Courseiva

LPIC-1 · domain

troubleshooting

Practise Linux Professional Institute Certification Level 1 LPIC-1 troubleshooting practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

402 questions119 easy172 medium111 hard

Focused practice

Practice troubleshooting questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about troubleshooting

troubleshooting questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common troubleshooting exam traps

  • ▸Answering from memory before reading the full scenario.
  • ▸Missing a constraint such as cost, availability, security, scope or command context.
  • ▸Choosing a broad answer when the question asks for the most specific fix.
  • ▸Ignoring why the wrong options are tempting.

Question index

All troubleshooting questions (402)

Click any question to see the full explanation, or start a practice session above.

1

A senior administrator runs a script that processes a CSV file. The script contains the following snippet: 'for field in $(cat data.csv); do ...'. The data.csv file contains lines like: 'John Doe, 123 Main St, Springfield'. The script fails to process correctly, splitting fields incorrectly and causing errors. Which of the following is the most appropriate fix?

Medium
2

A DHCP server assigns IP addresses to clients, but some clients are not receiving the correct gateway. Which configuration file should be checked on the DHCP server?

Medium
3

Which command shows the amount of free and used memory in the system, including swap?

Easy
4

A small office server running Ubuntu 20.04 experiences a gradual time drift. The system clock loses about 2 minutes per week. The hardware clock (RTC) is maintained by the motherboard battery and appears accurate when checked manually. The sysadmin wants to ensure the system clock stays synchronized automatically. Which single action should be taken? Options: A) Run 'timedatectl set-ntp true' to enable systemd-timesyncd, B) Add 'hwclock --hctosys' to /etc/rc.local, C) Install and configure the ntp package with a pool server, D) Use 'cron' to run ntpdate every minute.

Easy
5

Refer to the exhibit. The process with PID 1234 is in state 'Z'. What is the most likely cause and appropriate action?

Hard
6

A Linux workstation appears to hang early in the boot process after the initramfs is loaded. The administrator wants to add kernel boot parameters temporarily from the GRUB 2 menu without making a permanent change. Which action should the administrator take?

Medium
7

A system administrator wants to configure log rotation to compress log files daily and keep 30 days of logs. Which of the following configurations achieves this goal?

Medium
8

Which hardware component uses a unique address to identify itself on the network at the data link layer?

Easy
9

An administrator wants systemd-journald logs to persist across reboots. What must be created?

Medium
10

A systems administrator needs to change the permissions of the file /home/user/script.sh so that the owner can read, write, and execute; the group can read and execute; and others have no access. Which command accomplishes this?

Medium
11

On a systemd-based system, which file is NOT used for system initialization?

Medium
12

A Linux administrator needs to extract all lines from `/var/log/syslog` that contain the word `error` (case-insensitive) and save them to `errors.txt`. Which command accomplishes this?

Medium
13

An Ubuntu 20.04 server needs a static IP address. The administrator has created a netplan YAML file at /etc/netplan/01-netcfg.yaml. What is the next step to apply the configuration?

Medium
14

Which THREE of the following are correct features of the 'grep' command? (Choose three.)

Easy
15

Refer to the exhibit. After modifying /etc/default/grub to enable serial console output, which command must be run to apply the changes to the GRUB configuration?

Hard
16

A Linux server uses a systemd-based init and has several custom services. The administrator wants to inspect the runtime state and configuration of a unit named backup.service without starting or stopping it. Which TWO commands provide information about this unit? (Choose two.)

Medium
17

An administrator is examining a file with 'ls -l' and sees the permission string '-rwSr--r--' on an executable owned by root. What does the capital S in the owner execute position indicate?

Hard
18

After a system upgrade, the server fails to boot with the error: 'ERROR: Failed to mount the real root device.' The root filesystem is on an LVM logical volume. Which recovery step is most appropriate?

Hard
19

A technician needs to add the official Debian repository for the 'buster' release. Which line should be added to /etc/apt/sources.list?

Easy
20

A system administrator wants to change the default runlevel of a SysV init-based system to runlevel 3. Which file should be edited to make this change persistent across reboots?

Medium
21

Which TWO commands can be used to display the current runlevel of a system?

Medium
22

A system administrator is troubleshooting a Linux server that fails to boot. The server has a software RAID 1 configuration using mdadm, with the root filesystem located on /dev/md0. During boot, the system halts with the following error: 'VFS: Unable to mount root fs on unknown-block(0,0)'. The admin verifies that the BIOS recognizes all disks and that the RAID array was properly assembled prior to the last shutdown. The system was working after a recent kernel update, but now fails. Which of the following actions is the most likely solution?

Easy
23

A company manages a cluster of 50 web servers running Ubuntu 20.04. The servers are configured to synchronize time with an internal NTP server at 10.0.0.100 using the default ntpd. The NTP server itself syncs with external stratum 2 servers. Recently, the security team implemented a restrictive iptables firewall on all servers, allowing only essential services. Several servers in the 10.0.1.0/24 network now report time drift and ntpq -p shows all peers with '?' status. A network engineer runs tcpdump on one affected server and sees no NTP replies from 10.0.0.100. The NTP server's firewall is configured to allow inbound NTP from 10.0.0.0/24 only. The engineer also notes that the server's /etc/ntp.conf contains the line 'restrict 10.0.0.100' (which is incorrect) and that ntpq -crv shows 'sync target not reachable'. Which single action will most directly resolve the synchronization issue for the affected servers?

Hard
24

A system administrator needs to find out which package installed the file /usr/bin/foo on a Red Hat system. Which command should be used?

Medium
25

Refer to the exhibit. A user tries to execute a script on a mounted filesystem but gets a permission denied error. The script has execute permissions. What is the most likely cause?

Hard
26

On a modern Linux system using systemd-networkd for interface management and systemd-resolved for DNS, which THREE files are typically involved in network configuration and DNS resolution?

Medium
27

A technician must determine whether a Linux server's CPU supports hardware-assisted virtualization so the host can run KVM guests. The technician needs to inspect the processor flags exposed by the running kernel. Which command should be used?

Medium
28

Refer to the exhibit. A user gets this error when running a script. What is the most likely cause?

Medium
29

A server's root filesystem is filling up. The administrator suspects that a service is writing large log files to /var/log/journal. Which command displays the total disk space currently used by the systemd journal?

Medium
30

A system administrator needs to install a local Debian package file named 'myapp.deb'. Which command should be used?

Easy
31

A system administrator notices that after updating the kernel, the system fails to boot. The administrator wants to boot the previous kernel. Which GRUB menu option should be selected?

Easy
32

A system administrator runs a script that contains the line: trap 'echo "Cleaning up..."' EXIT. The script is executed and then receives SIGINT (Ctrl+C) before normal completion. What happens?

Hard
33

Which command is used to compress a file with the highest compression ratio?

Medium
34

A user's home directory /home/alice has grown unexpectedly large. The administrator wants to identify which subdirectory consumes the most space, displaying sizes in human-readable format and limiting output to one level deep. Which command is most appropriate?

Easy
35

Refer to the exhibit. A user reports that the 'myapp' command fails to run. Based on the output, what is the most likely cause?

Hard
36

A script reads a CSV file where fields may contain commas within quoted strings. Which approach correctly parses such fields?

Hard
37

A developer asks the system administrator to configure a local web server for testing using Apache. The server should serve files from /var/www/test. Which directive must be set in the Apache configuration to set this document root?

Easy
38

A Linux administrator needs to check the current status of the systemd service named sshd, including whether it is active and its recent log entries. Which command should she run?

Easy
39

A Linux server has two hot-swappable SATA drives that are part of a software RAID 1 array. The administrator needs to replace one drive while the system is running, but first wants to verify the current status of the array to ensure it is not degraded. Which command will display the detailed status of the mdadm array?

Medium
40

A company runs a web server using Apache with multiple virtual hosts. The administrator needs to restrict access to a specific virtual host based on the client IP address. Which configuration directive should be placed inside the <VirtualHost> block to deny IP 192.168.1.100?

Hard
41

An administrator adds the line 'DenyUsers john' to /etc/ssh/sshd_config and restarts the SSH service. What is the effect?

Easy
42

Refer to the exhibit. An admin attempts to execute a shell script located in /tmp but gets 'Permission denied'. Which mount option is most likely causing this?

Hard
43

An RPM-based system has a package 'example-1.0' installed, but a newer version 'example-2.0' is available in a repository. Which command will upgrade the package?

Hard
44

A server configured with UEFI firmware and GPT partitioning fails to boot after a GRUB package update. The administrator suspects the bootloader is not correctly installed. Which command should be used to reinstall GRUB to the EFI system partition?

Hard
45

A script starts multiple background processes. An administrator wants to wait for all background jobs to complete before proceeding. Which command should be used?

Hard
46

An RPM-based system reports a file conflict during package installation. Which option to the rpm command will allow the installation to overwrite files from another package?

Hard
47

A Linux system administrator is tasked with setting up a new server that will host multiple virtual machines using KVM. The server has 64 GB of RAM and two physical CPUs, each with 8 cores (16 threads). The administrator needs to allocate resources efficiently. The VMs will have varying workloads. The administrator wants to ensure that the host system has enough resources for itself and that VMs can use all available CPU cores. Which approach should the administrator take to configure CPU allocation for the host and VMs?

Medium
48

A system administrator wants to monitor a log file in real-time for lines containing 'ERROR' and write them to a separate file. Which command combination is most appropriate?

Medium
49

An administrator needs to determine which package owns the file /usr/bin/htop on a Debian-based system so that the package can be reinstalled after corruption. Which command provides this information?

Easy
50

A Linux administrator is responsible for a server that runs a critical database application. The server uses SysV init and the current runlevel is 3. The administrator needs to schedule a maintenance window for next Sunday at 2:00 AM to apply security patches that require a reboot. The administrator wants to ensure that after the reboot, the system returns to runlevel 3 and the database service (db_service) starts automatically. The administrator also wants to log the maintenance actions to /var/log/maintenance.log. Which of the following is the BEST approach to accomplish these tasks?

Medium
51

Which THREE of the following commands can be used to display information about block devices?

Medium
52

Based on the exhibit, what is the most likely cause of the SSH service failure?

Medium
53

An administrator is preparing a new USB drive for use as a portable ext4 data disk. After writing the partition table, the administrator wants to confirm the partition layout and the filesystem type currently on the device before formatting. Which command displays both the partition table and the detected filesystem types for /dev/sdd?

Medium
54

Refer to the exhibit. An administrator notices that /proc is mounted with 'noexec'. What is the impact of this mount option?

Easy
55

A server uses systemd-resolved for DNS. Users report that name resolution works for external domains but fails for internal company hostnames. The administrator checks /etc/resolv.conf and sees 'nameserver 127.0.0.53'. Which action will resolve the issue?

Hard
56

A Debian system has some partially installed packages due to a failed installation. Which TWO commands can help resolve the broken dependencies? (Choose exactly two.)

Medium
57

A Linux server uses a custom udev rule to assign a persistent name to a USB-to-serial adapter. After a kernel update, the adapter is no longer recognized by its custom name, and the administrator finds that the rule file is still present. Which command should be used to reload the udev rules and trigger them for existing devices without rebooting?

Hard
58

The exhibit shows output from an RPM query on a RHEL 8 system. The installation time is shown as a Unix timestamp. Which command would display the installation date of the openssh-server package in a human-readable format?

Hard
59

A server has a backup script that runs daily at midnight. The system administrator notices that the script sometimes fails because the filesystem is mounted read-only. Which approach is the best practice to ensure the script runs only when the filesystem is writable?

Hard
60

A technician needs to remove a package named 'apache2' along with its configuration files from a Debian system. Which command should be used?

Easy
61

Which three options are valid ways to install a package 'curl' on a RHEL 8 system? (Choose three.)

Medium
62

A Linux server uses systemd-resolved for DNS resolution. Users report that hostname resolution fails intermittently. The administrator inspects /etc/resolv.conf and finds it is a symlink to /run/systemd/resolve/stub-resolv.conf with nameserver 127.0.0.53. Which command should the administrator use to verify the current DNS servers and resolution status?

Hard
63

Match each Linux runlevel to its typical description.

Medium
64

An organization uses a custom YUM repository. After adding a new RPM package to the repository, clients running 'yum update' do not see the new package. The repository metadata was regenerated using 'createrepo'. What is the most likely reason the clients are not seeing the update?

Hard
65

After a reboot, a server fails to obtain an IP address on its sole ethernet interface. The administrator checks /etc/netplan/01-netcfg.yaml and finds the configuration looks correct. However, the interface shows no IP. The system uses systemd-networkd. Which command should be run next to apply the configuration and bring up the interface?

Medium
66

Refer to the exhibit. An administrator wants to unset the BASH_ALIASES associative array. Which command will correctly remove it?

Easy
67

Refer to the exhibit. The system has multiple SAS drives attached to this controller, but one of them is not detected during boot. Which command is most likely to provide information about the device detection order?

Hard
68

Which configuration file is the primary configuration file for logrotate?

Medium
69

Which TWO of the following are valid methods to view kernel messages on a systemd-based system?

Medium
70

Which TWO commands can be used to set the default boot target (runlevel) in systemd?

Medium
71

An administrator needs to monitor real-time network bandwidth usage on a Linux server. Which two tools are specifically designed for this purpose? (Choose two.)

Hard
72

Which directory in the Filesystem Hierarchy Standard (FHS) contains essential user command binaries that are needed in single-user mode?

Easy
73

An administrator needs to install a Debian package file named custom-app.deb that was downloaded from a vendor website. The package has dependencies that are available in the configured repositories. Which command will install the package along with its dependencies?

Medium
74

A system administrator runs the command `fdisk -l` and sees the following line: Disk /dev/sda: 1000 GB, 1000204886016 bytes, 1953525168 sectors Based on this output, which statement is true?

Easy
75

A system administrator wants to display all lines in /var/log/syslog that do NOT contain the string 'error'. Which command accomplishes this?

Easy
76

A junior admin is tasked with configuring network bonding on a Debian server with two Ethernet interfaces, eth0 and eth1. The goal is to provide link redundancy using active-backup mode. The admin edits /etc/network/interfaces and adds configuration for bond0 with slaves eth0 eth1, then runs 'ifup bond0'. However, the bond interface fails to come up and the error message indicates that the 'bond' kernel module is not loaded. The admin checks with 'lsmod | grep bonding' and finds no output. Which additional step is required to successfully bring up the bond interface? Options: A) Run 'modprobe bonding' before ifup, B) Use ifenslave directly after ifup, C) Reboot the system to load the module, D) Add 'auto bond0' in /etc/network/interfaces.

Easy
77

Order the steps to configure a Linux system to use a proxy server for HTTP.

Medium
78

Which TWO commands are used to manage Debian packages? (Choose two.)

Easy
79

A Linux administrator is preparing a new server and needs to install a package group called 'Development Tools' on a CentOS 8 system. The administrator wants to see which packages are included in this group before installing. Which command should be used?

Medium
80

You are a system administrator at a hosting company. A customer reports that their website hosted on a shared LAMP server is returning error 500. The server runs Ubuntu 22.04 with Apache, MySQL, and PHP. You log in and find that the /var partition (on /dev/sda3, ext4) is almost full. You identify that the MySQL database directory /var/lib/mysql contains several large binary logs that are no longer needed. You delete the binary logs using 'rm -f /var/lib/mysql/mysql-bin.*'. However, the available space does not increase. You also notice that an inode leak is suspected. You check inode usage with 'df -i' and see that the partition has plenty of free inodes. You then check with 'lsof | grep deleted' and see several entries for mysqld holding deleted files. What is the correct procedure to free the space?

Hard
81

Refer to the exhibit. When will the backup script run?

Medium
82

After receiving a compressed tarball archive.tar.gz from a colleague, you want to list its contents without extracting. Which command should you use?

Medium
83

A user complains that a filesystem is reporting 'Disk quota exceeded' even though the user has not stored any new files recently. What could be the cause?

Medium
84

A Debian-based server has a custom application installed from a local .deb file that was built in-house. The administrator wants to verify the package's metadata (version, dependencies, and maintainer scripts) before installing it on a production system, but does not want to actually install it. Which command should the administrator use?

Medium
85

A system is running out of disk space on /var. The administrator finds that /var/log/syslog is 4GB. Which of the following is the best course of action to prevent future issues while keeping recent logs?

Hard
86

A minimal Linux system boots using a legacy BIOS with GRUB 2 installed in the MBR of /dev/sda. The administrator wants to install a new boot loader configuration that writes the boot code to the MBR and also places core.img in the gap between the MBR and the first partition. Which command accomplishes this?

Hard
87

On a Debian-based system using ifupdown, which file should be edited to configure a static IP address for an interface?

Easy
88

Refer to the exhibit. The system administrator wants to determine which package provides the file /etc/passwd. Based on the output, which command would be most appropriate to find the package?

Medium
89

A system administrator notices that the system time is incorrect by several minutes. Which command should be used first to check the status of NTP synchronization?

Easy
90

A Linux administrator needs to create a new ext4 filesystem on a logical volume /dev/vg0/lv_data and mount it persistently at /data. Which TWO of the following steps are required to accomplish this? (Choose two.)

Hard
91

After connecting a USB device, the system does not create a device node in /dev. Which command can be used to trigger udev to re-evaluate the device?

Hard
92

Which THREE of the following are valid sources to configure GRUB?

Hard
93

A shell script contains the following line: `find /data -type f -name '*.tmp' -exec rm {} \;`. What is the effect of this command?

Hard
94

Based on the exhibit, which of the following is true about the cleanup.sh job?

Medium
95

A system administrator notices that the /tmp directory is filling up quickly, causing applications to fail. The administrator wants to ensure that files in /tmp are automatically cleaned after a certain period. Which of the following is the best approach without installing additional software?

Medium
96

A Linux administrator needs to create an ext4 filesystem on the second partition of the third SCSI disk, /dev/sdc2. After running mkfs.ext4 /dev/sdc2, the command completes successfully. Which additional step is required before the filesystem can be mounted and used?

Medium
97

You are a junior administrator for a company that uses a standard disk image for all Linux servers. The image is based on CentOS 7. You need to ensure that new servers automatically install all available security updates during the first boot. You plan to run a command in a startup script. Which command should you use?

Easy
98

Which command lists all installed packages on a Debian-based system by querying the dpkg database?

Easy
99

A systems administrator downloads a .deb package file but it fails to install due to unmet dependencies. Which command sequence should be used to resolve the dependencies and complete the installation?

Easy
100

Which three files are essential for network configuration and name resolution on a typical Linux system? (Choose three.)

Easy
101

Refer to the exhibit. The system administrator notices the /var/log partition is nearly full. The syslog file is 2GB. Which command will safely reduce the size of this log file without stopping the logging daemon?

Medium
102

An administrator wants to run a shell script every day at 2:00 AM. Which command should be used to edit the user's personal crontab?

Easy
103

An administrator added a new APT repository to sources.list. Which command must be run to make the system aware of the packages from that repository?

Easy
104

A Linux workstation fails to boot and drops to a GRUB prompt. The administrator needs to inspect the available disks and partitions from within the GRUB environment before attempting recovery. Which command lists block devices and partitions recognized by GRUB?

Medium
105

An administrator needs to copy a directory hierarchy from one server to another over SSH, preserving permissions, ownership, and timestamps. Which command is most appropriate?

Medium
106

Which TWO commands can be used to display the current firewall rules in a system using nftables? (Choose two.)

Hard
107

Arrange the steps to schedule a cron job that runs a script every day at 2 AM.

Medium
108

A shell script must exit immediately with a non-zero status if any command fails, and it must also treat an unset variable as an error. Which line should be placed at the top of the script?

Medium
109

A Linux administrator is troubleshooting a server that cannot resolve external hostnames. The server has a static IP address and can ping 8.8.8.8 successfully. The administrator checks /etc/resolv.conf and finds only 'nameserver 127.0.0.53'. Which command will best help determine the actual DNS servers being used and the resolution path?

Medium
110

Match each package manager to its associated distribution family.

Medium
111

Which directory under the root filesystem is defined by FHS as containing variable data that may change in size, such as logs and spools?

Medium
112

A technician needs to identify the hardware installed on a Linux workstation. The technician runs a command that prints a hierarchical tree of PCI devices showing vendor and device IDs, along with the kernel driver in use. Which command was most likely executed?

Easy
113

A system administrator writes a script that extracts data from a CSV file and inserts it into a database. The script works correctly when run manually but fails when executed by cron. Which environment variable is most likely causing the issue?

Medium
114

An administrator wants to allow user 'john' to run all commands as root without a password. Which sudoers entry accomplishes this?

Medium
115

A technician is preparing a USB stick that must be readable by both Linux and Windows systems without installing extra drivers. Which filesystem should be created on the stick?

Easy
116

An administrator notices the system clock is drifting. Which command can be used to enable automatic time synchronization using NTP on a system with systemd?

Medium
117

A developer needs to ensure a bash script exits immediately if any command fails, and also prints each command before executing it. Which set of shell options should be used at the beginning of the script?

Hard
118

Which THREE locations are used to configure package repositories on a typical Linux system? (Choose three.)

Hard
119

A system administrator needs to determine which package owns the file /usr/bin/htop on a Debian-based server. Which command should the administrator use?

Easy
120

A system is not logging messages to /var/log/syslog. Which command should an administrator use first to diagnose the issue?

Medium
121

A Linux system has two network interfaces: eth0 and eth1. The administrator wants to bond them for increased throughput. Which kernel module is required for bonding?

Medium
122

An administrator runs `mount /dev/sdc1 /mnt/data` and receives the error "mount: /mnt/data: unknown filesystem type 'ntfs'." The partition contains an NTFS volume that must be mounted read-write on a Linux server. Which action resolves the issue?

Medium
123

A system administrator is troubleshooting a package dependency issue on a Debian system. Which three commands can be used to display dependency information for a package? (Choose three.)

Hard
124

Which THREE are valid fields in a GRUB 2 configuration file (grub.cfg) generated by update-grub? (Choose three.)

Hard
125

Arrange the steps to troubleshoot a service that fails to start.

Medium
126

An administrator ran 'dnf update' and a critical application broke. The administrator wants to undo the last transaction and return to previous state. Which command should be used?

Hard
127

A Linux administrator needs to change the permissions of a directory named /shared so that only the owner can read, write, and execute, while group members can read and execute but not write, and others have no access. The administrator also wants any new files created inside /shared to inherit the group ownership of /shared. Which command sequence will achieve this?

Hard
128

An administrator needs to find all files in the /var/log directory that have been modified in the last 24 hours. Which command should be used?

Easy
129

Which TWO commands can be used to display the current runlevel of a SysV init system?

Easy
130

An administrator wants to add a kernel parameter 'quiet splash' to the default boot entry. Which file should be edited?

Medium
131

A Linux administrator needs to configure a system to use a proxy server for HTTP and HTTPS traffic for all users. Which TWO environment variables should be set in a system-wide profile script to ensure that command-line tools like curl and wget use the proxy? (Choose two.)

Medium
132

A Linux administrator is configuring a CentOS 7 server and needs to manage software packages using the native RPM toolset. The administrator wants to perform two tasks: (1) verify the integrity of an installed package against its original metadata, and (2) list all files installed by a specific package. Which TWO commands should the administrator use? (Choose two.)

Hard
133

Arrange the steps to configure a static IP address on a Linux system using the command line.

Medium
134

A system administrator is troubleshooting a server that takes a long time to boot. The administrator wants to identify which systemd units are slowing down the boot process. Which TWO of the following commands can be used to analyze boot performance? (Choose two.)

Medium
135

Which TWO tools can be used to query DNS records? (Choose two.)

Easy
136

The system administrator wants to add a new swap partition on /dev/sdb2. After creating the partition, which command should be used to initialize it as swap?

Medium
137

Which sed command will replace the first occurrence of 'foo' with 'bar' on each line of a file?

Easy
138

An administrator wants to list all lines in a log file that do NOT contain the word 'ERROR'. Which command should be used?

Easy
139

A Linux system's hostname resolution does not consult /etc/hosts before querying DNS. Which file controls the order of name resolution services?

Hard
140

A technician is diagnosing a server that fails to reach the expected multi-user target. The technician wants to gather evidence about kernel ring buffer messages and the systemd journal for the current boot. Which TWO commands provide this diagnostic information? (Choose two.)

Hard
141

A Linux administrator is troubleshooting a server that intermittently fails to detect a newly installed network card. The administrator suspects the kernel is not loading the correct driver automatically. Which TWO commands should be used to identify the PCI device and then load the appropriate kernel module manually? (Choose two.)

Hard
142

An administrator needs to check the system's load averages without displaying any process information. Which command should be used?

Easy
143

A Linux server acts as a router between an internal network and the internet. After enabling IPv4 forwarding, clients still cannot reach external hosts. The administrator confirms the routing table is correct and the external interface is up. Which command displays the current kernel packet-filter rules so the administrator can verify whether forwarding is being blocked?

Medium
144

A systems administrator maintains a Linux web server running Apache HTTP Server (version 2.4) with three virtual hosts. The server logs are stored in /var/log/httpd/ and are rotated using logrotate, which is configured with the default settings that came with the Apache package. The administrator has noticed that after the nightly log rotation, the main access log file (access_log) is empty, while the rotated log files (e.g., access_log.1, access_log.2) contain the previous day's data. Furthermore, new HTTP requests are being logged into the most recent rotated file (access_log.1) instead of the current access_log file. The administrator has verified that the logrotate cron job runs successfully, and that the log files are owned by the root user with read/write permissions for the root group. No errors appear in the system logs. The Apache service continues to run and serve web pages. Which of the following actions should the administrator take to ensure that Apache writes new log entries to the current access_log file after rotation?

Hard
145

A technician is troubleshooting a system that fails to boot with the error 'Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)'. What is the most likely cause?

Medium
146

Refer to the exhibit. A user runs 'python --version' and gets 'Python 3.9.1'. Which command would run Python 2 instead?

Medium
147

An administrator needs to inspect the hardware inventory of a server, including details about the motherboard, BIOS, and memory banks, in a structured way. Which command provides this information by reading from the DMI/SMBIOS data?

Easy
148

Which TWO commands are used to install packages on a Debian-based system? (Choose two.)

Easy
149

A server has an LVM logical volume mounted at /data. The administrator needs to add a new physical disk to the volume group and then extend both the logical volume and the filesystem online, without unmounting. Which sequence of commands achieves this?

Hard
150

A directory contains files with spaces and special characters in their names. An administrator wants to delete all files older than 30 days using find and xargs. Which command is safe?

Hard
151

A Linux server uses nftables as its firewall. The administrator needs to allow incoming SSH (TCP/22) and HTTP (TCP/80) while dropping all other incoming traffic. Which TWO statements about implementing this are correct? (Choose two.)

Hard
152

Refer to the exhibit. A system administrator runs 'ip route show default' and gets this output. What does it indicate?

Easy
153

A shell script contains a function named `cleanup` that must run automatically when the script exits, whether it finishes normally or is terminated by a signal. Which construct should be used to register this function?

Hard
154

A technician is troubleshooting a server whose /var partition is reported as full by applications, but df -h shows the filesystem at only 40 percent usage. The technician suspects deleted files are still held open by running processes. Which command best identifies the process holding a deleted file open on that filesystem?

Hard
155

A backup operator needs to archive the entire /srv/projects tree, preserving permissions, ownership, and directory structure, into a single compressed file that can later be unpacked on another Linux host. Which TWO commands correctly produce such an archive? (Choose two.)

Hard
156

A Linux server uses chrony for time synchronization. The administrator notices that the system clock is drifting by several seconds per day. Which command should she use to verify which NTP servers are currently selected and the estimated offset?

Medium
157

A script needs to read a file line by line, preserving leading and trailing whitespace and backslashes. Which loop construct should be used?

Medium
158

A Linux administrator is troubleshooting a package dependency issue. When attempting to install package 'foo', the package manager reports a missing dependency 'libbar.so.2'. Which of the following is the most appropriate next step?

Medium
159

An administrator wants to prevent a specific user, 'john', from being able to schedule cron jobs. Which file should the administrator modify?

Medium
160

A Linux administrator needs to create a user account 'jsmith' with a home directory '/home/jsmith' and the default shell '/bin/bash'. The account must be created without creating a group with the same name. Which command accomplishes this?

Medium
161

Which directory contains information about hardware devices in a hierarchical structure, such as PCI devices and USB devices?

Easy
162

Which TWO of the following are true about the 'source' command in bash?

Medium
163

Which TWO of the following are true about the /proc filesystem?

Hard
164

The administrator wants the sshd service to start automatically at boot. Which command should be used?

Easy
165

A user runs the command 'grep -E '^[[:space:]]*[^#]' /etc/ssh/sshd_config' and receives no output. Which statement best explains this result?

Hard
166

A system administrator needs to check if a filesystem has any errors without actually performing a repair. Which command should be used?

Easy
167

Which command can be used to check whether a specific kernel module is currently loaded?

Medium
168

A technician needs to inspect a compressed log archive named app.log.gz without modifying it, and wants to view only the first 20 lines. The archive is 40 MB compressed. Which command accomplishes this most efficiently?

Medium
169

Which THREE steps are required to configure a network interface with a static IP address using the ip command (assuming interface eth0)? (Choose three.)

Medium
170

Which TWO commands can display the UUID of block devices?

Medium
171

A server runs systemd-resolved and uses a VPN. DNS queries fail intermittently. The administrator checks /etc/resolv.conf and finds it is a symlink to /run/systemd/resolve/stub-resolv.conf. Which command should be used to view the effective DNS servers and debug the issue?

Hard
172

Which command displays information about currently loaded kernel modules?

Easy
173

Refer to the exhibit. The /var partition is nearly full. Which of the following is the most appropriate first step to free up space?

Hard
174

A script uses the command substitution: files=$(ls). Which statement about the resulting value of files is true?

Medium
175

A junior administrator needs to create a new ext4 filesystem on the partition /dev/sdb2. The partition already exists but has never been formatted. Which command should the administrator run to create the filesystem?

Easy
176

Refer to the exhibit. What can be concluded about the cron daemon based on this systemctl output?

Medium
177

Which TWO of the following are valid ways to capture the output of a command into a variable in Bash?

Easy
178

Which directory contains the kernel modules for the currently running kernel?

Easy
179

A help-desk technician must determine which shell built-in will display the absolute path of the directory the user is currently working in, so it can be captured in a support script. Which command should the technician use?

Easy
180

A technician needs to output only the kernel release number. Which command should be used?

Easy
181

A Linux administrator needs to archive the /etc directory into a compressed tarball at /backup/etc_backup.tar.bz2. The administrator wants to see the progress of the archiving process as files are added. Which command should be used?

Medium
182

A system administrator notices that the system's syslog messages are not being written to /var/log/messages. The rsyslog service is running. The administrator wants to check the configuration syntax of rsyslog. Which command should be used?

Medium
183

A Linux administrator runs df -h and sees that the /var filesystem is 100% full. The administrator deletes several large log files, but df still shows 100% usage. Which command should the administrator use to identify processes that are holding deleted files open?

Medium
184

A server with a udev rule fails to consistently assign a persistent network interface name. What is the most likely cause?

Medium
185

Refer to the exhibit. A user tries to write to /mnt/usb/myfile.txt as a non-root user and receives a permission denied error. What is the most likely reason?

Medium
186

An administrator needs to identify the device file for the first SATA SSD in a server. Which device file should they use?

Easy
187

Which THREE directories are commonly used for mounting removable media in Linux?

Medium
188

A user runs the command `echo $HOME` in a Bash shell and receives the output `/home/alice`. A colleague later runs the same command in a different shell and gets `/root`. Which type of shell variable is being displayed?

Easy
189

A Linux administrator is managing a server that uses RPM-based package management. They need to find which installed package provides the '/etc/ssh/sshd_config' file. Which command should they use?

Medium
190

Which TWO commands can be used to view the contents of a compressed file named archive.tar.gz without extracting it to disk?

Easy
191

A technician needs to inspect the filesystem type, UUID, and filesystem label of the partition /dev/sdb1 without mounting it. Which command provides all of this information in a single invocation?

Medium
192

After running 'ip route show default', a system administrator sees no output. Users on that system can only communicate with hosts on the local subnet. What is the most likely cause?

Hard
193

A server has a partition /dev/sda2 that is almost full. The admin suspects a large file has been deleted but is still held open by a process. Which command can identify such a file?

Medium
194

A Linux system has a software RAID1 array /dev/md0 consisting of /dev/sda1 and /dev/sdb1. After replacing a failed disk, the administrator runs 'mdadm --manage /dev/md0 --add /dev/sdc1', but the array remains degraded. Which command should be used to check the status of the array?

Hard
195

Given a file with lines like 'John:23:Engineer', which awk command prints only the name and department (first and third fields) separated by a space?

Medium
196

Which THREE package management tools are native to Debian-based Linux distributions? (Choose exactly three.)

Easy
197

A system administrator needs to ensure that a bash script continues executing even if any command in the script fails. Which of the following should be used at the beginning of the script?

Medium
198

A Linux administrator is preparing a new Ubuntu 22.04 server and needs to ensure that the package lists are up to date before installing software. Which command should be used to refresh the package index from all configured repositories?

Easy
199

A Red Hat system administrator suspects that the files belonging to the 'openssh-server' package have been modified since installation. Which command verifies the integrity of the installed package files?

Medium
200

The /proc filesystem is described as a virtual filesystem. Which statement best describes its purpose?

Easy
201

A technician is troubleshooting network connectivity. The server's IP is 192.168.1.10/24, and the gateway is 192.168.1.1. The server can ping the gateway but cannot ping 8.8.8.8. Which command is most appropriate to check if the default route is configured?

Easy
202

A system administrator notices that the NTP service on a Linux server is not synchronizing time with external NTP servers. The administrator runs 'ntpq -p' and sees that all servers listed have a 'reach' value of 0. Which of the following is the most likely cause?

Hard
203

A Linux administrator wants to update the local package index from all configured repositories on an Ubuntu system. Which command accomplishes this?

Easy
204

Which TWO commands can be used to display the contents of a compressed file without decompressing it to disk? (Choose two.)

Medium
205

Refer to the exhibit. An administrator runs 'ntpq -p' and sees the output shown. What is the most likely cause of the '16' stratum and '0.000' delay/offset?

Hard
206

A junior administrator needs to install the package 'nginx' on a Debian 12 server, but the required package file is not available in any configured APT repository. The administrator has downloaded the file 'nginx_1.22.1-9_amd64.deb' to the current directory. Which command should be used to install this local package file while automatically resolving and installing any missing dependencies from the configured repositories?

Medium
207

An administrator must configure persistent mounts for two filesystems on a database server. One is an ext4 volume that should be mounted at boot without failing the whole boot process if it is unavailable. The other is a swap partition that must be activated at boot. Which TWO entries belong in /etc/fstab to meet these requirements? (Choose two.)

Medium
208

A Linux server has a USB serial adapter that is sometimes detected as /dev/ttyUSB0 and sometimes as /dev/ttyUSB1 after reboot. An administrator wants to create a udev rule that always assigns the name /dev/ttyUSB-radio to this specific adapter based on its serial number. Which udev rule syntax should be used?

Hard
209

A script produces both standard output and error messages. An administrator wants to save the output to 'out.log' and the error messages to 'err.log', but also wants to see both on the terminal. Which command achieves this?

Hard
210

After creating a new user with 'useradd john', the user 'john' cannot log in. What is the most likely cause?

Hard
211

Which TWO options in /etc/fstab affect whether a filesystem is mounted at boot? (Choose two.)

Easy
212

A Linux administrator needs to determine which kernel modules are currently loaded on a running system. The administrator also wants to see the module dependencies and the use count for each module. Which command should be used?

Medium
213

A system administrator wants to ensure that the filesystem on /dev/sdb1 is checked for errors every 30 mounts. Which command accomplishes this?

Easy
214

Which TWO of the following commands can be used to create a new filesystem on a partition?

Easy
215

A systemd service unit file must be configured to automatically restart the service if it exits unexpectedly. Which directive should be used?

Hard
216

A shell script uses the variable expansion ${var:-default} to set a default value for an environment variable. The script prints unexpected output when the variable is set to an empty string. Which expansion should be used to ensure the default is only used when the variable is unset, not when it is empty?

Medium
217

A junior administrator accidentally deleted a large log file that is still being written to by a running process. The file no longer appears in directory listings, but `df -h` shows the filesystem is still nearly full. Which command will reclaim the space without interrupting the running process?

Medium
218

A system administrator needs to install the latest version of a package named 'webapp' from a third-party repository that has been added to the system. Which command should be used to update the package list and install the package in one step?

Easy
219

Refer to the exhibit. An administrator attempts to remount /mnt as read-only but receives the error shown. What is the most likely cause?

Medium
220

When troubleshooting a problem with a Debian package installation, an administrator wants to see which version of a package would be installed from the configured repositories. Which command displays the candidate version?

Hard
221

A Yellowdog Updater Modified (YUM) transaction that included several package installations and upgrades completed successfully, but a recent change caused a service to break. The administrator wants to revert the entire transaction using its transaction ID. Which command should be used?

Medium
222

A system administrator needs to schedule a recurring maintenance task that runs every Monday at 3 AM. Which crontab entry is correct?

Easy
223

A zombie process appears in the process list. The parent process has PID 1234. Which command will most likely remove the zombie?

Medium
224

A system administrator is preparing a custom RPM package for internal distribution. The package must be built from source code and a spec file. Which command should be used to build the binary RPM from the spec file?

Medium
225

According to FHS, which directory should NOT be mounted on a networked filesystem (e.g., NFS) because it contains host-specific configuration files?

Hard
226

Refer to the exhibit. A Linux system fails to boot with a kernel panic. The dmesg output shows the disk is detected and partitions are recognized. Which of the following is the most likely cause of the kernel panic?

Hard
227

A junior administrator is asked to verify which TCP ports are listening on a Linux server and which processes own them. Which command provides this information directly?

Easy
228

Based on the dpkg -l output in the exhibit, what does the 'rc' status indicate for the apache2 package?

Medium
229

Match each Linux command to its primary function.

Medium
230

An ext4 filesystem is experiencing performance degradation due to very frequent small writes. Which tune2fs option can help by reserving a percentage of blocks for the root user to prevent fragmentation?

Hard
231

Refer to the exhibit. What is the file permission in numeric mode for /etc/crontab?

Easy
232

A system has multiple APT repositories configured. The administrator needs to ensure that for a specific package, the version from a particular repository is always preferred over others, regardless of version number. Which configuration would achieve this?

Hard
233

An administrator needs to mount an ISO image located at /tmp/install.iso to the directory /mnt/iso. Which command will accomplish this?

Medium
234

Refer to the exhibit. The 'mount -a' command fails for the NFS mount. What is the most likely cause?

Hard
235

A system administrator wants to ensure that the syslog service starts automatically on boot and is running immediately without a reboot. Which command sequence should be used?

Hard
236

A junior administrator needs to extract only the lines containing the word 'ERROR' from /var/log/syslog, but the log may have inconsistent casing (e.g., 'ERROR', 'Error', 'error'). Which command will print all such lines while ignoring case?

Medium
237

Refer to the exhibit. What will be the default permissions of a newly created file using the touch command?

Medium
238

A system administrator needs to perform incremental backups of a large directory /data. The backup strategy requires a full backup every Sunday and incremental backups on weekdays. Which tar command satisfies this requirement using the --listed-incremental option?

Hard
239

An administrator needs to install a package named 'nginx' on a Debian system, but the package is already installed. The administrator wants to ensure that the latest available version from the configured repository is installed, upgrading if necessary. Which command should be used?

Easy
240

An administrator needs to downgrade a package from version 2.0 to version 1.9. Which apt-get command can be used to perform this action?

Medium
241

Which THREE statements are true about the sed command?

Hard
242

An administrator is troubleshooting a DNS issue. The command 'dig @8.8.8.8 example.com' returns a response, but 'host example.com' returns 'Host not found'. Which of the following is the most likely cause?

Hard
243

A user wants to view the contents of a large text file one page at a time, with the ability to scroll both forward and backward. Which command should the user employ?

Easy
244

Based on the exhibit, what will happen if the syslog service is stopped?

Hard
245

A Linux system fails to boot after installing a new kernel. Which step should be taken first to recover the system?

Easy
246

A technician is tasked with installing a package from a third-party repository on a CentOS 7 system. What is the correct first step to add the repository?

Medium
247

Which THREE of the following are valid symbolic mode expressions for the chmod command?

Hard
248

Refer to the exhibit. An administrator installed a new command in /opt/bin/ but cannot run it without specifying the full path. What is the likely cause?

Easy
249

Refer to the exhibit. Based on the apt-cache showpkg output, which version of vim would be installed if the administrator runs 'apt-get install vim' without specifying a version?

Easy
250

A web server runs Apache and generates extensive access logs. To conserve disk space, an administrator sets up a cron job that runs nightly at 2:00 AM. The job executes a shell script located at /usr/local/bin/rotate_logs.sh. The script is intended to find all .log files in /var/log/apache2/ that are older than 7 days, compress them with gzip, and move the compressed files to /var/log/archive/. However, after several days, the administrator notices that the /var/log partition is nearly full and the logs are not being compressed. The cron log shows the job ran at the scheduled time but produced no terminal output (stdout or stderr). The script itself contains no explicit echo statements or error handling. The administrator has root access and wants to diagnose the problem without disrupting the running web server. Which of the following is the most appropriate first step to identify the failure?

Hard
251

A user needs to find all lines in a file that contain the word `error` while ignoring case, and also print the line number for each match. Which TWO `grep` invocations accomplish this? (Choose two.)

Medium
252

What is stored in the first sector of a hard disk (Master Boot Record)?

Easy
253

On a Fedora system, which command is used to update all installed packages to their latest versions?

Easy
254

Refer to the exhibit. A system administrator finds this line in /etc/rsyslog.conf. What is the effect of this configuration?

Hard
255

Refer to the exhibit. An administrator runs this command expecting to capture both stdout and stderr into output.txt. However, the file contains only stdout. What is the error?

Hard
256

A system takes a long time to boot due to a service that fails to start. Which systemd command can be used to identify the service causing the delay?

Hard
257

Which of the following commands will display the default gateway of a Linux system?

Easy
258

A developer downloads the source code for a kernel module and attempts to compile it using `make`. The compilation fails with an error indicating that the kernel header files are missing. Which package should be installed to provide the necessary headers on a Debian system?

Hard
259

An organization's DNS server (BIND) is authoritatively serving the example.com zone. The administrator needs to add a mail exchange record for mail.example.com with priority 10. Which resource record should be added to the zone file?

Medium
260

Refer to the exhibit. Based on the dpkg output, what is the status of the 'ftp' package?

Easy
261

A user wants to view the first 10 lines of a log file named /var/log/syslog. Which command should they use?

Easy
262

A company is setting up a database server that requires high reliability and support for snapshots. The storage will be on a single large disk. Which filesystem is best suited for this requirement?

Hard
263

A system administrator wants to compile and install a program from source. After running './configure --prefix=/opt/myapp', the configure script fails with an error about missing 'libssl-dev'. What should the administrator do to resolve this issue?

Medium
264

Which TWO commands can be used to create an ext4 filesystem on a partition?

Easy
265

Which TWO commands are commonly used to start, stop, or restart system services on a Linux system that uses systemd as its init system?

Easy
266

In a bash script, a variable 'file' is set to '/var/log/syslog'. Which expansion will yield the string '/var/log'?

Medium
267

A sysadmin is troubleshooting a connectivity issue between two servers in different subnets. The output of 'traceroute 192.168.2.10' shows packets reaching a router but not the destination. The router's firewall uses iptables. Which rule would prevent the traceroute from completing?

Hard
268

Refer to the exhibit. The root filesystem is nearly full. The administrator needs to increase its size. Which steps should be performed?

Hard
269

Which command displays information about the CPU, including model name, cache size, and flags?

Easy
270

A user reports that a USB flash drive plugged into a Linux workstation is not automatically mounted. The administrator runs 'lsblk' and sees the device as /dev/sdb1 with no mountpoint. Which command should the administrator use to manually mount the filesystem on /dev/sdb1 to the /mnt/usb directory?

Easy
271

A company runs a critical database server on Linux. The server has a hardware RAID controller with two logical volumes: one for the operating system (LV1) and one for the database data (LV2). The server uses LVM on top of the RAID volumes. Recently, the database performance has degraded. The administrator suspects that the file system on LV2 is heavily fragmented. The server uses the ext4 filesystem. The administrator wants to check the fragmentation level and, if necessary, defragment the filesystem without unmounting it or causing downtime. What should the administrator do to minimize fragmentation impact while maintaining availability?

Hard
272

An openSUSE administrator needs to add a new repository from a URL and refresh the package cache. Which command sequence accomplishes this?

Hard
273

A Linux administrator needs to find all files in the /var/log directory that are larger than 10 MB and have not been accessed in the last 30 days. The administrator also wants to delete these files to free up space. Which command will accomplish this safely, prompting for confirmation before each deletion?

Hard
274

A junior administrator needs to schedule a backup script to run as the user 'backup' every day at 02:30. The script is /usr/local/bin/backup.sh, and output should be discarded. Which crontab entry should the administrator add to the 'backup' user's crontab to accomplish this?

Medium
275

Which TWO of the following are required for a system to boot using UEFI?

Medium
276

Refer to the exhibit. On boot, which filesystem will be checked first by fsck?

Medium
277

A backup script stores its log file path in the variable LOGFILE and needs to append a timestamp line to that file. Which command correctly appends the output of the `date` command to the file named in the variable?

Medium
278

An administrator wants to change the owner of all files in /data to user 'web' without changing the group. Which command should be used?

Medium
279

Refer to the exhibit. Which users are allowed to use the 'at' command?

Medium
280

After modifying /etc/fstab, an administrator wants to test if the new mount points can be mounted without rebooting. Which command should be used?

Easy
281

Which TWO directories are commonly used to store source code before compiling? (Choose two.)

Medium
282

Which TWO commands can be used to display the UUID of a filesystem? (Choose two.)

Easy
283

A junior administrator on a systemd host needs the OpenSSH daemon to start automatically after every reboot and to begin running immediately without rebooting the machine. Which single command accomplishes both requirements?

Easy
284

A user 'jdoe' already exists. The administrator needs to add 'jdoe' to the 'staff' and 'admin' groups without changing other group memberships. Which command accomplishes this?

Hard
285

Which TWO statements about GRUB 2 are correct?

Medium
286

An admin runs 'lsblk' and sees that /dev/nvme0n1p1 is listed with size 512M and mounted at /boot/efi. What is the most likely filesystem type?

Medium
287

Which TWO of the following commands output the total number of lines in a file?

Easy
288

A Linux administrator needs to configure a system to act as a router between two subnets. The system has two network interfaces: eth0 (192.168.1.1/24) and eth1 (10.0.0.1/24). Which TWO steps are required to enable routing between these subnets? (Choose two.)

Medium
289

A user needs to schedule a backup script to run every weekday at 2:00 AM. Which command should they use to set up this recurring job?

Easy
290

A user wants to set a shell variable named DEPLOY_ENV to the value 'staging' in the current Bash session so that child processes can read it. Which command accomplishes this?

Easy
291

After running 'df -h', the administrator sees that /dev/sda1 is 100% used. 'du -sh /mountpoint' shows only 50% used. What is the most likely cause?

Medium
292

After a failed package upgrade, a Debian system shows 'unmet dependencies' when trying to install any new software. What is the most appropriate command to fix this condition?

Hard
293

Arrange the steps to create a LVM logical volume and mount it.

Medium
294

Refer to the exhibit. The remount command fails. What is the most likely cause?

Hard
295

Refer to the exhibit. How many physical disks are present in the system?

Easy
296

To enable disk quotas for user quotas on a filesystem, which line should be added to /etc/fstab's mount options?

Easy
297

A small office has a network printer with IP 192.168.1.100. The printer is shared via CUPS. A user reports that they cannot print a document from their workstation. The printer appears in the list of available printers, but when they try to print, the job hangs in the queue with status 'processing'. The administrator suspects the printer may be offline or the CUPS service is not running. Which command should the administrator run first to gather diagnostic information about the printer and its queue?

Easy
298

Which TWO of the following are valid methods to specify a partition in /etc/fstab?

Medium
299

A junior administrator needs to install the package 'nginx' on an Ubuntu 22.04 server. They want to ensure all required dependencies are automatically resolved and installed. Which command should they use?

Easy
300

Which TWO characteristics describe the difference between 'apt-get' and 'aptitude'? (Choose two.)

Medium
301

A server in a corporate network uses systemd-resolved for DNS. Internal hostnames (e.g., server.example.lan) fail to resolve, but external names (e.g., google.com) work. The /etc/resolv.conf is a symlink to /run/systemd/resolve/stub-resolv.conf. The administrator checks the systemd-resolved configuration and finds that the internal DNS server is listed globally, but the network interface has no specific DNS set. Which command should be used to assign the internal DNS server to the interface and fix resolution?

Hard
302

Which three commands are commonly used to display information about running processes?

Hard
303

Order the steps to mount an NFS share from a remote server.

Medium
304

A system administrator suspects that a particular service is failing to start at boot. The service is managed by systemd. Which command will show the current status of the service, including whether it is active, and recent log entries?

Medium
305

A user submitted a print job to a CUPS printer but used the wrong options. Which command should the administrator use to cancel the job?

Easy
306

A junior administrator needs to install the package 'nginx' on an Ubuntu 22.04 server. They download the nginx_1.18.0-6ubuntu14.4_amd64.deb file from a vendor website and run the command 'dpkg -i nginx_1.18.0-6ubuntu14.4_amd64.deb'. The installation fails with an error stating that the package depends on 'libnginx-mod-http-image-filter'. Which command should the administrator run next to resolve the missing dependency?

Medium
307

Which systemd target corresponds to the traditional runlevel 3?

Easy
308

A system administrator wants to disable the graphical target and boot to the text mode multi-user.target permanently. Which command should they run?

Medium
309

A Linux system fails to boot with the error: 'Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)'. What is the most likely cause?

Medium
310

An administrator needs to extract only the fifth field from a colon-delimited file, but some lines contain fewer than five fields and must be skipped rather than printed as empty. Which awk program accomplishes this?

Hard
311

An administrator needs to display the current and previous runlevels of a Linux system. Which command provides this information?

Hard
312

Match each Linux directory to its standard purpose.

Medium
313

A system has a software RAID1 array (/dev/md0) with two disks: /dev/sda and /dev/sdb. Disk /dev/sda fails. Which command sequence will replace the failed disk with a new /dev/sdc without stopping the array?

Hard
314

A system administrator needs to install a new kernel on a Debian-based system. Which TWO commands can be used to achieve this? (Choose TWO.)

Medium
315

A system administrator needs to ensure that the httpd service starts automatically when the system enters the multi-user.target. Which command should be used?

Medium
316

A developer needs to run a script named `backup.sh` every day at 02:30 using the system-wide cron facility. The system uses a traditional cron daemon and the file `/etc/crontab` contains a `SHELL` and `PATH` line. Which entry in `/etc/crontab` correctly schedules the script to run as user 'backup'?

Hard
317

A junior administrator needs to extract only the file 'etc/nginx/nginx.conf' from the archive 'backup.tar.bz2' into the current directory, preserving its path structure. Which command should be used?

Medium
318

A sysadmin notices that after modifying iptables rules, the SSH service is unreachable from a specific subnet (192.168.1.0/24). Which command should be used to view the current rules with line numbers for easier identification?

Medium
319

Which THREE of the following directories are part of the FHS and must be present on a standard Linux system? (Choose three.)

Hard
320

A web server running on this host is not accessible from clients. Based on the exhibit, what is the most likely reason?

Medium
321

A Linux administrator needs to install a single Debian package file named 'custom-tool_2.1.0_amd64.deb' that was downloaded from a vendor's website. The package has several dependencies that are not currently installed, and the administrator wants the package manager to automatically resolve and install those dependencies from the configured repositories. Which command should the administrator use?

Medium
322

Which TWO of the following are valid methods to change the default runlevel on a SysV init-based system?

Easy
323

A Linux administrator is preparing a new server and needs to create an ext4 filesystem on the /dev/sdb1 partition. Which command should be used?

Easy
324

A user reports that they cannot create new files in their home directory even though the filesystem shows free space. Running df -h shows the filesystem at 100 percent inode usage. Which action most directly resolves the immediate problem?

Easy
325

Refer to the exhibit. What is the current state of the SSH service?

Easy
326

Match each ACL term to its meaning.

Medium
327

A user reports that they cannot connect to a remote server using SSH. The administrator checks the SSH server status and it is running. Which of the following is the most likely cause?

Easy
328

A sysadmin wants to prevent an APT package from being upgraded automatically but still allow it to be upgraded manually if needed. Which configuration method best achieves this?

Hard
329

Refer to the exhibit. The system administrator sees that /var/log is 93% full and the syslog file is nearly 2 GB. What is the most appropriate immediate action to free up disk space without losing any critical log data?

Easy
330

To add a kernel parameter temporarily to the kernel command line at boot, what key should be pressed in the GRUB menu?

Medium
331

A dependency analysis shows that removing package 'libfoo' will also remove 'appA' and 'appB' because they depend on libfoo. The administrator wants to remove libfoo but keep appA and appB. What is the best approach?

Hard
332

Which TWO of the following are Debian package management tools?

Easy
333

Based on the exhibit, the 'custom' repository shows 0 packages. What is the most likely cause?

Hard
334

A user downloaded a Debian package file named 'software.deb'. Which command should be used to install it?

Easy
335

Refer to the exhibit. An administrator is trying to install Google Chrome but receives a GPG error. Which command should be run to add the repository's GPG key?

Hard
336

A user reports that they cannot access the company's web server. The administrator confirms the server is running and network connectivity is fine. Which command should be used to verify that the HTTP service is listening on the correct port?

Easy
337

A junior administrator is monitoring a long-running data migration and wants the 'df -h' output for the /data mount point to refresh automatically on screen every 5 seconds, replacing the previous output each time. Which command accomplishes this?

Medium
338

A system administrator needs to see the boot messages recorded by systemd-journald from the current boot. Which command is most appropriate?

Medium
339

Refer to the exhibit. The job runs every hour but the administrator notices that it does not execute on Sundays. Which cron syntax element is responsible?

Hard
340

A user reports that when they run 'ls -l' in their home directory, they see files but all files have permissions like '-rwxrwxrwx', which is unexpected. The system administrator checks and finds that the user's umask is set to 000. The user wants all new files to be created with default permissions of -rw-r--r-- (644) and directories that are drwxr-xr-x (755). What should the user set their umask to?

Easy
341

A system administrator wants to monitor network traffic on a specific port (TCP/443) entering the server. Which command will capture packets on interface eth0 and display them in real-time?

Medium
342

Which three actions can an administrator take to securely erase data on a disk before decommissioning?

Medium
343

During boot, a server loads the wrong kernel. Which file should the administrator modify to change the default kernel in a standard GRUB 2 configuration?

Medium
344

A system administrator needs to ensure that a custom kernel module named 'mydriver.ko' is loaded automatically at boot on a system that uses systemd. The module is located in /lib/modules/$(uname -r)/extra/. Which approach is most appropriate?

Hard
345

An administrator needs to gather detailed information about the partition table and filesystem geometry of /dev/sda before migrating data. Which TWO commands will display the partition layout of the disk? (Choose two.)

Medium
346

A junior administrator runs `ps aux` and sees a process owned by user 'deploy' with STAT code 'T'. The process is a long-running data migration script. The administrator wants to know what this status means and what will happen if no action is taken. Which statement correctly describes the process state?

Medium
347

An administrator needs to mount an ISO image file /tmp/image.iso to the directory /mnt/iso. Which command should be used?

Medium
348

An administrator is configuring a DHCP server to assign IP addresses to clients in the 192.168.10.0/24 subnet. The server should provide the default gateway as 192.168.10.1 and DNS server as 8.8.8.8. Which option in /etc/dhcp/dhcpd.conf defines the default gateway?

Easy
349

Which command is used to view the last few lines of a log file and simultaneously follow new entries as they are written?

Easy
350

Refer to the exhibit. This line is from /etc/passwd. What does the third field (1001) represent?

Easy
351

Refer to the exhibit. What is the purpose of the 'test -x /usr/sbin/anacron' command in the cron entries?

Hard
352

An administrator needs to replace all occurrences of 'old_host' with 'new_host' in the file /etc/hosts. Which sed command should be used?

Easy
353

Which TWO statements about udev rules are correct? (Choose two.)

Medium
354

A system administrator notices that a server with a freshly installed Linux system fails to boot with the error 'No bootable device found'. The server has a single SATA hard disk connected to the motherboard's SATA controller. Which of the following is the most likely cause of this issue?

Medium
355

Which THREE of the following are characteristics of UEFI firmware compared to legacy BIOS? (Select exactly 3.)

Hard
356

Which of the following commands displays the amount of free disk space on all mounted filesystems in a human-readable format?

Easy
357

A Linux administrator needs to view the current kernel ring buffer messages to diagnose a hardware issue that occurred during boot. Which command will display these messages?

Easy
358

During the boot process, the system stops at a GRUB prompt. Which command should be typed to continue booting?

Easy
359

A medium-sized company runs a web application on a Linux server. The server uses systemd and has the following configuration: the web application service (webapp.service) is configured to start after network.target and requires a database service (database.service) to be running. The database service has a Restart=on-failure directive. Recently, the server experienced a power outage. Upon reboot, the system administrator notices that the web application fails to start because the database service is in a failed state. The administrator checks the status of database.service and sees 'inactive (dead)' with no recent attempts to restart. The journal shows that the database service failed to start because a required filesystem (mounted at /var/lib/database) was not mounted when the database service tried to start. The filesystem is listed in /etc/fstab with the nofail option. The administrator wants to ensure that in future reboots, the database service starts successfully and the web application comes up without manual intervention. Which of the following is the best course of action?

Hard
360

Refer to the exhibit. An administrator wants to verify the integrity of the kernel-core package by checking its signature. Which command is used?

Easy
361

A Linux administrator needs to configure a new system to automatically mount an NFS share at boot. The share is exported from server 'nfs.example.com' as '/export/data'. The mount point '/mnt/data' already exists. Which TWO actions are required to ensure the share is mounted automatically and persistently? (Choose two.)

Medium
362

An administrator plans to back up the /home filesystem using dump. Which option to dump is required to perform a full backup?

Medium
363

Refer to the exhibit. Which statement is true about SSH root login on this server?

Medium
364

A script contains the following line: for i in $(cat file.txt); do echo $i; done. The file file.txt contains a single line with multiple words. How many times will the loop execute?

Easy
365

A company runs a legacy application on a Linux server. The application fails to start after a reboot, claiming a 'cannot open shared object file' error. The system administrator checks the library path and finds that the required library is present in /usr/local/lib but the application cannot find it. The administrator has verified that the library file exists and is readable. Which of the following is the most likely cause and solution?

Hard
366

Which TWO commands can be used to display the amount of free and used memory on a Linux system? (Select exactly 2.)

Easy
367

Which TWO of the following commands can be used to replace text patterns in a file and output the result?

Medium
368

A small business uses a Linux server running CUPS to share a network printer. For several months, all employees could print successfully. Today, an employee in a different subnet reports that printing does not work. The administrator checks the server: cupsd is running, the printer is configured with an IPP URI pointing to the printer's IP address, and the printer is idle. The administrator can ping the printer from the server. The administrator checks the CUPS error log and sees the following line multiple times: 'E [04/Oct/2024:10:15:22 -0400] [Client 5] client-error-not-authorized'. Which of the following actions should the administrator take to resolve the issue?

Easy
369

A user compiling software from source successfully runs './configure' and 'make', but the resulting binaries are not in the PATH. Which command should be run to install them system-wide?

Medium
370

A small business runs a Linux server hosting a web application and a PostgreSQL database. The server uses LVM for storage, with a single volume group vg_data containing two logical volumes: lv_web (50GB) and lv_db (100GB). The root filesystem is on a separate disk. The administrator receives alerts that the database volume is at 95% capacity. The server has additional unused space from a recently added disk that was added to the volume group as an additional physical volume, but the space has not been allocated. The administrator runs 'vgs' which shows VG vg_data with total size 500GB, allocated 150GB, and free 350GB. The administrator wants to increase the size of lv_db by 50GB. Which course of action should the administrator take?

Hard
371

Which THREE of the following are valid files or directories used by the Domain Name System (DNS) resolution process on a Linux system?

Medium
372

An administrator needs to restart the SSH service after a configuration change. Which TWO commands can accomplish this on a systemd-based system?

Medium
373

A system administrator wants to configure NTP client on a server running systemd and using systemd-timesyncd. Which file should be edited to set the NTP server?

Medium
374

A technician is repairing a system and needs to mount the root filesystem from a different disk to /mnt/sysroot. The partition is /dev/sda2 with an ext4 filesystem. Which command should be used?

Easy
375

A server has a dedicated disk /dev/sdc that will store application logs. The administrator wants the filesystem to be checked automatically only after 30 mounts or 60 days, whichever comes first, and wants to reduce the reserved block percentage to 1 percent. Which single command accomplishes both changes on the existing ext4 filesystem?

Medium
376

In the /etc/shadow file, a user's password hash begins with '$6$'. What hash algorithm does this prefix indicate?

Hard
377

An administrator suspects that a critical system file has been modified after installation. Which command can be used to verify the integrity of all installed RPM packages on a RHEL system?

Hard
378

Which THREE of the following are types of expansion performed by the bash shell during command parsing?

Medium
379

A system administrator wants to install custom scripts that should be available to all users. The scripts are not part of any package and should be placed under the Filesystem Hierarchy Standard (FHS). Which directory is most appropriate?

Medium
380

Refer to the exhibit. An administrator wants to mount /dev/sda4 persistently by its UUID. Which line should be added to /etc/fstab?

Medium
381

An administrator needs to create a new ext4 filesystem on /dev/sdb1 and wants to reserve 2% of the blocks for the root user. Which command should be used?

Medium
382

A system administrator needs to determine which package owns the file /usr/bin/htop on a Debian-based system. Which command will provide this information?

Easy
383

Which TWO of the following are valid methods to reduce boot time on a Linux system? (Select exactly 2.)

Medium
384

A system boots in UEFI mode, and the administrator wants to add a new kernel entry to the EFI boot manager. Which tool should be used?

Hard
385

A system administrator suspects a failing power supply because the server randomly reboots. Which command can be used to check hardware health and event logs?

Medium
386

Which TWO of the following are valid methods to list currently loaded kernel modules?

Easy
387

A server has two disk drives: /dev/sda (SSD) and /dev/sdb (HDD). The administrator wants to place frequently accessed files on the SSD for performance. Which approach best achieves this using Linux filesystem features?

Hard
388

A data center server with two NICs (eth0 and eth1) is configured for network bonding in mode 1 (active-backup). The admin notices that after a cable pull on eth0, the bond interface fails over to eth1 as expected. However, when the cable is reconnected to eth0, the bond remains on eth1 indefinitely. The admin checks /proc/net/bonding/bond0 and sees that eth0 is marked as 'up' but not as 'active'. Which parameter is most likely missing from the bond configuration? Options: A) 'miimon=100' to enable link monitoring, B) 'downdelay=0', C) 'updelay=0', D) 'primary=eth0' to prefer eth0 as the active slave.

Medium
389

Refer to the exhibit. How much unpartitioned space is available on /dev/sda?

Easy
390

A system administrator wants to ensure a service named 'app.service' starts automatically on boot in a systemd-based system. Which command should be used?

Medium
391

A system administrator notices that the system boots to the graphical interface but wants to change it to boot to a non-graphical multi-user target. Which command will make this change persistent?

Medium
392

A junior administrator needs to add a new user account named 'tester' to a Linux server. The account must have a home directory created at /home/tester, and the default shell should be set to /bin/bash. The administrator runs 'useradd tester' but later finds that no home directory was created and the shell is /bin/sh. Which command should have been used to meet both requirements?

Medium
393

A system administrator needs to locate the largest directories under /var to free up disk space. Which command is most appropriate?

Easy
394

Order the steps to create and apply a file system permission using ACLs.

Medium
395

A company is deploying a new web application and needs to ensure high availability. They have two web servers and want to use DNS round-robin. Which DNS record type is most appropriate?

Medium
396

An administrator must grant a contractor temporary, passwordless sudo access to run only /usr/bin/systemctl restart nginx on a production web server. Which entry in a file under /etc/sudoers.d/ best meets this requirement while limiting privilege escalation?

Hard
397

Refer to the exhibit. When will the cron job execute?

Easy
398

Which command adds a new group named 'developers' to the system?

Easy
399

A system administrator is troubleshooting a server where the /var partition is full, causing services to fail. The administrator deletes old log files in /var/log, but the available space does not increase. Which step should be taken next?

Hard
400

An administrator needs to extend a logical volume by 10GB. The volume group has available physical extents. Which command should be used?

Medium
401

An administrator notices that a large file on an ext4 filesystem is taking up more disk space than expected based on its size. Which command would show the actual disk usage (block allocation) of the file?

Medium
402

A database server on a Linux system is configured to listen on TCP port 3306. The administrator wants to restrict access to the database server to only the local network (192.168.1.0/24) using iptables. Which of the following iptables rules achieves this?

Hard

Frequently asked questions

What does the troubleshooting domain cover on the LPIC-1 exam?
troubleshooting questions test whether you can apply the concept in context, not just recognise a definition.
How many questions are in this domain?
This page lists all 402 troubleshooting questions in the LPIC-1 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only troubleshooting questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.