View Full LPI 202-450  Exam Dumps and Practice Test Dumps

 

Question 81. Which BIND configuration statement defines a DNS zone and specifies where its zone data is stored?

1. options
2. controls
3. zone
4. logging

Correct Answer: 3. zone

Explanation :-

The BIND zone statement defines a DNS zone and specifies configuration information associated with that zone. A typical zone declaration identifies the zone name, its type, and the file containing the zone data. For example, an authoritative master zone may be configured with type master and a corresponding zone file. The options statement contains global server settings, controls configures administrative control channels such as those used by rndc, and logging controls BIND logging behavior. Zone declarations are therefore central to configuring authoritative DNS service.

Question 82. Which BIND zone type indicates that the server obtains the zone data from another authoritative server rather than maintaining the primary copy?

1. slave
2. master
3. hint
4. forward

Correct Answer: 1. slave

Explanation :-

A BIND slave zone, also commonly described as a secondary zone, obtains its authoritative zone data from another DNS server, normally the primary or master server. The secondary server maintains a local copy of the zone and can answer authoritative queries even when the primary is temporarily unavailable. A master zone contains the primary writable copy, while hint is associated with root-server information and forward is not the normal zone type for secondary authoritative data. Zone transfers such as AXFR or IXFR are used to synchronize secondary copies.

Question 83. Which DNS command-line tool is particularly useful for performing reverse DNS queries?

1. nslookup
2. host
3. dig
4. dnssec-signzone

Correct Answer: 4. dig

Explanation :-

The dig utility is a powerful DNS diagnostic tool that can perform forward and reverse queries and display detailed sections of DNS responses. A reverse query can be performed with options such as -x, allowing an administrator to determine whether an IP address maps to a PTR record. host and nslookup can also perform DNS queries, but dig provides especially detailed and flexible output for troubleshooting. dnssec-signzone is used for DNSSEC-related zone signing rather than ordinary DNS query diagnostics.

Question 84. Which DNS record is used for reverse mapping from an IP address to a hostname?

1. A
2. PTR
3. CNAME
4. AAAA

Correct Answer: 2. PTR

Explanation :-

A PTR (Pointer) record provides reverse DNS mapping from an IP address to a hostname. For IPv4, reverse DNS records are stored under the in-addr.arpa namespace, while IPv6 uses the ip6.arpa namespace. A records map names to IPv4 addresses, AAAA records map names to IPv6 addresses, and CNAME records provide aliases between DNS names. PTR records are frequently used for troubleshooting, logging, and mail-server verification. Correct reverse DNS configuration can be particularly important for SMTP systems because some receiving servers perform reverse-DNS checks.

Question 85. Which Apache directive determines which file is served automatically when a client requests a directory?

1. DirectoryIndex
2. DirectoryRoot
3. IndexFile
4. DefaultDocument

Correct Answer: 1. DirectoryIndex

Explanation :-

The Apache DirectoryIndex directive specifies the default resource Apache should attempt to serve when a client requests a directory without naming a specific file. A common configuration includes index.html or index.php. Apache checks the configured names according to the directive’s order and serves an available file when appropriate. DocumentRoot determines the filesystem location of website content, but it does not select the default filename. Proper DirectoryIndex configuration is useful for controlling the initial document displayed when users access the root or another directory of a website.

Question 86. Which Apache module provides TLS/SSL support for HTTPS connections?

1. mod_proxy
2. mod_headers
3. mod_rewrite
4. mod_ssl

Correct Answer: 4. mod_ssl

Explanation :-

Apache’s mod_ssl module provides support for SSL/TLS functionality, allowing Apache to serve HTTPS connections. It works with certificates and private keys to establish encrypted sessions between clients and the web server. Administrators commonly configure TLS-related directives inside an HTTPS virtual host. mod_proxy provides proxying capabilities, mod_headers modifies HTTP headers, and mod_rewrite performs URL rewriting. A secure HTTPS deployment also requires appropriate certificate configuration and sensible TLS settings rather than simply loading the module.

Question 87. Which HTTP status code indicates that the server understood the request but refuses to authorize access to the requested resource?

1. 401
2. 302
3. 403
4. 404

Correct Answer: 3. 403

Explanation :-

HTTP status code 403 means that the server understood the request but refuses to fulfill it because access is forbidden. It can occur because of filesystem permissions, Apache authorization rules, access-control directives, or other security policies. Status 401 indicates that authentication is required or has failed, 302 indicates a temporary redirect, and 404 indicates that the requested resource could not be found. When troubleshooting a 403 response, administrators should examine both web-server authorization configuration and underlying filesystem permissions.

Question 88. Which NFS command can display statistics about NFS client and server activity?

1. exportfs
2. showmount
3. nfsstat
4. mount.nfs

Correct Answer: 3. nfsstat

Explanation :-

The nfsstat command displays statistics related to NFS client and server operations. It can provide information useful for diagnosing performance or communication problems, including RPC activity and various NFS operation counts. exportfs manages server exports, showmount can display export information from an NFS server, and mount.nfs is used for mounting NFS filesystems. Monitoring NFS statistics can help administrators identify unusual workloads, failed operations, or potential communication issues between clients and servers.

Question 89. Which NFS export option allows clients to mount an exported filesystem with read-only access?

1. sync
2. no_root_squash
3. no_subtree_check
4. ro

Correct Answer: 4. ro

Explanation :-

The ro NFS export option makes an exported filesystem read-only for clients. Clients can access files but cannot modify the exported data through the NFS mount. This can be useful when distributing software, documentation, or other data that clients should not change. sync controls write synchronization behavior, no_root_squash changes the treatment of remote root privileges, and no_subtree_check affects subtree verification. Read-only exports can reduce the risk of accidental or unauthorized modification of shared data.

Question 90. Which Samba utility can display information about active Samba connections and file locks?

1. smbstatus
2. testparm
3. smbclient
4. netstat-smb

Correct Answer: 1. smbstatus

Explanation :-

smbstatus displays information about current Samba connections, open files, and locks maintained by the Samba server. It is useful when administrators need to determine which clients are connected or which resources are currently being accessed. testparm validates Samba configuration, smbclient provides a command-line client for accessing SMB resources, and netstat-smb is not a standard Samba utility. When investigating file-sharing problems, smbstatus can help identify active sessions and resource contention.

Question 91. Which Samba configuration parameter can restrict access to a share to specified users or groups?

1. valid users
2. guest account
3. workgroup
4. server string

Correct Answer: 1. valid users

Explanation :-

The Samba valid users parameter specifies which users or groups are permitted to access a particular share. It can be used to restrict access even when a user has successfully authenticated to the Samba server. For example, administrators can specify individual usernames or groups using appropriate Samba syntax. guest account defines the local account associated with guest access, workgroup identifies the Windows workgroup or domain context, and server string provides descriptive server information. Share-level authorization should be considered together with underlying Linux filesystem permissions.

Question 92. Which Linux command can display the default gateway currently installed in the routing table?

1. ip link show
2. ip route show default
3. ip addr show default
4. ip gateway list

Correct Answer: 2. ip route show default

Explanation :-

The command ip route show default displays the default route installed in the Linux routing table. A typical result identifies a default gateway and the network interface through which traffic should be sent. The default route is used when no more specific route matches a destination. ip link displays interface information, while ip addr displays addresses assigned to interfaces. There is no standard ip gateway list command. Checking the default route is an important step when diagnosing why a system can communicate locally but cannot reach remote networks.

Question 93. Which DHCP message does a client send when it formally requests the configuration offered by a particular DHCP server?

1. DHCPREQUEST
2. DHCPDISCOVER
3. DHCPACK
4. DHCPOFFER

Correct Answer: 1. DHCPREQUEST

Explanation :-

After receiving one or more DHCPOFFER messages, a DHCP client sends a DHCPREQUEST message to indicate which offered configuration it wants to accept. The selected DHCP server can then respond with DHCPACK to confirm the lease. DHCPDISCOVER begins the discovery process, while DHCPOFFER contains a proposed configuration from a server. DHCPREQUEST can also be used during renewal and other parts of the DHCP state process. Understanding these message types is useful when examining DHCP packet captures or diagnosing address-assignment failures.

Question 94. Which Linux file commonly specifies DNS resolver search domains and nameserver addresses on systems using a traditional resolver configuration?

1. /etc/nsswitch.conf
2. /etc/hosts
3. /etc/resolv.conf
4. /etc/hostname

Correct Answer: 3. /etc/resolv.conf

Explanation :-

The /etc/resolv.conf file traditionally contains resolver configuration such as nameserver entries and search domains. Applications using the system resolver can consult this configuration when performing DNS lookups. /etc/hosts contains static hostname mappings, /etc/hostname generally contains the local system hostname, and /etc/nsswitch.conf determines the order and sources used by various name-service lookups. On systems using NetworkManager, systemd-resolved, or other network-management frameworks, /etc/resolv.conf may be generated or managed automatically rather than edited manually.

Question 95. Which Postfix parameter is used to specify a host through which outbound mail should be relayed?

1. myhostname
2. mydestination
3. relayhost
4. smtpd_banner

Correct Answer: 3. relayhost

Explanation :-

The Postfix relayhost parameter specifies a mail server through which Postfix should relay outbound messages. Organizations may use a relay host when external delivery must pass through a central SMTP gateway, filtering service, or upstream mail provider. myhostname defines the local mail system’s hostname, mydestination identifies destinations for local delivery, and smtpd_banner controls the SMTP service greeting. When configuring a relay host, administrators may also need to configure authentication, TLS, and appropriate relay restrictions to prevent unauthorized use.

Question 96. Which Postfix command can be used to delete messages from the mail queue?

1. postconf
2. postsuper
3. postqueue
4. postalias

Correct Answer: 2. postsuper

Explanation :-

postsuper is a Postfix administrative utility used to perform operations on messages in the mail queue, including deleting queued messages when the appropriate options are supplied. Because queue deletion can permanently remove messages, administrators should use it carefully and verify the message identifiers or scope of the operation before executing destructive commands. postqueue is primarily used to inspect or manage queue submission, postconf manages configuration parameters, and postalias manages alias databases. Queue administration is an important part of diagnosing and maintaining Postfix systems.

Question 97. Which Dovecot protocol is commonly used for retrieving email while maintaining mailbox state on the server?

1. SMTP
2. FTP
3. IMAP
4. LDAP

Correct Answer: 3. IMAP

Explanation :-

Dovecot commonly provides IMAP service for clients that need to access and manage mailboxes while keeping messages and mailbox state on the server. IMAP supports folders, message flags, synchronization, and access from multiple clients. SMTP is used for mail transfer and submission rather than mailbox retrieval, FTP transfers files, and LDAP provides directory services. Dovecot can also provide POP3, which follows a different mailbox-retrieval model. Administrators should select and configure the appropriate protocol based on how users need to access and synchronize their mail.

Question 98. Which SSH configuration file contains system-wide server settings for the OpenSSH daemon?

1. /etc/ssh/ssh_config
2. /etc/ssh/sshd_config
3. ~/.ssh/config
4. ~/.ssh/authorized_keys

Correct Answer: 2. /etc/ssh/sshd_config

Explanation :-

The /etc/ssh/sshd_config file contains system-wide configuration for the OpenSSH server daemon, sshd. It can define settings such as the listening port, authentication methods, permitted users, root-login behavior, and other server policies. /etc/ssh/ssh_config is the system-wide client configuration, while ~/.ssh/config contains per-user client settings. The authorized_keys file contains public keys authorized for a particular user and is not a general server configuration file. Administrators should validate SSH configuration before restarting or reloading the daemon to avoid configuration-related access problems.

Question 99. Which Linux command can display the active nftables ruleset?

1. nft list ruleset
2. nft show firewall
3. nft status rules
4. nft rules active

Correct Answer: 1. nft list ruleset

Explanation :-

The nft list ruleset command displays the currently loaded nftables ruleset. It can show tables, chains, rules, counters, and related firewall configuration. This makes it a fundamental command when auditing or troubleshooting an nftables firewall. The other commands listed are not standard nft syntax for displaying the complete active ruleset. Administrators should distinguish between the rules currently loaded in the kernel and configuration files or scripts that may be used to recreate those rules after a reboot.

Question 100. Which SELinux command changes the security context of a file persistently by updating the file-context configuration?

1. restorecon
2. chcon
3. semanage fcontext
4. setenforce

Correct Answer: 3. semanage fcontext

Explanation :-

semanage fcontext is used to define or modify persistent SELinux file-context mappings. After defining the desired context, restorecon can apply the configured context to the filesystem object. In contrast, chcon changes a file’s context directly but is generally not persistent against relabeling or restoration from policy-defined contexts. setenforce changes the SELinux enforcement mode and does not modify file contexts. Using semanage fcontext together with restorecon is therefore the appropriate approach when a custom file or directory needs a persistent SELinux context.