View Full LPI 202-450  Exam Dumps and Practice Test Dumps

 

Question 201. Which BIND record controls the authoritative information and timing parameters for a DNS zone?

1. NS
2. MX
3. SOA
4. CNAME

Correct Answer: 3. SOA

Explanation :-

The SOA, or Start of Authority, record contains administrative information for a DNS zone. It identifies the primary authoritative name server and includes the responsible party, serial number, refresh interval, retry interval, expire interval, and negative caching TTL. Secondary servers use the serial number to determine whether their copy of the zone needs to be updated. NS records identify authoritative name servers, MX records identify mail servers, and CNAME records provide aliases. A correctly maintained SOA record is therefore fundamental to zone management, secondary synchronization, and DNS administration.

Question 202. Which Apache directive can define additional hostnames that should be handled by the same virtual host?

1. ServerAlias
2. DocumentRoot
3. ErrorDocument
4. DirectoryIndex

Correct Answer: 1. ServerAlias

Explanation :-

The Apache ServerAlias directive specifies additional hostnames that should match an existing virtual host. For example, a virtual host with ServerName www.example.com can use ServerAlias example.com so requests for both names are handled by the same configuration. DocumentRoot specifies the directory containing web content, DirectoryIndex identifies default files for directory requests, and ErrorDocument controls custom responses for HTTP errors. ServerAlias is particularly useful when a website must respond to several related domain names without maintaining separate virtual-host configurations.

Question 203. Which NFS mount option makes a client mount a filesystem as read-only?

1. sync
2. hard
3. noexec
4. ro

Correct Answer: 4. ro

Explanation :-

The NFS ro mount option mounts the exported filesystem as read-only from the client perspective. This prevents normal write operations through that mount and can be useful when clients only need to consume shared data. The hard option controls retry behavior when the NFS server becomes unavailable, noexec prevents execution of binaries from the mounted filesystem, and sync concerns synchronization behavior. Read-only access should also be considered alongside server-side export permissions because both client and server configuration can influence the effective access available to users.

Question 204. Which Samba configuration parameter specifies the filesystem directory associated with a share?

1. path
2. valid users
3. browseable
4. guest ok

Correct Answer: 2. path

Explanation :-

The Samba path parameter specifies the local filesystem directory that is exported through an SMB share. For example, path = /srv/shared associates the Samba share with that directory. valid users controls which users may access the share, browseable determines whether it appears in browse lists, and guest ok controls whether guest access is permitted. Samba access therefore involves both the share configuration and underlying Linux filesystem permissions. A correctly configured path is essential because Samba must be able to access the directory and its contents using the permissions of the relevant service or user context.

Question 205. Which DNS record type creates an alias that points one DNS name to another canonical name?

1. PTR
2. MX
3. TXT
4. CNAME

Correct Answer: 4. CNAME

Explanation :-

A CNAME record creates an alias from one DNS name to another canonical name. For example, www.example.com can be configured as a CNAME pointing to web01.example.com. When resolving the alias, the DNS client can then continue resolving the canonical target. PTR records are used for reverse DNS, MX records identify mail servers, and TXT records contain textual information. CNAME records are useful for service aliases and hostname abstraction, although they have specific DNS restrictions and generally should not be used at the zone apex where other required records coexist.

Question 206. Which DHCP message confirms that a server has accepted a client’s requested lease?

1. DHCPDISCOVER
2. DHCPREQUEST
3. DHCPACK
4. DHCPOFFER

Correct Answer: 3. DHCPACK

Explanation :-

DHCPACK is the message a DHCP server normally sends to confirm that a client’s requested configuration and lease have been accepted. The typical allocation sequence begins with DHCPDISCOVER, followed by DHCPOFFER, DHCPREQUEST, and DHCPACK. DHCPNAK can be sent when the requested configuration is invalid or cannot be provided. Understanding these messages helps administrators diagnose DHCP failures. If a client receives an offer but does not receive an appropriate acknowledgment, troubleshooting should include DHCP server configuration, network connectivity, relay behavior, firewall rules, and address-pool availability.

Question 207. Which Postfix parameter identifies the domains for which the server is an authorized final destination?

1. mydestination
2. relayhost
3. mynetworks
4. myorigin

Correct Answer: 1. mydestination

Explanation :-

The Postfix mydestination parameter identifies domains and hostnames for which the mail server considers itself the final destination. Messages addressed to these destinations can be delivered locally rather than relayed to another server. relayhost specifies an upstream relay, mynetworks identifies trusted networks, and myorigin determines the domain used for locally generated mail. Incorrect mydestination settings can cause local mail to be rejected, routed incorrectly, or treated as mail requiring relay. Administrators should therefore configure it consistently with the system hostname and domains hosted by the server.

Question 208. Which Dovecot setting controls which mail protocols are enabled, such as IMAP and POP3?

1. mail_location
2. protocols
3. passdb
4. userdb

Correct Answer: 2. protocols

Explanation :-

The Dovecot protocols setting determines which supported mail protocols are enabled, such as IMAP and POP3. For example, a configuration can enable IMAP while disabling POP3 when only IMAP access is required. mail_location specifies mailbox storage, passdb provides authentication information, and userdb supplies user-related mailbox information. Protocol configuration should also be considered together with listener and TLS settings because enabling a protocol does not by itself guarantee that clients can connect successfully. Proper protocol selection reduces unnecessary service exposure.

Question 209. Which SSH command generates a new public/private key pair?

1. ssh-add
2. ssh-agent
3. ssh-keygen
4. ssh-copy-id

Correct Answer: 3. ssh-keygen

Explanation :-

The ssh-keygen utility generates and manages SSH public/private key pairs. It can create keys using algorithms such as Ed25519 or RSA, depending on the OpenSSH version and selected options. ssh-agent manages private keys in an authentication agent, ssh-add loads a private key into that agent, and ssh-copy-id installs a public key into a remote user’s authorized keys file. Public-key authentication is commonly preferred for secure administrative access because it avoids transmitting passwords during authentication and can support strong, manageable credentials.

Question 210. Which SELinux command reports whether the system is currently enforcing or permissive?

1. restorecon
2. semanage
3. audit2allow
4. getenforce

Correct Answer: 4. getenforce

Explanation :-

The getenforce command reports the current SELinux enforcement mode, normally returning Enforcing, Permissive, or Disabled depending on the system state. restorecon restores SELinux file contexts, semanage manages persistent policy-related settings, and audit2allow can generate policy rules from audit information. Checking the enforcement mode is often an early troubleshooting step when an application unexpectedly receives access denials. However, the mode alone does not explain why access is denied; administrators should also examine SELinux contexts, policy rules, and audit logs.

Question 211. Which nftables command adds a rule to accept TCP traffic destined for port 443 in an existing input chain?

1. nft allow tcp 443
2. nft add rule inet filter input tcp dport 443 accept
3. nft insert tcp 443 input
4. nft permit inet 443

Correct Answer: 2. nft add rule inet filter input tcp dport 443 accept

Explanation :-

The nftables command nft add rule inet filter input tcp dport 443 accept adds an accept rule to the input chain of the filter table in the inet family. It matches TCP packets whose destination port is 443 and accepts them. The relevant table and chain must already exist unless the command is part of a larger configuration sequence that creates them first. Understanding nftables syntax requires identifying the family, table, chain, protocol, matching criteria, and verdict. This structure provides flexible control over firewall behavior.

Question 212. Which DNS query type asks a resolver for the IPv4 address associated with a hostname?

1. PTR
2. AAAA
3. MX
4. A

Correct Answer: 1. A

Explanation :-

An A query requests the IPv4 address associated with a DNS hostname. For example, querying an A record for www.example.com may return an IPv4 address such as 192.0.2.10. AAAA records provide IPv6 addresses, PTR records perform reverse mapping from addresses to hostnames, and MX records identify mail servers. When troubleshooting DNS, administrators can explicitly specify the record type with tools such as dig. Comparing A and AAAA responses can also help diagnose differences in IPv4 and IPv6 connectivity.

Question 213. Which Apache module is commonly used to rewrite requested URLs according to configurable rules?

1. mod_status
2. mod_proxy
3. mod_rewrite
4. mod_autoindex

Correct Answer: 4. mod_rewrite

Explanation :-

Apache’s mod_rewrite module provides rule-based URL rewriting and redirection. It can modify requested URLs, implement redirects, route requests to different resources, and support various application URL structures. mod_proxy provides proxy functionality, mod_status exposes server-status information, and mod_autoindex can generate directory listings. Because rewrite rules can affect many requests, administrators should test them carefully and inspect Apache logs when unexpected redirects or 404 errors occur. Understanding rewrite conditions and substitutions is particularly important for modern websites using clean or application-generated URLs.

Question 214. Which NFS service is responsible for registering RPC-based services and helping clients determine their ports on systems using traditional NFS configurations?

1. rpcbind
2. sshd
3. named
4. smbd

Correct Answer: 3. rpcbind

Explanation :-

The rpcbind service maps RPC program numbers to network addresses and ports. Traditional NFS configurations rely on RPC-based services, and clients can query rpcbind to determine where required services are listening. NFSv4 simplifies this architecture by using TCP port 2049 for its primary protocol, although other services may still exist depending on the environment. sshd provides SSH access, named provides DNS, and smbd provides Samba file-sharing services. Understanding rpcbind is particularly important when troubleshooting older NFS deployments and firewall rules involving dynamic RPC services.

Question 215. Which Postfix utility can remove or otherwise perform administrative operations on messages in the mail queue?

1. postconf
2. postmap
3. postqueue
4. postsuper

Correct Answer: 1. postsuper

Explanation :-

The postsuper utility performs administrative operations on the Postfix mail queue, including operations such as deleting queued messages under appropriate administrative control. postqueue is commonly used to inspect or trigger queue processing, postconf manages configuration parameters, and postmap creates lookup databases. Queue administration should be performed carefully because deleting messages can permanently remove mail that has not yet been delivered. Administrators should normally inspect queue identifiers and delivery status before taking corrective action.

Question 216. Which Dovecot database provides information about a user’s mailbox location and other user-specific settings?

1. passdb
2. userdb
3. auth_mechanisms
4. protocols

Correct Answer: 2. userdb

Explanation :-

Dovecot’s userdb provides user-specific information needed after authentication, such as mailbox location, UID, GID, home directory, or other account-related values depending on the configuration. passdb is responsible for authentication credentials, while auth_mechanisms defines supported authentication methods and protocols controls enabled mail protocols. Keeping authentication and user information conceptually separate allows Dovecot to use different backend systems for passwords and mailbox data. Incorrect userdb configuration can result in successful authentication followed by mailbox-access or permission problems.

Question 217. Which SSH configuration option controls whether public-key authentication is enabled?

1. PubkeyAuthentication
2. PermitRootLogin
3. AllowGroups
4. X11Forwarding

Correct Answer: 4. PubkeyAuthentication

Explanation :-

The OpenSSH PubkeyAuthentication option controls whether public-key authentication is permitted. When enabled, SSH can authenticate users using authorized public keys rather than relying solely on passwords. PermitRootLogin controls direct root access, AllowGroups restricts which groups may log in, and X11Forwarding controls X11 forwarding. Public-key authentication typically involves a private key retained securely by the client and a corresponding public key stored in the user’s authorized keys configuration on the server. Proper file permissions and ownership are important for successful key-based authentication.

Question 218. Which command searches the Linux audit log for events associated with a particular SELinux denial?

1. restorecon
2. ausearch
3. semanage
4. getsebool

Correct Answer: 3. ausearch

Explanation :-

The ausearch utility searches Linux audit logs for events that match specified criteria. It is frequently used when investigating SELinux denials because SELinux access-control decisions can generate audit records. Administrators can use appropriate search filters to identify recent denial events and then inspect the associated information to determine which process, file, class, or permission was involved. restorecon manages file contexts, semanage manages persistent SELinux configuration, and getsebool displays Boolean settings. Audit information should be interpreted carefully before changing policy.

Question 219. Which DNS tool can perform a reverse lookup when given an IP address?

1. named-checkconf
2. rndc
3. host
4. exportfs

Correct Answer: 2. host

Explanation :-

The host utility can perform both forward and reverse DNS lookups. When given an IP address, it can query the corresponding reverse DNS information, normally using a PTR record. This is useful for checking whether an address has an associated hostname. named-checkconf validates BIND configuration syntax, rndc controls a running BIND server, and exportfs manages NFS exports. Reverse DNS results depend on the appropriate reverse zone and PTR record being configured and delegated correctly, so a missing result does not necessarily indicate a problem with forward DNS.

Question 220. Which command displays the current IPv4 and IPv6 neighbor cache maintained by the Linux kernel?

1. ip neigh
2. ip route
3. ip addr
4. ss -n

Correct Answer: 1. ip neigh

Explanation :-

The ip neigh command displays the Linux kernel’s neighbor table, which contains information about neighboring devices and their link-layer address mappings. For IPv4, this commonly corresponds to ARP information, while IPv6 uses Neighbor Discovery. The table can help administrators diagnose local-network connectivity problems, stale address mappings, or incomplete neighbor resolution. ip addr displays interface addresses, ip route displays routing information, and ss displays socket information. Examining the neighbor table is particularly useful when a host has an IP configuration but cannot communicate correctly with devices on its local network.