LPIC-2 System Security Practice Question
Which THREE of the following actions are recommended as initial security hardening steps after installing a new Linux server? (Choose three.)
⚠ Common exam trap
Many exam-takers confuse 'initial hardening steps' with optional or convenience-based actions, such as installing a desktop environment or a web server, which actually weaken security rather than strengthen it.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Update all packages using the package manager.
Immediately updating all packages via the package manager (e.g., `apt upgrade` or `yum update`) applies the latest security patches to the kernel, libraries, and services, closing known vulnerabilities that could be exploited by attackers. This is a foundational step in the initial hardening process, as a newly installed system often ships with outdated packages that have published CVEs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Update all packages using the package manager.
Why this is correct
Ensures the latest security patches are applied.
- ✓
Disable root login via SSH.
Why this is correct
Prevents direct root access, forcing users to use sudo.
- ✗
Install a graphical desktop environment for easier administration.
Why it's wrong here
This introduces additional services and vulnerabilities, not recommended for a server.
- ✓
Enable and configure a firewall (e.g., iptables or firewalld).
Why this is correct
Restricts network access to only necessary ports.
- ✗
Set up a web server to monitor system status.
Why it's wrong here
Running additional services increases attack surface; not a hardening step.
Go deeper
Related to this question
About these practice questions
Courseiva writes every LPIC-2 question from scratch — 507 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This LPIC-2 practice question is part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the LPIC-2 exam.