard output, directly answering the requirement to display the current directory path. Commands such as ls list directory contents instead, and cd changes directory rather than reporting it.

The numeric mode 640 sets permissions as follows: owner read and write (6), group read (4), and others none (0). This matches the requirement exactly. The chmod command with a three-digit octal number applies these permissions to the file, making it the correct choice for this scenario.

The /etc/passwd file contains one line per user account, with fields separated by colons; the seventh field is the login shell. Searching for the username jdoe displays that account's entry, including the assigned shell, without requiring a login as that user. This directly answers the administrator's question and is a standard method for inspecting user account attributes on Linux systems.

/etc/passwd contains one line per local user account with fields for username, UID, GID, home directory, and login shell, so it is a primary source for account auditing. Password hashes are typically replaced by an x placeholder that points to /etc/shadow, but the account metadata itself remains authoritative here.

uname -r prints only the kernel release number, exactly the running kernel version the developer needs. Other uname flags report hardware name, node name or processor type, so they would not satisfy the specific requirement for the kernel version.

The ss -tulpn invocation lists listening TCP and UDP sockets with numeric ports and owning processes, revealing whether sshd is bound to port 22. That directly answers whether the daemon is listening, which ping or netstat alternatives would not confirm as precisely.

Server installations typically omit a graphical desktop to reduce resource usage and attack surface, and they are managed remotely over SSH or a console. Services such as Samba, NFS, or a web daemon are what matter on such a host, so this accurately describes a headless file server deployment.

lspci enumerates devices attached to the PCI bus, listing controllers, network adapters and GPUs with vendor and device identifiers. This directly satisfies the stem's goal of identifying hardware, since PCI enumeration reveals installed components without querying higher-level configuration.

The top command displays a live, continuously refreshed process list sorted by CPU utilisation by default, letting you immediately identify the heaviest consumer. This directly satisfies the requirement to sort active processes by CPU usage, unlike ps, which needs explicit sort flags.

systemctl get-default queries systemd for the default target, which is usually a symbolic link such as graphical.target or multi-user.target. This directly answers which target the system will start by default, and it is the supported way to confirm the setting before changing it. It reads the /etc/systemd/system/default.target link.

When a process creates a child process, the child inherits a copy of the parent's environment by default. This inheritance allows settings like PATH and HOME to propagate. Variables can be removed with unset or not exported, but the default behavior is inheritance, making this statement correct.

The dmesg command displays the kernel ring buffer, which contains messages from the kernel, including hardware detection, driver initialization, and errors during boot. Piping to tail -50 shows the most recent 50 lines, which are likely to include the last messages before the failure. This is the most direct way to view recent kernel messages and diagnose boot issues.

In /etc/passwd, fields are colon-separated: username, password placeholder, UID, GID, GECOS, home directory, and login shell. The seventh field, /bin/bash, is the login shell that runs when alex logs in. This is the correct identification for this scenario.

The vmstat command reports virtual memory statistics, including free and used memory, swap activity, and paging. It satisfies the requirement to display system memory information by sampling kernel counters over an interval. Unlike disk-focused tools, vmstat directly exposes memory pressure and swap behaviour, making it a valid choice alongside free and top.

`du -sh` reports each directory's total disk consumption, with `-s` collapsing subdirectory detail into one summary figure per argument and `-h` scaling values into human-readable units such as megabytes or gigabytes. This directly satisfies the stem's requirement to inspect directory space usage readably while the server runs low on disk.

The useradd command with -m creates the home directory and -s sets the login shell to /bin/bash. This matches the requirement to add a user with a home directory and specific shell. The command is standard on most Linux distributions, though some may require additional options for password setting.

df -h displays disk space usage for all mounted filesystems in human-readable units (e.g., GB, MB). This directly answers the user's need to see free space in an easily understandable format. It is the standard command for this purpose and is available on virtually all Linux systems.

The uname command reports system information, and its -r option prints only the kernel release string of the currently running kernel, such as 5.15.0-91-generic. Because it reads the live kernel rather than a file, it reflects exactly what is loaded in memory right now, which is what the technician needs to compare against the vendor's supported-kernel list.

This awk command reads /etc/shadow with colon as the field separator. Field 2 holds the password hash. The condition length($2) > 1 excludes empty or single-character entries, and the regex !~ /^[!*]/ excludes locked accounts whose hash field starts with ! or *. Only accounts with an actual hash are printed, exactly matching the scenario.

The ps aux command produces a snapshot of all running processes, including those not attached to a terminal, and displays details such as user, PID, CPU percentage, memory usage, and the command line. It is the standard tool for capturing a static list of processes on a Linux system. This directly satisfies the administrator's need to inspect all processes with their PIDs and CPU usage during troubleshooting.

Desktop-oriented distributions ship with a preconfigured graphical environment and a curated set of common applications, so the installer makes most package decisions automatically. This directly satisfies the requirement to minimize time spent selecting packages. Ubuntu Desktop and Fedora Workstation are mainstream examples that provide a complete desktop out of the box, making them appropriate for a new employee's workstation.

/etc sits directly at the filesystem root and holds host-specific configuration files such as passwd, fstab and service configs. This satisfies the stem's requirement for a directory usually located at the root, distinguishing it from nested paths like /usr/bin or /var/log.

The -m flag of uname prints the machine hardware name as reported by the kernel, for example x86_64 or aarch64. This is exactly the architecture string a package manager uses to select a matching build, so it directly answers the technician's need without extra parsing or guesswork.

This pipeline uses du -ah to list all files and directories with human-readable sizes, sort -rh to sort by size in reverse order (largest first), and head to show the top 10. It effectively identifies the largest files and directories in /var/log, directly addressing the administrator's need.

This correctly separates the kernel, which handles process scheduling, memory, devices, and system calls, from a distribution, which adds user-space tools, libraries, an init system, and package management. A distribution is what users actually install; the kernel alone is not usable for typical tasks. This matches how LPI describes the Linux ecosystem.

less is a pager that displays a file one screenful at a time and allows both forward and backward scrolling using arrow keys, Page Up/Down, and search. It is ideal for viewing large text files interactively. This matches the user's need to scroll in both directions.

A mount option of noexec blocks direct execution of files on that filesystem while still permitting them to be read and interpreted, which explains why bash script.sh works but running the script by name fails. This is a common hardening setting for removable media and temporary mounts.

On most Linux distributions, general system and service messages are written to /var/log/syslog by the syslog daemon, making it the standard location for reviewing hardware and system errors. Kernel-specific messages may also appear in dmesg or kern.log.

The CPU is a physical hardware component: a processor chip that executes instructions. It satisfies the stem's requirement for hardware, unlike software items such as operating systems or applications, which are intangible programs rather than tangible components.

Access control lists extend the traditional owner-group-other model by allowing permissions for individual named users. Adding an ACL entry for the contractor grants read and write access to the project directory without changing group membership or file ownership, and the entry can be removed when the engagement ends, satisfying the temporary requirement cleanly.

fdisk is a command-line partition table editor that creates, deletes and modifies partitions on a disk, satisfying the requirement to manage disk partitions. It writes to the partition table via an interactive menu, supporting MBR and, on modern versions, GPT layouts.

Software RAID is implemented entirely in the operating system kernel, which handles striping, mirroring and parity across disks without dedicated controller hardware. This OS-and-kernel management is the defining characteristic distinguishing it from hardware RAID, which offloads those operations to a dedicated controller.

The Filesystem Hierarchy Standard specifies where categories of files belong, such as programs in /usr/bin, configuration in /etc, and variable data in /var. This predictability lets packaged software and administrators find files without guessing per-distribution conventions. It is the core purpose of the standard and applies across mainstream distributions, making this statement accurate.

chown changes file ownership, and its syntax takes the new owner followed by the target path, so 'chown admin file' assigns user admin as owner. This satisfies the stem's requirement precisely, unlike chmod, which alters permission bits rather than ownership.

Running top launches an interactive, continuously updating view of running processes, with the busiest processes at the top by default. It refreshes every few seconds, showing CPU, memory, and load information, which directly matches the technician's need to observe real-time CPU consumption and identify the process causing sluggishness.

`ip addr` queries the kernel's netlink interface directly, reading current interface state from the running system rather than a legacy configuration file. It reports eth0's assigned IPv4 and IPv6 addresses, satisfying the need to confirm the actual address on modern distributions where `ifconfig` is deprecated and often absent by default.

df -h reports disk space usage for all mounted filesystems in human-readable units, showing total size, used space, and available space per mount point. This directly provides the per-filesystem summary the administrator needs before deploying an application, and it executes quickly because it reads filesystem metadata rather than scanning files.

/etc/init.d holds SysV init scripts that start and stop services during system startup, satisfying the question's requirement for a startup or service file. Each script accepts start, stop and restart arguments, letting the init system launch daemons at defined runlevels.

tcpdump captures packets directly from a chosen interface and prints them in real time, satisfying the requirement to monitor traffic live on a specific interface. It operates at the link layer via libpcap, unlike tools that only report aggregate statistics or historical logs.

The find command with -mtime -1 matches files modified less than 24 hours ago. The -1 means less than one day. This directly satisfies the requirement to locate recently modified files in /var/log, making it the correct choice.

The mv command moves or renames files. Using 'mv report.txt projects/' moves the file 'report.txt' into the 'projects' directory, assuming that directory exists. This accomplishes the second task. The trailing slash is optional but clarifies that 'projects' is a directory, preventing accidental renaming if a file with that name existed.

fdisk reads and edits the partition table of a specified disk, displaying partitions, their types and sizes. Invoked with a device path, it directly satisfies the requirement to inspect a specific disk's partition table, unlike tools that only report filesystem usage.

/etc/fstab resides in /etc and defines filesystem mount points and options read at boot, making it a standard configuration file found there. It is a plain-text system configuration file, matching the stem's expectation for /etc contents rather than binaries or runtime data.

/etc/shadow stores encrypted user passwords and password aging information. It is readable only by root for security. Along with /etc/passwd, it forms the core of user account data. Therefore, it is a correct choice for user account details, especially sensitive authentication data.

/proc is a virtual pseudo-filesystem exposing kernel and process state as readable files, satisfying the need for runtime system information. Each running process appears as a numbered subdirectory, and files such as /proc/cpuinfo or /proc/meminfo report kernel data without occupying disk space.

Ping uses ICMP echo request and reply packets to verify reachability and round-trip latency to a specific host, directly satisfying the connectivity-check requirement. It confirms whether the target responds at the network layer, independent of higher-level services, making it a standard first-line diagnostic tool.

An LTS release freezes package versions and backports only security fixes, so the financial applications run against a stable, unchanging ABI for years. This directly satisfies the stem's demand for long-term support and stability, unlike rolling distributions whose continuous updates risk breaking critical software.

free -m reads /proc/meminfo and reports total, used and available RAM in mebibytes, giving installed memory without physical access. It satisfies the stem's constraint of identifying RAM from the command line without opening the chassis.