LPIC-1 GNU and Unix Commands Practice Question
Exhibit
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.1 22564 4500 ? Ss Jan01 0:00 /sbin/init user1 1234 0.0 0.0 0 0 ? Z Jan01 0:00 [defunct] user1 1235 0.0 0.1 12345 2000 ? S Jan01 0:00 bash
Refer to the exhibit. The process with PID 1234 is in state 'Z'. What is the most likely cause and appropriate action?
⚠ Common exam trap
Many exam-takers confuse zombie ('Z') with stopped ('T') or sleeping ('S') states, leading them to choose a recovery action like sending SIGCONT or simply waiting, rather than recognizing that a zombie requires the parent to reap it or be terminated.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The process is a zombie; the parent process must be killed or wait for it to be reaped.
In Linux process states, 'Z' indicates a zombie process, which is a child process that has terminated but whose exit status has not yet been read by its parent process via the wait() system call. The correct action is to either kill the parent process (so that the zombie is reaped by init) or ensure the parent calls wait() to reap the child. Option D correctly identifies this.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The process is stopped; use kill -CONT to continue.
Why it's wrong here
Stopped process shows state T, not Z.
- ✗
The process is a daemon; it should be restarted.
Why it's wrong here
Daemons typically show Ss or other states, not Z.
- ✗
The process is sleeping; wait for it to become ready.
Why it's wrong here
Sleeping processes show S or D.
- ✓
The process is a zombie; the parent process must be killed or wait for it to be reaped.
Why this is correct
Zombies require the parent to reap them; if parent is not waiting, it may need to be terminated.
Go deeper
Related to this question
About these practice questions
One of 527 original LPIC-1 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This LPIC-1 practice question is part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the LPIC-1 exam.