Courseiva
Back to Linux Professional Institute Certification Level 1 LPIC-1 questions

Scenario-based practice

Hard Difficulty Questions

Practise Linux Professional Institute Certification Level 1 LPIC-1 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

20
scenario questions
LPIC-1
exam code
LPI
vendor

Scenario guide

How to approach hard difficulty questions

These are the questions most candidates get wrong. They require connecting multiple concepts, reading tricky output, or knowing edge-case behaviour that isn't on most study cards. Practising them trains you to operate under uncertainty — a necessary skill on the real exam.

Quick answer

Hard Difficulty Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Related practice questions

Related LPIC-1 topic practice pages

Scenario questions usually connect to one or more exam topics. Use these links to review the underlying concepts behind the scenario.

Practice set

Practice scenarios

Question 1hardmultiple choice
Full question →

The system is unable to mount a filesystem that should be identified by UUID 1234-5678. The administrator checks /etc/fstab and finds the entry: UUID=1234-5678 /data ext4 defaults 0 2. What is the most likely cause of the mount failure?

Exhibit

# ls -l /dev/disk/by-uuid/
total 0
lrwxrwxrwx 1 root root 10 Jan 10 10:00 1234-5678 -> ../../sda1
lrwxrwxrwx 1 root root 10 Jan 10 10:00 abcd-ef01 -> ../../sdb1
Question 2hardmultiple choice
Read the full DNS explanation →

A Linux system's hostname resolution does not consult /etc/hosts before querying DNS. Which file controls the order of name resolution services?

Question 3hardmultiple choice
Full question →

A system reports 'No space left on device' but 'df -h' shows only 60% usage. Which command would help identify the cause?

Question 4hardmulti select
Full question →

Which THREE statements are true about the sed command?

Question 5hardmultiple choice
Full question →

A system administrator is troubleshooting a server where the /var partition is full, causing services to fail. The administrator deletes old log files in /var/log, but the available space does not increase. Which step should be taken next?

Question 6hardmultiple choice
Full question →

A systems administrator maintains a Linux web server running Apache HTTP Server (version 2.4) with three virtual hosts. The server logs are stored in /var/log/httpd/ and are rotated using logrotate, which is configured with the default settings that came with the Apache package. The administrator has noticed that after the nightly log rotation, the main access log file (access_log) is empty, while the rotated log files (e.g., access_log.1, access_log.2) contain the previous day's data. Furthermore, new HTTP requests are being logged into the most recent rotated file (access_log.1) instead of the current access_log file. The administrator has verified that the logrotate cron job runs successfully, and that the log files are owned by the root user with read/write permissions for the root group. No errors appear in the system logs. The Apache service continues to run and serve web pages. Which of the following actions should the administrator take to ensure that Apache writes new log entries to the current access_log file after rotation?

Question 7hardmultiple choice
Read the full DHCP explanation →

A company's server administrator needs to replace an existing DNS server (192.168.1.10) with a new one (192.168.1.20). Which file must be updated on all DHCP clients to ensure they use the new DNS server?

Question 8hardmulti select
Full question →

Which TWO commands can be used to display the current firewall rules in a system using nftables? (Choose two.)

Question 9hardmultiple choice
Full question →

A database server on a Linux system is configured to listen on TCP port 3306. The administrator wants to restrict access to the database server to only the local network (192.168.1.0/24) using iptables. Which of the following iptables rules achieves this?

Question 10hardmultiple choice
Full question →

A system administrator is responsible for a production Debian 10 (buster) server that hosts a critical web application. The application requires the package 'libssl1.1' version 1.1.1 or higher, but the official Debian 10 repository only provides version 1.1.0. The administrator has already attempted to install the newer version from Debian 11 (bullseye) sources, but this caused dependency conflicts with the existing libc6 version. The server cannot be upgraded to Debian 11 due to application compatibility. The administrator needs to resolve this situation without breaking the existing system or introducing unofficial packages. Which of the following is the most appropriate course of action?

Question 11hardmultiple choice
Full question →

A mail server using Postfix is rejecting emails from a partner domain. The administrator checks the maillog and sees 'relay access denied'. Which Postfix configuration parameter is most likely misconfigured?

Question 12hardmultiple choice
Full question →

Refer to the exhibit. A user tries to execute a script on a mounted filesystem but gets a permission denied error. The script has execute permissions. What is the most likely cause?

Exhibit

$ mount | grep /dev/sdb1
/dev/sdb1 on /mnt/data type ext4 (rw,noexec,nosuid,nodev)
$ ls -l /mnt/data/script.sh
-rwxr-xr-x 1 root root 100 Jan 1 00:00 /mnt/data/script.sh
$ /mnt/data/script.sh
bash: /mnt/data/script.sh: Permission denied
Question 13hardmultiple choice
Full question →

Refer to the exhibit. Why does the cron job fail?

Network Topology
-rw-rrRefer to the exhibit.$ cat /etc/cron.d/backup$ ls -l /usr/local/bin/backup.sh$ su -c '/usr/local/bin/backup.sh' --bash: /usr/local/bin/backup.sh: Permission denied
Question 14hardmultiple choice
Full question →

In the /etc/shadow file, a user's password hash begins with '$6$'. What hash algorithm does this prefix indicate?

Question 15hardmultiple choice
Full question →

Refer to the exhibit. An admin attempts to execute a shell script located in /tmp but gets 'Permission denied'. Which mount option is most likely causing this?

Exhibit

$ mount
tmpfs on /tmp type tmpfs (rw,nosuid,nodev,noexec,relatime)
Question 16hardmulti select
Full question →

Which TWO of the following are valid methods to run a shell script named 'script.sh' using the bash shell, assuming the script has execute permission? (Choose two.)

Question 17hardmulti select
Full question →

Which THREE files are used by CUPS to manage printer queues? (Choose THREE.)

Question 18hardmultiple choice
Full question →

A system administrator is responsible for a Linux server running a critical application. The server recently experienced an unplanned power outage. Upon rebooting, the system fails to reach the default target and drops into an emergency shell. The administrator notices that the root filesystem (/) is mounted read-only. The /etc/fstab file contains the following lines:

UUID=abc123 / ext4 errors=remount-ro 0 1 UUID=def456 /home ext4 defaults 0 2 UUID=ghi789 none swap sw 0 0

The administrator suspects that the /home filesystem has a corrupt superblock and is causing the boot failure. The administrator needs to check and repair the /home filesystem without causing data loss. Which of the following is the correct course of action?

Question 19hardmultiple choice
Full question →

Refer to the exhibit. The /var partition is nearly full. Which of the following is the most appropriate first step to free up space?

Exhibit

$ cat /proc/partitions
major minor  #blocks  name
   8        0   52428800 sda
   8        1     524288 sda1
   8        2   51873792 sda2
   8       16   10485760 sdb
   8       17    1048576 sdb1
   8       18    9437184 sdb2
$ df -h
Filesystem      Size  Used Avail Use% Mounted on
/dev/sda2        50G   20G   30G  40% /
/dev/sda1       512M  100M  413M  20% /boot
/dev/sdb2       9.0G  8.5G  500M  95% /var
$ lsblk -f
NAME   FSTYPE LABEL UUID                                 MOUNTPOINT
sda
├─sda1 ext4          a1b2c3d4-...                       /boot
└─sda2 ext4          e5f6g7h8-...                       /
sdb
├─sdb1 swap          1234-5678-...                      [SWAP]
└─sdb2 ext4          i9j0k1l2-...                       /var
Question 20hardmultiple choice
Full question →

A script uses 'set -e' and then executes 'grep pattern file'. If the pattern is not found, the script exits. Which of the following modifications would prevent the script from exiting while still allowing detection of the pattern's absence?

These LPIC-1 practice questions are part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style LPIC-1 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.