Courseiva
File Sharing and SambahardMultiple ChoiceObjective-mapped

LPIC-2 File Sharing and Samba Practice Question

A Samba share uses the 'acl_xattr' VFS module to store NT ACLs in extended attributes. The administrator runs 'getfattr -d /srv/share/file.txt' and sees no system attributes related to NT ACLs. What is the most likely cause?

⚠ Common exam trap

Many exam-takers confuse the 'user_xattr' mount option with the 'user' namespace for extended attributes, assuming it only affects user-defined attributes, when in fact it enables all extended attribute support on the filesystem.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The filesystem is not mounted with the 'user_xattr' option.

The 'acl_xattr' VFS module stores NT ACLs in extended attributes within the 'system' namespace. If 'getfattr -d' shows no system attributes, the most likely cause is that the underlying filesystem is not mounted with the 'user_xattr' option, which is required to enable extended attribute support. Without this mount option, the filesystem cannot store or retrieve extended attributes, so the NT ACL data is not persisted.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The VFS module is not loaded globally.

    Why it's wrong here

    The VFS module can be loaded per share, and it may be configured correctly.

  • The filesystem is not mounted with the 'user_xattr' option.

    Why this is correct

    Extended attributes require the user_xattr mount option.

  • The share does not have 'nt acl support = yes' set.

    Why it's wrong here

    This parameter enables NT ACL translation, but xattr storage still needs filesystem support.

  • The file's extended attributes are stored in a different namespace.

    Why it's wrong here

    NT ACLs are stored in the system.security namespace, which getfattr -d should show.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

Courseiva writes every LPIC-2 question from scratch — 507 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This LPIC-2 practice question is part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the LPIC-2 exam.