LPIC-1 System Architecture Practice Question
A technician is diagnosing a server that fails to reach the expected multi-user target. The technician wants to gather evidence about kernel ring buffer messages and the systemd journal for the current boot. Which TWO commands provide this diagnostic information? (Choose two.)
⚠ Common exam trap
The trap here is reaching for status or accounting commands like uptime, last reboot, or a bare status call, when actual boot diagnostics require reading the kernel ring buffer and the current-boot journal.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
journalctl -b
Kernel and service boot messages live in two complementary places on a systemd host. The kernel ring buffer, read with dmesg, holds low-level hardware and driver messages from early boot. The journal, queried with journalctl -b for the current boot, aggregates kernel and unit messages with timestamps and context. Together they give the technician the evidence needed to find why the multi-user target was not reached.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
journalctl -b
Why this is correct
journalctl -b displays journal entries recorded since the current boot, aggregating kernel and service messages with timestamps and unit context. This lets the technician trace which units failed or timed out before the multi-user target, making it the primary tool for systemd boot diagnostics alongside the kernel ring buffer.
- ✓
dmesg
Why this is correct
dmesg prints the contents of the kernel ring buffer, showing hardware detection, driver loading, and kernel-level error messages generated during startup. On a systemd host the buffer is still populated, and reading it gives the technician low-level boot evidence such as failed device initialization that may explain why the expected target was never reached.
- ✗
systemctl status
Why it's wrong here
systemctl status without a unit argument shows an overview of the system state and recent unit activity, which can be helpful, but the question asks for the tools that surface kernel ring buffer and journal content for the current boot. The command is a status reporter, not a log reader, and it does not expose the full boot diagnostic stream the way the ring buffer and journal queries do.
- ✗
uptime
Why it's wrong here
uptime reports how long the system has been running, the number of logged-in users, and load averages. While useful for a quick health glance, it carries no kernel or service error detail and cannot reveal why a boot target failed. It provides timing context only, not the diagnostic evidence the technician needs.
- ✗
last reboot
Why it's wrong here
last reboot reads the wtmp accounting records and lists historical reboot events with dates and durations. It confirms when reboots occurred but contains no kernel messages or unit state information, so it cannot explain why the multi-user target was not reached during the current boot. It is a historical log, not a diagnostic source.
Go deeper
Related to this question
About these practice questions
One of 402 original LPIC-1 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official LPI exam blueprint
This LPIC-1 practice question is part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the LPIC-1 exam.