View Full LPI 202-450  Exam Dumps and Practice Test Dumps

 

Question 181. Which BIND directive specifies the clients that are permitted to make DNS queries to a server?

1. allow-transfer
2. allow-query
3. allow-recursion
4. notify

Correct Answer: 2. allow-query

Explanation :-

The BIND allow-query directive controls which clients are permitted to send DNS queries to a server. It can be configured using IP addresses, networks, ACLs, or other supported match criteria. This setting is distinct from allow-recursion, which controls clients permitted to perform recursive resolution, and allow-transfer, which controls access to zone transfers. The notify setting controls DNS NOTIFY behavior rather than query authorization. Properly restricting query access is useful when a DNS server is intended to serve only specific internal networks or when administrators need to limit exposure of authoritative or recursive DNS services.

Question 182. Which Apache directive specifies the administrator’s email address that may be displayed in server-generated error documents?

1. ServerName
2. ServerAlias
3. ServerRoot
4. ServerAdmin

Correct Answer: 4. ServerAdmin

Explanation :-

The Apache ServerAdmin directive specifies the email address of the server administrator. Apache can use this information in certain server-generated error pages or related administrative messages. ServerName identifies the hostname used by the server, ServerAlias defines additional hostnames for a virtual host, and ServerRoot specifies the base directory containing Apache configuration and related files. Correctly setting ServerAdmin helps users and administrators identify an appropriate contact when server-generated errors occur. It does not control authentication, authorization, or the actual web content served by Apache.

Question 183. Which NFS version uses a single well-known TCP port for its primary protocol rather than dynamically negotiated ports for the main NFS service?

1. NFSv4
2. NFSv2
3. NFSv3
4. NFS over UDP

Correct Answer: 1. NFSv4

Explanation :-

NFSv4 uses TCP port 2049 as its well-known primary port for NFS communication. Earlier NFS versions commonly relied on additional RPC services and dynamically assigned ports, which could complicate firewall configuration. NFSv4 also introduced improvements such as integrated locking and a more unified protocol architecture. Although supporting services can still be relevant depending on the environment, the primary NFSv4 protocol uses port 2049. Understanding the networking differences between NFS versions is important when configuring firewalls and troubleshooting connectivity between NFS clients and servers.

Question 184. Which DNS record identifies the primary authoritative name server and contains the zone’s serial number?

1. NS
2. MX
3. SOA
4. TXT

Correct Answer: 3. SOA

Explanation :-

The SOA, or Start of Authority, record contains administrative information for a DNS zone. It identifies the primary authoritative name server and includes fields such as the responsible party, serial number, refresh interval, retry interval, expire interval, and negative caching TTL. The serial number is especially important for zone transfers because secondary servers use it to determine whether their copy of the zone is older than the primary’s version. NS records identify authoritative name servers, MX records identify mail servers, and TXT records contain textual information.

Question 185. Which Samba command-line client can connect interactively to an SMB/CIFS share?

1. smbstatus
2. testparm
3. smbpasswd
4. smbclient

Correct Answer: 4. smbclient

Explanation :-

The smbclient utility provides a command-line interface for accessing SMB/CIFS resources. It can connect to shares, list directories, transfer files, and perform other client-side operations. This makes it useful for testing Samba authentication and share accessibility without relying on a graphical file manager. testparm validates Samba configuration, smbstatus displays active Samba sessions and locks, and smbpasswd manages Samba password information. Administrators can use smbclient to determine whether a problem exists with the Samba server, authentication, permissions, or the client environment.

Question 186. Which DHCP message does a client send to formally request one of the addresses offered by DHCP servers?

1. DHCPACK
2. DHCPREQUEST
3. DHCPDISCOVER
4. DHCPOFFER

Correct Answer: 2. DHCPREQUEST

Explanation :-

A DHCP client normally sends DHCPREQUEST after receiving one or more DHCPOFFER messages. The request identifies the configuration offer the client intends to accept. The selected DHCP server then normally responds with DHCPACK to confirm the lease. DHCPDISCOVER begins the address discovery process, while DHCPOFFER represents a server’s proposed configuration. DHCPREQUEST is also used in other DHCP situations, such as renewing an existing lease. Understanding the DHCP message sequence is important when troubleshooting address allocation, lease renewal, and client configuration problems.

Question 187. Which Postfix parameter specifies the networks that are trusted to relay mail through the server?

1. mynetworks
2. mydestination
3. relayhost
4. myhostname

Correct Answer: 3. mynetworks

Explanation :-

The Postfix mynetworks parameter defines the IP addresses and networks that are considered trusted by the mail server. These trusted clients may be permitted to relay mail depending on the server’s other restrictions. mydestination defines domains for which the server is the final destination, while relayhost specifies an upstream server through which outgoing mail can be sent. myhostname identifies the Postfix system’s hostname. Correctly configuring mynetworks is important because an overly broad trusted network can unintentionally allow unauthorized mail relaying.

Question 188. Which command can display the effective Dovecot configuration after configuration files and included settings have been processed?

1. doveadm status
2. dovecot -t
3. doveconf
4. imapconf

Correct Answer: 1. doveconf

Explanation :-

The doveconf utility is used to inspect Dovecot’s effective configuration. It can display settings after included configuration files and defaults have been processed, making it valuable when troubleshooting unexpected behavior. Dovecot configurations may be distributed across multiple files, so examining only one configuration file may not reveal the final effective value of a setting. doveadm is primarily an administration tool for mailbox and related operations. Understanding how to inspect the effective configuration helps administrators verify protocols, authentication, mailbox locations, TLS settings, and service configuration.

Question 189. Which SSH client option enables local port forwarding?

1. -R
2. -L
3. -D
4. -A

Correct Answer: 2. -L

Explanation :-

The SSH -L option establishes local port forwarding. It causes connections made to a specified local port to be forwarded through the SSH connection to a destination reachable from the remote SSH server. This can be useful for securely accessing services that are not directly exposed to the client. The -R option provides remote port forwarding, -D creates a dynamic SOCKS proxy, and -A enables authentication-agent forwarding. SSH forwarding should be configured carefully because it can provide network access through hosts that may otherwise be unreachable.

Question 190. Which SELinux utility restores the default security context of a file or directory according to the configured policy?

1. semanage
2. getenforce
3. restorecon
4. ausearch

Correct Answer: 4. restorecon

Explanation :-

The restorecon utility restores SELinux security contexts based on the file-context rules defined by the active SELinux policy. It is commonly used after files are copied, moved, or created in locations where their contexts are incorrect. semanage can be used to manage persistent file-context rules, while getenforce reports the current enforcement mode. ausearch searches audit logs for relevant events. Correct SELinux contexts are essential because access can be denied even when traditional Unix ownership and permission bits appear correct.

Question 191. Which nftables family supports both IPv4 and IPv6 traffic in the same table?

1. inet
2. ip
3. ip6
4. arp

Correct Answer: 1. inet

Explanation :-

The nftables inet address family allows a table to contain rules that can process both IPv4 and IPv6 traffic. This can simplify firewall configurations by allowing administrators to maintain related IPv4 and IPv6 filtering rules within a single table and chain structure. The ip family is specific to IPv4, while ip6 is specific to IPv6. The arp family is used for ARP-related packet processing. Using the inet family can reduce duplication when a firewall policy needs to apply similar rules to both IP versions.

Question 192. Which DNS utility performs a simple lookup of a hostname or IP address without the extensive output normally produced by dig?

1. rndc
2. named-checkconf
3. host
4. exportfs

Correct Answer: 3. host

Explanation :-

The host command performs straightforward DNS lookups and can resolve hostnames to addresses or perform reverse lookups. Its output is generally simpler than the detailed diagnostic information provided by dig, making it convenient for quick checks. rndc communicates with a running BIND server for administrative control, named-checkconf validates BIND configuration syntax, and exportfs manages NFS exports. Administrators can use host for a quick name-resolution test and dig when they need detailed response sections, flags, TTLs, or specific DNS query behavior.

Question 193. Which Apache directive can be used to specify a custom response document for a particular HTTP error status?

1. ErrorLog
2. ErrorDocument
3. LogFormat
4. CustomLog

Correct Answer: 4. ErrorDocument

Explanation :-

The Apache ErrorDocument directive specifies what Apache should return when a particular HTTP error occurs. For example, ErrorDocument 404 /404.html can cause Apache to serve a custom page when a requested resource is not found. ErrorLog defines where Apache records error messages, while CustomLog configures access logging and LogFormat controls the format of logged entries. Custom error documents can improve usability and provide consistent branding while still returning the appropriate HTTP status code.

Question 194. Which NFS server command removes an exported filesystem from the active export table?

1. exportfs -u
2. exportfs -r
3. showmount -e
4. mount.nfs -u

Correct Answer: 2. exportfs -u

Explanation :-

The exportfs -u command unexports a filesystem, removing it from the active NFS export table. Administrators can specify the filesystem or export definition to remove. exportfs -r re-reads the export configuration and refreshes the active export table, while showmount -e displays exports rather than modifying them. mount.nfs is a client-side utility for mounting NFS filesystems. Understanding export management commands is important when changing NFS access or removing a filesystem from network availability.

Question 195. Which DNS mechanism allows a secondary authoritative server to obtain updated zone data from a primary server?

1. Zone transfer
2. Recursive forwarding
3. DNS caching
4. Reverse lookup

Correct Answer: 1. Zone transfer

Explanation :-

DNS zone transfers allow secondary authoritative servers to obtain zone data from a primary server. Common transfer mechanisms include AXFR for full zone transfers and IXFR for incremental zone transfers. The SOA serial number helps secondary servers determine whether the zone has changed. Zone transfers should normally be restricted to authorized secondary servers using configuration such as BIND’s allow-transfer. Recursive forwarding and caching serve different purposes and do not provide the mechanism by which authoritative secondary servers synchronize their copies of a zone.

Question 196. Which Postfix utility is commonly used to create database files from lookup tables such as aliases or access maps?

1. postqueue
2. postsuper
3. postmap
4. postconf

Correct Answer: 3. postmap

Explanation :-

The postmap utility creates or updates indexed database files from Postfix lookup tables. These databases can be used for purposes such as aliases, access restrictions, virtual mappings, and other configuration lookups depending on the selected map type. postqueue is used for mail-queue operations, postsuper performs administrative operations on queued messages, and postconf manages or displays configuration parameters. When a lookup-table source file is changed, administrators commonly regenerate its database with postmap before expecting Postfix to use the updated information.

Question 197. Which Dovecot configuration setting determines where users’ mailboxes are stored?

1. mail_location
2. passdb
3. protocols
4. auth_mechanisms

Correct Answer: 2. mail_location

Explanation :-

The Dovecot mail_location setting specifies the location and format used for users’ mailboxes. It can define storage formats such as Maildir or mbox and the path where mailbox data is located. passdb defines authentication information, protocols controls enabled mail protocols such as IMAP and POP3, and auth_mechanisms specifies supported authentication mechanisms. Correct mailbox-location configuration is essential because users may authenticate successfully but still be unable to access mail if Dovecot cannot locate or access their mailbox storage.

Question 198. Which Linux file is commonly used by the Name Service Switch mechanism to determine the order of sources used for hostname resolution?

1. /etc/resolv.conf
2. /etc/nsswitch.conf
3. /etc/hostname
4. /etc/services

Correct Answer: 4. /etc/nsswitch.conf

Explanation :-

The /etc/nsswitch.conf file controls how various name-service databases are resolved and specifies the order of sources used for operations such as hostname lookups. For example, the hosts entry may specify files and DNS as lookup sources. /etc/resolv.conf primarily provides resolver configuration such as DNS servers and search domains, while /etc/hostname identifies the local hostname and /etc/services maps service names to port numbers. Understanding NSS is important because hostname resolution can depend on both NSS source ordering and DNS resolver configuration.

Question 199. Which command can display listening TCP and UDP sockets on a Linux system?

1. ip addr
2. ss
3. dig
4. route

Correct Answer: 3. ss

Explanation :-

The ss utility displays socket information and can be used to identify listening TCP and UDP services. Options such as ss -lnt can show listening TCP sockets with numeric addresses and ports, while other options can display UDP sockets or established connections. ip addr displays interface and address information, dig performs DNS queries, and route displays routing information. Checking listening sockets is useful when troubleshooting service availability because it confirms whether an application is actually bound to the expected local port.

Question 200. Which command can query a specific DNS server directly instead of relying on the system’s default resolver configuration?

1. dig @server.example.com example.com
2. host –server-config example.com
3. named-checkzone @server.example.com example.com
4. rndc query server.example.com

Correct Answer: 1. dig @server.example.com example.com

Explanation :-

The dig utility can query a specific DNS server by placing the server address after the @ symbol. For example, dig @server.example.com example.com directs the query to that DNS server instead of simply using the system’s configured resolver. This is particularly useful for comparing responses from different DNS servers or testing an authoritative server directly. named-checkzone validates zone files and rndc provides administrative control over BIND. Direct DNS queries are valuable when distinguishing local resolver problems from authoritative DNS configuration issues.