View Full LPI 202-450  Exam Dumps and Practice Test Dumps

 

Question 141. Which BIND utility sends control commands to a running named server?

1. host
2. named-checkzone
3. rndc
4. dig

Correct Answer: 3. rndc

Explanation :-

The rndc utility is used to send administrative control commands to a running BIND named server. It can be used for operations such as reloading zones, checking server status, flushing caches, and stopping or restarting the server when permitted by the configured control channel. The dig utility is primarily a DNS query tool, while host performs simpler DNS lookups. named-checkzone validates individual zone files rather than controlling a running DNS server. Properly configured rndc access allows administrators to manage BIND without directly restarting the entire service for every DNS configuration change.

Question 142. Which Apache module provides support for SSL/TLS connections such as HTTPS?

1. mod_ssl
2. mod_alias
3. mod_status
4. mod_proxy

Correct Answer: 1. mod_ssl

Explanation :-

Apache’s mod_ssl module provides support for SSL/TLS functionality and is commonly used to configure HTTPS virtual hosts. It allows Apache to establish encrypted connections and use certificates and private keys for server authentication. mod_alias handles URL and filesystem aliases and redirects, mod_status provides server-status information, and mod_proxy supplies proxy functionality. A typical HTTPS configuration also requires a certificate, private key, and a virtual host configured for the appropriate TLS port. Understanding module roles is important when troubleshooting Apache services and determining why HTTPS is or is not available.

Question 143. Which NFS configuration file defines filesystems that a Linux NFS server exports to clients?

1. /etc/nfs.conf
2. /etc/fstab
3. /etc/nfs/exports
4. /etc/exports

Correct Answer: 4. /etc/exports

Explanation :-

The /etc/exports file defines the filesystems and directories that an NFS server makes available to clients, along with export options such as permitted networks, ro, rw, and root_squash. After modifying the file, administrators commonly use exportfs to update the active export table. /etc/fstab describes filesystems that a system mounts, rather than defining server-side NFS exports. /etc/nfs.conf contains broader NFS service configuration. Knowing the distinction between client mount configuration and server export configuration is important when setting up and troubleshooting NFS file sharing.

Question 144. Which Samba parameter controls whether a share is visible when clients browse available SMB shares?

1. writable
2. browseable
3. guest ok
4. valid users

Correct Answer: 2. browseable

Explanation :-

The Samba browseable parameter determines whether a configured share appears in browse lists presented to SMB clients. Setting browseable = yes allows the share to be displayed during normal browsing, while browseable = no can hide the share from such lists without necessarily preventing users who know the share name from accessing it. writable controls whether users can write to the share, guest ok controls guest access, and valid users restricts which users are permitted to connect. These parameters address different aspects of Samba share behavior and access control.

Question 145. Which DNS record type is used to identify authoritative name servers for a DNS zone?

1. MX
2. CNAME
3. NS
4. TXT

Correct Answer: 3. NS

Explanation :-

NS records identify the authoritative name servers for a DNS zone. They are essential for delegation because parent zones use NS records to identify the servers responsible for answering queries for a child zone. MX records identify mail servers, CNAME records create aliases, and TXT records contain arbitrary text data commonly used for verification and email-related policies. A properly delegated DNS zone normally has NS records identifying its authoritative servers. Administrators should also ensure that the corresponding name server addresses and glue records are correctly configured where required.

Question 146. Which DHCP option normally supplies clients with the IPv4 default gateway?

1. Option 3
2. Option 6
3. Option 15
4. Option 51

Correct Answer: 1. Option 3

Explanation :-

DHCP option 3 specifies the default gateway, also called the router option, that a DHCP server provides to clients. This information allows hosts to send traffic destined for networks outside their local subnet to the appropriate router. Option 6 specifies DNS servers, option 15 specifies the DNS domain name, and option 51 specifies the IP address lease time. Correct DHCP configuration therefore requires understanding which option supplies each network parameter. If option 3 is missing or incorrect, clients may successfully obtain an IP address but still be unable to reach remote networks.

Question 147. Which Postfix command displays the current value of a configuration parameter?

1. postqueue
2. postmap
3. postsuper
4. postconf

Correct Answer: 4. postconf

Explanation :-

The postconf utility is used to inspect and modify Postfix configuration parameters. Running postconf parameter_name displays the current value of a specific parameter, while postconf -n commonly displays parameters that differ from Postfix defaults. postqueue manages or inspects the mail queue, postsuper performs administrative operations on queued messages, and postmap creates database files used by lookup tables. Using postconf is a standard way to verify the effective Postfix configuration during administration and troubleshooting, especially after modifying files such as main.cf.

Question 148. Which Dovecot service commonly provides IMAP access to users’ mailboxes?

1. postfix
2. imap-login
3. smtpd
4. dovecot-pipe

Correct Answer: 2. imap-login

Explanation :-

Dovecot uses the imap-login service to handle incoming IMAP login connections and establish authenticated sessions for clients. Dovecot can then provide mailbox access through its IMAP service architecture. Postfix is an MTA responsible for mail transport, while smtpd is associated with SMTP service functionality rather than Dovecot’s IMAP role. Correctly distinguishing mail transport from mailbox access is important in Linux email architecture. When troubleshooting an IMAP client, administrators should consider Dovecot configuration, authentication, TLS settings, network listeners, and mailbox permissions rather than focusing only on the SMTP server.

Question 149. Which SSH command option specifies the private key file to use for public-key authentication?

1. -i
2. -p
3. -L
4. -X

Correct Answer: 1. -i

Explanation :-

The SSH client’s -i option specifies the identity file, normally a private key, that should be used for public-key authentication. For example, ssh -i ~/.ssh/id_ed25519 user@example.com tells the client to use the specified private key. The -p option selects a non-default SSH server port, -L configures local port forwarding, and -X enables X11 forwarding. Correct permissions on private key files are also important because OpenSSH may reject keys that are accessible to other users. Understanding SSH client options is essential for secure remote administration.

Question 150. Which command can be used to display the current SELinux enforcement mode?

1. getsebool
2. semanage
3. sestatus
4. chcon

Correct Answer: 3. sestatus

Explanation :-

The sestatus command displays the current SELinux status, including whether SELinux is enabled and whether the system is operating in enforcing or permissive mode. This makes it useful when troubleshooting access denials that may be caused by SELinux policy. getsebool displays SELinux Boolean settings, semanage manages persistent SELinux configuration components, and chcon changes a file’s SELinux security context. Administrators should distinguish enforcement mode from policy configuration because switching to permissive mode changes how denials are enforced but does not itself modify the underlying security policy.

Question 151. Which BIND directive determines whether a server will answer recursive queries from specified clients?

1. allow-transfer
2. allow-recursion
3. notify-source
4. also-notify

Correct Answer: 4. allow-recursion

Explanation :-

The BIND allow-recursion option specifies which clients are permitted to make recursive DNS queries. Recursive resolution allows a DNS server to obtain answers from other DNS servers when the requested information is not directly authoritative. Restricting recursion is important because unrestricted recursive service can expose resources to unwanted clients and may contribute to DNS abuse. allow-transfer controls which hosts may perform zone transfers, while notify-source and also-notify relate to DNS notification behavior. Administrators should configure recursion carefully according to whether a server is intended to serve internal clients or authoritative public DNS.

Question 152. Which Apache directive can define an alternate hostname that should match an existing virtual host?

1. ServerAlias
2. ServerAdmin
3. ServerRoot
4. ScriptAlias

Correct Answer: 2. ServerAlias

Explanation :-

The Apache ServerAlias directive specifies additional hostnames that should be associated with an existing virtual host. For example, a virtual host may use ServerName www.example.com and ServerAlias example.com so both hostnames select the same configuration. ServerAdmin identifies the administrator’s contact address, ServerRoot defines Apache’s base directory, and ScriptAlias maps URLs to directories containing executable CGI scripts. ServerAlias is particularly useful when a site must respond to multiple domain names without creating separate virtual-host configurations for every hostname.

Question 153. Which NFS command updates the kernel’s active export table after changes are made to /etc/exports?

1. nfsstat -r
2. mount.nfs -r
3. exportfs -r
4. showmount -r

Correct Answer: 1. exportfs -r

Explanation :-

The exportfs -r command re-exports the filesystems listed in /etc/exports, updating the active NFS export table to reflect configuration changes. This is useful after modifying export paths, client restrictions, or export options. showmount is generally used to query exported filesystems, while mount.nfs is used by clients to mount NFS resources. nfsstat provides NFS statistics. Administrators should validate export configuration and understand whether changes require a re-export, service reload, or restart depending on the operating system and NFS implementation.

Question 154. Which DNS command-line utility is especially useful for performing detailed DNS queries and examining response sections?

1. hostname
2. dig
3. ping
4. nslookupd

Correct Answer: 3. dig

Explanation :-

The dig utility is widely used for detailed DNS troubleshooting because it provides extensive information about DNS queries and responses, including answer, authority, and additional sections. Administrators can specify record types, query particular DNS servers, and inspect response flags and TTL values. The hostname command manages or displays the local hostname rather than performing detailed DNS analysis. ping tests network reachability and may perform name resolution but does not provide equivalent DNS diagnostic information. dig is therefore one of the most important command-line tools for investigating BIND and DNS resolution problems.

Question 155. Which Postfix utility is commonly used to inspect messages currently waiting in the mail queue?

1. postmap
2. postconf
3. postqueue
4. postalias

Correct Answer: 2. postqueue

Explanation :-

The postqueue utility is used to manage and inspect the Postfix mail queue. Running postqueue -p displays messages currently queued for delivery, including queue identifiers and recipient information. This is particularly useful when investigating delayed or undelivered mail. postconf displays configuration parameters, postmap creates lookup databases, and postalias manages alias database files. Queue inspection can help administrators determine whether delivery failures are caused by remote server problems, DNS issues, temporary connection failures, or local configuration errors.

Question 156. Which PAM module can enforce limits on resources such as the number of processes or open files available to users?

1. pam_shells
2. pam_securetty
3. pam_access
4. pam_limits

Correct Answer: 4. pam_limits

Explanation :-

The pam_limits module applies resource limits to user sessions, including limits such as maximum processes, open files, CPU time, or other configurable resources. These limits are commonly defined in /etc/security/limits.conf or related configuration files. pam_shells checks whether a user’s shell is listed as an allowed shell, pam_securetty can restrict root logins to secure terminals, and pam_access can apply login access rules. PAM resource controls are useful for preventing individual users or services from consuming excessive system resources.

Question 157. Which nftables object contains rules that are associated with packet-processing hooks?

1. Chain
2. Set
3. Counter
4. Map

Correct Answer: 1. Chain

Explanation :-

In nftables, a chain contains rules that are evaluated for packets. Base chains can be attached to packet-processing hooks such as input, output, and forward, allowing rules to process traffic at appropriate points in the networking stack. Sets and maps provide structures for organizing values used by rules, while counters track packet and byte statistics. Understanding nftables’ table, chain, rule, set, and hook concepts is important for constructing and troubleshooting firewall configurations. A properly configured base chain determines where a collection of filtering or other packet-processing rules operates.

Question 158. Which DNS record is used for reverse mapping from an IP address to a hostname?

1. A
2. PTR
3. MX
4. SRV

Correct Answer: 3. PTR

Explanation :-

A PTR record provides reverse DNS mapping from an IP address to a hostname. IPv4 reverse DNS records are normally stored under the in-addr.arpa namespace, while IPv6 reverse DNS uses ip6.arpa. A records map hostnames to IPv4 addresses, MX records identify mail servers, and SRV records identify services and their associated targets and ports. Reverse DNS is frequently used by mail systems, logging tools, and network troubleshooting utilities. Incorrect or missing PTR records can therefore contribute to unexpected behavior in services that perform reverse DNS lookups.

Question 159. Which command can test whether a TCP port is reachable on a remote host without requiring a full application protocol exchange?

1. dig
2. host
3. nc
4. route

Correct Answer: 4. nc

Explanation :-

The nc, or netcat, utility can establish TCP or UDP connections and is frequently used to test whether a specific port is reachable. For example, nc -vz server.example.com 443 can provide a quick connectivity test for TCP port 443. dig and host perform DNS-related queries, while route displays or manages routing information. Netcat is particularly useful when diagnosing firewall rules, service listeners, and network paths because it can test connectivity independently of the higher-level application protocol normally associated with a port.

Question 160. Which Apache directive defines the file served by default when a client requests a directory?

1. DirectoryIndex
2. DirectoryRoot
3. IndexFile
4. DefaultDocument

Correct Answer: 1. DirectoryIndex

Explanation :-

The Apache DirectoryIndex directive specifies the default resource Apache should look for when a client requests a directory without naming a specific file. A common configuration is DirectoryIndex index.html index.php, causing Apache to try those files in the configured order. If none is available, the server may return a directory listing if indexing is enabled or return an error depending on the configuration. DocumentRoot determines where web content is stored, but DirectoryIndex specifically controls which file is selected as the default directory resource.