View Full LPI 202-450  Exam Dumps and Practice Test Dumps

 

Question 121. Which BIND configuration statement specifies the default time-to-live for negative DNS responses in a zone’s SOA record?

1. refresh
2. minimum
3. retry
4. expire

Correct Answer: 2. minimum

Explanation :-

In a DNS SOA record, the minimum field traditionally specifies the negative caching TTL, which determines how long resolvers may cache certain negative responses such as NXDOMAIN. In modern DNS terminology, this field is commonly described as the negative caching TTL rather than simply the default TTL for all records. The refresh, retry, and expire fields have different purposes for secondary servers: refresh controls when a secondary checks the primary, retry controls how soon it retries a failed refresh, and expire determines when the secondary stops serving the zone after prolonged inability to contact the primary. Understanding these SOA fields is important when troubleshooting DNS propagation and caching behavior.

Question 122. Which Apache directive is used to define the hostname and port combination for which a virtual host responds?

1. DocumentRoot
2. ServerName
3. DirectoryIndex
4. Listen

Correct Answer: 4. Listen

Explanation :-

The Listen directive tells Apache which IP addresses and ports it should listen on for incoming connections. For example, Listen 80 makes Apache accept HTTP connections on TCP port 80. In a virtual-host configuration, ServerName identifies the hostname associated with a particular virtual host, while DocumentRoot specifies the directory containing its web content. DirectoryIndex controls which file Apache serves when a directory is requested. Although Listen can influence which virtual hosts are reachable, it does not itself define the hostname associated with a virtual host. Understanding the distinction between global listening configuration and virtual-host matching is essential for Apache administration.

Question 123. Which command displays the NFS exports that a specified server makes available to clients?

1. showmount -e
2. nfsstat -m
3. exportfs -u
4. rpcinfo -p

Correct Answer: 1. showmount -e

Explanation :-

The showmount -e command queries an NFS server and displays the filesystems that the server is exporting. It is particularly useful when troubleshooting whether an NFS export is actually being advertised to clients. The nfsstat command provides statistics about NFS activity, while exportfs manages the server’s export table. rpcinfo -p lists registered RPC services and their ports but does not specifically display the exported filesystems. Administrators commonly use showmount -e server.example.com before attempting to mount a remote NFS filesystem to verify that the expected export is available.

Question 124. Which Apache directive specifies the directory containing the web documents for a virtual host?

1. ServerAlias
2. DirectoryIndex
3. DocumentRoot
4. ErrorLog

Correct Answer: 3. DocumentRoot

Explanation :-

The Apache DocumentRoot directive specifies the filesystem directory from which Apache serves files for a website or virtual host. For example, DocumentRoot /var/www/example tells Apache to serve content from that directory. ServerAlias defines additional hostnames that can match a virtual host, while DirectoryIndex specifies default files such as index.html when a directory is requested. ErrorLog identifies the log file used for error messages. Correctly configuring DocumentRoot is fundamental when creating multiple virtual hosts because each site can point to a separate content directory while sharing the same Apache installation.

Question 125. Which Samba utility checks the syntax and validity of the smb.conf configuration file without starting the Samba services?

1. smbpasswd
2. smbclient
3. smbstatus
4. testparm

Correct Answer: 4. testparm

Explanation :-

The testparm utility validates and reports the effective Samba configuration contained in smb.conf. It is commonly run after editing Samba configuration files to detect syntax errors or unexpected settings before restarting the Samba services. smbpasswd manages Samba passwords, smbclient provides a command-line client for accessing SMB/CIFS resources, and smbstatus displays information about current Samba connections and locks. Running testparm is therefore an important administrative and troubleshooting step whenever shares, authentication settings, access controls, or other Samba parameters have been modified.

Question 126. Which DHCP message does a DHCP server normally send in response to a client’s DHCPDISCOVER message?

1. DHCPOFFER
2. DHCPDECLINE
3. DHCPRELEASE
4. DHCPNAK

Correct Answer: 1. DHCPOFFER

Explanation :-

A DHCP client normally begins the address allocation process by broadcasting a DHCPDISCOVER message. A DHCP server responds with a DHCPOFFER containing a proposed IP address and associated configuration parameters such as the subnet mask, default gateway, and lease duration. The client then typically responds with DHCPREQUEST to indicate which offer it accepts. DHCPACK confirms the requested lease, while DHCPNAK indicates that the requested configuration is not acceptable. DHCPDECLINE is used by a client when it detects that an offered address is already in use, and DHCPRELEASE is used to relinquish an existing lease.

Question 127. Which Postfix parameter specifies the destinations for which the local machine should accept mail as the final destination?

1. relayhost
2. myorigin
3. mydestination
4. inet_interfaces

Correct Answer: 3. mydestination

Explanation :-

The Postfix mydestination parameter defines the domains and hostnames for which the server considers itself the final destination. Mail addressed to those destinations is delivered locally rather than relayed elsewhere. The relayhost parameter identifies a system through which outgoing mail should be relayed. myorigin determines the domain that appears in locally generated mail, while inet_interfaces controls the network interfaces on which Postfix accepts connections. Correctly configuring mydestination is important for preventing mail delivery problems and ensuring that the server recognizes the domains it is responsible for.

Question 128. Which command can be used to display the current DNS resolver configuration managed by systemd-resolved?

1. dig status
2. resolvectl status
3. dnsctl show
4. systemctl dns

Correct Answer: 2. resolvectl status

Explanation :-

The resolvectl status command displays detailed information about the DNS configuration managed by systemd-resolved. It can show DNS servers, DNS domains, link-specific settings, and resolver status for network interfaces. This makes it useful when diagnosing situations where a system has network connectivity but cannot resolve hostnames correctly. The dig utility is primarily used to query DNS servers and inspect DNS responses rather than display the local resolver configuration. The other commands are not standard utilities for displaying systemd-resolved DNS status. Administrators can use resolvectl information together with tools such as dig to distinguish local resolver configuration issues from authoritative DNS problems.

Question 129. Which OpenSSH configuration option controls whether password authentication is permitted for SSH users?

1. PasswordAuthentication
2. PubkeyAuthentication
3. PermitUserEnvironment
4. UseDNS

Correct Answer: 1. PasswordAuthentication

Explanation :-

The PasswordAuthentication option in OpenSSH controls whether users may authenticate using passwords. Setting PasswordAuthentication no disables password-based authentication, commonly when an administrator wants to require public-key authentication. PubkeyAuthentication controls public-key authentication, while PermitUserEnvironment determines whether user-specific environment settings may be accepted. UseDNS concerns DNS lookups associated with incoming SSH connections and does not control authentication methods. After modifying sshd_config, administrators should validate the configuration and reload or restart the SSH service carefully, especially on remote systems, to avoid accidentally locking themselves out.

Question 130. Which DNS record type identifies the mail server responsible for receiving email for a domain?

1. TXT
2. CNAME
3. NS
4. MX

Correct Answer: 4. MX

Explanation :-

An MX, or Mail Exchange, record identifies the mail servers responsible for accepting email for a DNS domain. MX records contain a priority value, allowing multiple mail servers to be listed with different preferences. Sending mail systems query the recipient domain’s MX records to determine where messages should be delivered. An NS record identifies authoritative name servers, a CNAME creates an alias for another DNS name, and a TXT record stores arbitrary text information such as SPF-related data. Correct MX configuration is therefore essential for reliable inbound email delivery and is a fundamental part of DNS administration.

Question 131. Which NFS export option prevents the root user on an NFS client from being treated as root on the exported filesystem?

1. noexec
2. root_squash
3. sync
4. subtree_check

Correct Answer: 2. root_squash

Explanation :-

The NFS root_squash option maps requests from the root user on an NFS client to an unprivileged identity on the server. This prevents a remote client administrator from automatically receiving root-level access to files in an exported filesystem. It is an important security measure for NFS exports. The noexec option prevents execution of binaries from a mounted filesystem, sync controls how export operations are committed, and subtree_check relates to checking paths within exported directory trees. Administrators should carefully consider export permissions because NFS access controls operate across the network and can expose sensitive files if configured incorrectly.

Question 132. Which SMTP response code indicates that a requested mail action was successfully completed?

1. 220
2. 354
3. 250
4. 550

Correct Answer: 3. 250

Explanation :-

SMTP response code 250 indicates that a requested mail action has been successfully completed. It is commonly returned after commands such as MAIL FROM, RCPT TO, or DATA have been successfully processed, depending on the stage of the SMTP conversation. Code 220 generally indicates that a service is ready, while 354 indicates that the server is ready to receive the message body after the DATA command. Code 550 commonly indicates a permanent failure such as a rejected mailbox or unavailable recipient. Understanding SMTP response codes is useful when diagnosing mail delivery and Postfix-related problems.

Question 133. Which command creates a symbolic link from one pathname to another?

1. ln -h
2. link -s
3. cp -l
4. ln -s

Correct Answer: 4. ln -s

Explanation :-

The ln -s command creates a symbolic link. A symbolic link contains a reference to another pathname rather than representing a second directory entry for the same inode. For example, ln -s /var/www/html /srv/www creates a symbolic link named /srv/www pointing to /var/www/html. The command is useful for maintaining flexible directory structures and redirecting applications to alternate locations. A hard link is created with ln without the -s option. Understanding the distinction between symbolic and hard links is important when configuring web content, application directories, and system administration tasks.

Question 134. Which Apache directive can restrict access to a directory by requiring authenticated users to belong to a specified authorization group?

1. Require
2. Listen
3. ServerTokens
4. LogLevel

Correct Answer: 1. Require

Explanation :-

In Apache 2.4, the Require directive controls authorization and can be used to restrict access based on authenticated users, groups, IP addresses, or other authorization providers. For example, Require group admins can restrict access to members of a configured authentication group. Authentication establishes who the user is, while authorization determines whether that authenticated user is allowed to access a resource. Directives such as Listen and LogLevel serve different purposes, controlling network sockets and logging verbosity respectively. Proper use of Require is therefore central to configuring protected directories and administrative areas in Apache.

Question 135. Which command displays the routing table using the modern iproute2 utilities?

1. route -show
2. ip route
3. ip table
4. netstat -dns

Correct Answer: 2. ip route

Explanation :-

The ip route command displays the kernel’s current routing table using the modern iproute2 networking tools. It can also be used to add, modify, and delete routes. For example, ip route may show a default route through a gateway as well as routes for directly connected networks. The older route utility can also display routing information on many systems, but ip route is the standard modern approach. Exam questions commonly distinguish routing information from DNS configuration and interface information, so administrators should understand how ip route, ip addr, and resolver tools serve different purposes.

Question 136. Which Dovecot command-line utility is primarily used for mailbox administration and maintenance?

1. doveconf
2. dovecotctl
3. doveadm
4. imapctl

Correct Answer: 3. doveadm

Explanation :-

The doveadm utility provides administrative commands for managing Dovecot mailboxes and related data. Administrators can use it for tasks such as searching mailboxes, moving messages, managing indexes, and performing other mailbox maintenance operations. doveconf is primarily used to query and inspect Dovecot configuration. Dovecot itself provides the IMAP and POP3 services, while doveadm serves as an administration interface. Understanding these tools is important for LPIC-2 because Dovecot configuration and mailbox management are part of the E-Mail Services objectives.

Question 137. Which PAM configuration module is commonly used to enforce password complexity and quality requirements on Linux systems?

1. pam_pwquality
2. pam_nologin
3. pam_limits
4. pam_motd

Correct Answer: 1. pam_pwquality

Explanation :-

The pam_pwquality module is commonly used to enforce password quality requirements through PAM. It can apply rules involving password length, character classes, and other password-strength requirements, depending on the system configuration. pam_nologin can prevent non-root users from logging in when a designated nologin condition exists, while pam_limits applies resource limits and pam_motd is associated with displaying login messages. PAM modules are chained through configuration files, allowing administrators to build authentication and account policies from multiple components.

Question 138. Which nftables command displays the currently loaded ruleset?

1. nft show all
2. nft ruleset list
3. nft -L
4. nft list ruleset

Correct Answer: 4. nft list ruleset

Explanation :-

The command nft list ruleset displays the currently loaded nftables ruleset, including tables, chains, and rules. It is a fundamental troubleshooting command because it allows an administrator to inspect the active firewall configuration rather than relying solely on configuration files. nftables organizes filtering rules into tables and chains, with rules evaluated according to the configured hooks and priorities. The command can be run to verify whether expected filtering, NAT, or forwarding rules are actually loaded. This is especially useful after firewall changes or during troubleshooting of unexpected network connectivity.

Question 139. Which DNS record type is specifically used to map a hostname to an IPv6 address?

1. A
2. PTR
3. AAAA
4. SRV

Correct Answer: 3. AAAA

Explanation :-

An AAAA record maps a hostname to an IPv6 address. It is the IPv6 counterpart of the A record, which maps a hostname to an IPv4 address. PTR records are used for reverse DNS lookups, while SRV records identify services and their associated hosts and ports. For example, a DNS zone may contain an AAAA record mapping server.example.com to an IPv6 address. Understanding the differences among common DNS record types is essential when configuring forward and reverse zones and troubleshooting name resolution in dual-stack IPv4 and IPv6 environments.

Question 140. Which command can be used to verify the syntax of a BIND zone file before reloading the DNS server?

1. named-checkconf
2. rndc reload
3. dig zonecheck
4. named-checkzone

Correct Answer: 2. named-checkconf

Explanation :-

The named-checkconf utility checks the syntax of the main BIND configuration, such as /etc/named.conf, rather than validating the contents of an individual zone file. For an actual zone file, named-checkzone is the more specific validation utility. The distinction is important when troubleshooting BIND configuration. An administrator can use named-checkconf to detect configuration syntax errors and named-checkzone to validate resource records and zone-file structure. After successful validation, rndc reload can be used to instruct a running BIND server to reload its configuration and zones.