Courseiva
← Back to Linux Professional Institute Certification Level 2 LPIC-2 questions

Scenario-based practice

Hard Difficulty Questions

Practise Linux Professional Institute Certification Level 2 LPIC-2 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice testRead exam guide
20
scenario questions
LPIC-2
exam code
LPI
vendor

Scenario guide

How to approach hard difficulty questions

These are the questions most candidates get wrong. They require connecting multiple concepts, reading tricky output, or knowing edge-case behaviour that isn't on most study cards. Practising them trains you to operate under uncertainty — a necessary skill on the real exam.

Quick answer

Hard Difficulty Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Related practice questions

Related LPIC-2 topic practice pages

Scenario questions usually connect to one or more exam topics. Use these links to review the underlying concepts behind the scenario.

Linux Kernel and System Startup practice questions

Practise LPIC-2 questions linked to Linux Kernel and System Startup.

Block Devices, Filesystems and Advanced Storage practice questions

Practise LPIC-2 questions linked to Block Devices, Filesystems and Advanced Storage.

Advanced Networking Configuration practice questions

Practise LPIC-2 questions linked to Advanced Networking Configuration.

DNS, Web and Mail Services practice questions

Practise LPIC-2 questions linked to DNS, Web and Mail Services.

File Sharing and Samba practice questions

Practise LPIC-2 questions linked to File Sharing and Samba.

System Security practice questions

Practise LPIC-2 questions linked to System Security.

Network Client Management practice questions

Practise LPIC-2 questions linked to Network Client Management.

LPIC-2 fundamentals practice questions

Practise LPIC-2 questions linked to LPIC-2 fundamentals.

LPIC-2 scenario practice questions

Practise LPIC-2 questions linked to LPIC-2 scenario.

LPIC-2 troubleshooting practice questions

Practise LPIC-2 questions linked to LPIC-2 troubleshooting.

Practice set

Practice scenarios

Question 1hardmultiple choice
Full question →

A systems administrator is troubleshooting a server that fails to boot after a kernel upgrade. The boot process hangs at the stage where the kernel attempts to mount the root filesystem. Which of the following is the most likely cause?

Question 2hardmultiple choice
Full question →

An administrator is designing a high-availability storage solution using DRBD. The requirement is to have two nodes with synchronous replication and automatic failover in case of primary node failure. Which configuration best achieves this?

Question 3hardmultiple choice
Review the full routing breakdown →

A client on the internet sends a TCP SYN packet to 10.0.1.10:8080. The router receives it on eth0. According to the exhibit, what will happen to the packet?

Network Topology
MASQUERADE all10.0.2.0/24DNAT tcpRefer to the exhibit.# ip route showdefault via 10.0.1.1 dev eth0# iptables -L -t natChain PREROUTING (policy ACCEPT)target prot opt source destinationChain POSTROUTING (policy ACCEPT)
Question 4hardmulti select
Read the full DNS explanation →

Which TWO statements are true regarding BIND DNS server security? (Choose two.)

Question 5hardmultiple choice
Read the full NAT/PAT explanation →

A Samba server is configured as a print server. Clients running Windows 10 report that printer drivers cannot be uploaded. The relevant smb.conf section is:

[printers]

comment = All Printers path = /var/spool/samba browseable = no printable = yes

What is the most likely cause?

Question 6hardmultiple choice
Full question →

A Linux workstation must be configured to automatically mount an NFS share from server nfs.example.com:/exports/data at boot time. The share should be mounted with noexec and nosuid options. Which line should be added to /etc/fstab?

Question 7hardmultiple choice
Full question →

An administrator is reviewing the audit rules on a Linux server. The current rules are shown in the exhibit. The administrator needs to ensure that any failed attempts to open files are logged, while also monitoring for successful outbound connections. Which of the following describes the effect of the current rules?

Exhibit

Refer to the exhibit.

```
# auditctl -l
-a always,exit -F arch=b64 -S openat -F success=0 -F key=access_denied
-a always,exit -F arch=b64 -S connect -F key=outbound_connect
-w /etc/shadow -p wa -k shadow_changes
-w /etc/ssh/sshd_config -p wa -k sshd_config_change
```
Question 8hardmultiple choice
Read the full DNS explanation →

Based on the exhibit, which command would change the DNS server to 1.1.1.1 for the connection MyConnection?

Exhibit

Refer to the exhibit.

```
# nmcli device show eth0
GENERAL.DEVICE:                         eth0
GENERAL.TYPE:                           ethernet
GENERAL.HWADDR:                         00:1A:2B:3C:4D:5E
GENERAL.MTU:                            1500
GENERAL.STATE:                          100 (connected)
GENERAL.CONNECTION:                     MyConnection
WIRED-PROPERTIES.CARRIER:               on
IP4.ADDRESS[1]:                         192.168.1.100/24
IP4.GATEWAY:                            192.168.1.1
IP4.DNS[1]:                             8.8.8.8
IP4.DNS[2]:                             8.8.4.4
```
Question 9hardmultiple choice
Review the full subnetting walkthrough →

A Linux router running multiple routing tables is misconfigured. The administrator wants to add a policy routing rule that sends all traffic from subnet 10.10.0.0/16 to routing table 200. Which command should be used?

Question 10hardmultiple choice
Full question →

An administrator is troubleshooting network isolation in a Linux container environment. The container should have its own network stack, but it appears to be using the host's interfaces. Which command correctly runs a command inside a network namespace named 'ns1' to verify its network configuration?

Question 11hardmultiple choice
Full question →

A Samba server experiences slow file transfers for large files. The administrator suspects oplock issues. Which set of parameters should be adjusted to disable opportunistic locking?

Question 12hardmultiple choice
Full question →

A Samba server is experiencing slow authentication for domain users. The logs show repeated winbind connections to the domain controllers. The administrator suspects that winbind is not caching credentials properly. Which parameter should be checked or increased to improve caching?

Question 13hardmultiple choice
Full question →

A company is migrating from a workgroup environment to an Active Directory domain. The Samba server is already configured as a domain member using winbind. The administrator wants to ensure that files created by domain users on the Samba server are owned by the corresponding UNIX user accounts derived from the domain. Which idmap backend and configuration is recommended for this purpose?

Question 14hardmultiple choice
Full question →

A user reports that an external USB hard drive is not detected when plugged in. The system uses a standard kernel with USB support. What is the most likely reason?

Exhibit

Refer to the exhibit.

$ cat /etc/modprobe.d/blacklist.conf
# Disable USB storage to prevent unauthorized devices
blacklist usb_storage
Question 15hardmulti select
Full question →

Which THREE kernel boot parameters can be added to the GRUB command line to enable verbose debug output during boot? (Choose three.)

Question 16hardmultiple choice
Full question →

An administrator needs to ensure a kernel module is never loaded, even if requested. Which file should be used?

Question 17hardmultiple choice
Full question →

A technician is troubleshooting a system that fails to boot after adding a new SATA SSD and editing /etc/fstab. The error message is 'Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(8,17)'. What is the most likely issue?

Question 18hardmulti select
Full question →

Which TWO statements about LVM thin provisioning are correct?

Question 19hardmultiple choice
Full question →

An organization uses LDAP for centralized authentication. The /etc/nsswitch.conf contains 'passwd: files ldap' and 'shadow: files ldap'. The /etc/pam.d/system-auth includes 'auth requisite pam_ldap.so' and 'account required pam_ldap.so'. However, users can log in using local accounts but not LDAP accounts. The ldapsearch command works correctly against the LDAP server. Logs show 'pam_ldap: error trying to bind as user (No such object)'. Which configuration change is most likely needed?

Question 20hardmulti select
Read the full DNS explanation →

An administrator is configuring a BIND 9 DNS server to support DNSSEC for the zone 'example.com'. The zone is signed using the NSEC3 algorithm. Which TWO statements are correct regarding the configuration and operation of NSEC3?

These LPIC-2 practice questions are part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style LPIC-2 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.