Back to Linux Professional Institute Certification Level 1 LPIC-1 questions

Scenario-based practice

Hard Difficulty Questions

Practise Linux Professional Institute Certification Level 1 LPIC-1 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

20
scenario questions
LPIC-1
exam code
LPI
vendor

Scenario guide

How to approach hard difficulty questions

These are the questions most candidates get wrong. They require connecting multiple concepts, reading tricky output, or knowing edge-case behaviour that isn't on most study cards. Practising them trains you to operate under uncertainty — a necessary skill on the real exam.

Quick answer

Hard Difficulty Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Related practice questions

Related LPIC-1 topic practice pages

Scenario questions usually connect to one or more exam topics. Use these links to review the underlying concepts behind the scenario.

Practice set

Practice scenarios

Question 1hardmultiple choice
Full question →

Refer to the exhibit. A system administrator checks the integrity of the passwd package on a CentOS 7 system using rpm -V. Based on the output, what is the most likely cause of the 'missing' line?

Exhibit

Refer to the exhibit.
```
$ rpm -qf /usr/bin/passwd
passwd-0.79-5.el7.x86_64
$ rpm -V passwd
S.5....T.  c /etc/pam.d/passwd
missing   c /etc/security/passwd
```
Question 2hardmulti select
Full question →

Which THREE commands can be used to display the UUID of a filesystem on a Linux system without superuser privileges? (Choose three.)

Question 3hardmulti select
Full question →

Which TWO commands can be used to count the number of lines in a file named 'data.txt'?

Question 4hardmultiple choice
Full question →

Refer to the exhibit. An administrator runs 'ntpq -p' and sees the output shown. What is the most likely cause of the '16' stratum and '0.000' delay/offset?

Exhibit

Refer to the exhibit.

# cat /etc/ntp.conf
server 0.pool.ntp.org iburst
server 1.pool.ntp.org iburst
# driftfile /var/lib/ntp/ntp.drift
restrict default kod nomodify notrap nopeer noquery
restrict -6 default kod nomodify notrap nopeer noquery
restrict 127.0.0.1
restrict -6 ::1
# ntpq -p
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
*0.pool.ntp.org   .POOL.          16 p    -   64    0    0.000   0.000   0.000
 1.pool.ntp.org   .POOL.          16 p    -   64    0    0.000   0.000   0.000
Question 5hardmultiple choice
Full question →

An administrator needs to ensure that a specific kernel module is loaded automatically at boot. Which file should be used to permanently load the module?

Question 6hardmultiple choice
Full question →

A server has two disk drives: /dev/sda (SSD) and /dev/sdb (HDD). The administrator wants to place frequently accessed files on the SSD for performance. Which approach best achieves this using Linux filesystem features?

Question 7hardmultiple choice
Full question →

An organization uses a custom YUM repository. After adding a new RPM package to the repository, clients running 'yum update' do not see the new package. The repository metadata was regenerated using 'createrepo'. What is the most likely reason the clients are not seeing the update?

Question 8hardmultiple choice
Full question →

During boot, a Linux system displays 'Kernel panic – not syncing: VFS: Unable to mount root fs on unknown-block(0,0)'. Which of the following is the most likely cause?

Question 9hardmultiple choice
Full question →

Refer to the exhibit. Why does the cron job fail?

Network Topology
-rw-rrRefer to the exhibit.$ cat /etc/cron.d/backup$ ls -l /usr/local/bin/backup.sh$ su -c '/usr/local/bin/backup.sh' --bash: /usr/local/bin/backup.sh: Permission denied
Question 10hardmultiple choice
Full question →

A developer needs to ensure a bash script exits immediately if any command fails, and also prints each command before executing it. Which set of shell options should be used at the beginning of the script?

Question 11hardmulti select
Full question →

Which THREE statements are true about the sed command?

Question 12hardmultiple choice
Full question →

A Linux system fails to boot with the error 'Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)'. Which of the following is the most likely cause?

Question 13hardmultiple choice
Full question →

A server has a backup script that runs daily at midnight. The system administrator notices that the script sometimes fails because the filesystem is mounted read-only. Which approach is the best practice to ensure the script runs only when the filesystem is writable?

Question 14hardmultiple choice
Read the full DNS explanation →

An administrator is troubleshooting a DNS issue. The command 'dig @8.8.8.8 example.com' returns a response, but 'host example.com' returns 'Host not found'. Which of the following is the most likely cause?

Question 15hardmultiple choice
Full question →

Refer to the exhibit. A Linux system fails to boot with a kernel panic. The dmesg output shows the disk is detected and partitions are recognized. Which of the following is the most likely cause of the kernel panic?

Exhibit

Refer to the exhibit.

# dmesg | grep -i 'ata\|sda'
[    0.000000] ACPI: IRQ9 used by override.
[    0.000000] ACPI: IRQ9 used by override.
[    2.345678] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[    2.345679] ata1.00: ATA-8: ST31000524AS, JC45, max UDMA/133
[    2.345680] ata1.00: 1953525168 sectors, multi 16: LBA48 NCQ (depth 31/32)
[    2.345681] ata1.00: configured for UDMA/133
[    2.345682] scsi 0:0:0:0: Direct-Access     ATA      ST31000524AS     JC45 PQ: 0 ANSI: 5
[    2.345683] sd 0:0:0:0: [sda] 1953525168 512-byte logical blocks: (1.00 TB/931 GiB)
[    2.345684] sd 0:0:0:0: [sda] Write Protect is off
[    2.345685] sd 0:0:0:0: [sda] Mode Sense: 00 3a 00 00
[    2.345686] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[    2.345687] sda: sda1 sda2
[    2.345688] sd 0:0:0:0: [sda] Attached SCSI disk
Question 16hardmultiple choice
Full question →

Refer to the exhibit. An administrator needs to edit /etc/example.conf to change setting1 to 'production' and add a new line 'setting2=value' after the include line. The file must be edited in place without creating a backup. Which command sequence achieves this?

Network Topology
-rw-rrRefer to the exhibit.# ls -l# cat /etc/example.conf# Configuration filesetting1=default# Include other configinclude /etc/example.d/*.conf
Question 17hardmultiple choice
Read the full DHCP explanation →

An administrator reviews the above DHCP server logs. Based on the output, which statement is correct about the DHCP transaction?

Exhibit

Refer to the exhibit.

$ cat /var/log/messages | grep -i "dhcp" | tail -5
Nov 12 08:22:15 server dhcpd: DHCPDISCOVER from 00:1a:2b:3c:4d:5e via eth0
Nov 12 08:22:15 server dhcpd: DHCPOFFER on 192.168.1.100 to 00:1a:2b:3c:4d:5e via eth0
Nov 12 08:22:18 server dhcpd: DHCPREQUEST for 192.168.1.100 (192.168.1.1) from 00:1a:2b:3c:4d:5e via eth0
Nov 12 08:22:18 server dhcpd: DHCPACK on 192.168.1.100 to 00:1a:2b:3c:4d:5e via eth0
Nov 12 08:22:20 server dhcpd: DHCPINFORM from 192.168.1.100 via eth0
Question 18hardmultiple choice
Full question →

Refer to the exhibit. After adding a new disk to the system, the device /dev/sdb appears. However, the administrator cannot create partitions on /dev/sdb using fdisk. What is the most likely reason?

Network Topology
brw-rw1 root disk 8# ls -l /dev/sda# ls -l /dev/sda1# ls -l /dev/sda2# ls -l /dev/sdb
Question 19hardmultiple choice
Full question →

Refer to the exhibit. How many SATA controllers are detected, and what is the connection speed of the SSD?

Exhibit

Refer to the exhibit.

$ dmesg | grep -i "ata"
[    1.234567] ata1: SATA max UDMA/133 abar m2048@0xfebf8000 port 0xfebf8100 irq 24
[    1.234568] ata2: SATA max UDMA/133 abar m2048@0xfebf8000 port 0xfebf8180 irq 24
[    1.345678] ata1: SATA link up 6.0 Gbps (SStatus 123 SControl 300)
[    1.345679] ata2: SATA link up 3.0 Gbps (SStatus 123 SControl 300)
[    1.567890] ata1.00: ATA-11: Samsung SSD 860 EVO, MZ-76E250, max UDMA/133
[    1.567891] ata1.00: 488397168 sectors, multi 16: LBA48 NCQ (depth 32)
[    1.567892] ata2.00: ATA-9: WDC WD10EZEX-00WN4A0, 01.01A01, max UDMA/133
[    1.567893] ata2.00: 1953525168 sectors, multi 16: LBA48 NCQ (depth 32)
Question 20hardmulti select
Full question →

Which THREE of the following are characteristics of UEFI firmware compared to legacy BIOS? (Select exactly 3.)

These LPIC-1 practice questions are part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style LPIC-1 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.