View Full LPI 202-450  Exam Dumps and Practice Test Dumps

 

Question 221. Which BIND directive specifies the default time-to-live value for negative DNS responses?

1. refresh
2. expire
3. minimum
4. retry

Correct Answer: 4. minimum

Explanation :-

The minimum field in the SOA record historically defines the negative caching TTL, meaning how long resolvers may cache negative responses such as NXDOMAIN. Modern DNS implementations follow the RFC 2308 interpretation of this field for negative caching. The other SOA fields have different purposes: refresh controls secondary-server refresh timing, retry determines how soon a secondary retries a failed refresh, and expire determines how long a secondary may continue serving a zone without successful refreshes. Understanding SOA fields is important when diagnosing DNS caching and propagation behavior.

Question 222. In Apache HTTP Server, which directive can be used to define the default file served when a client requests a directory?

1. DirectoryIndex
2. DirectoryRoot
3. DefaultFile
4. IndexFile

Correct Answer: 1. DirectoryIndex

Explanation :-

The Apache DirectoryIndex directive specifies the resources Apache should look for when a client requests a directory without naming a specific file. For example, DirectoryIndex index.html index.php causes Apache to check those files in the specified order. This directive is commonly configured in the main Apache configuration, virtual host configuration, or permitted .htaccess files. DirectoryRoot, DefaultFile, and IndexFile are not standard Apache directives for this purpose. If none of the configured index files exists, Apache may generate a directory listing when indexing is enabled, or return an error when it is disabled.

Question 223. Which command displays the NFS exports currently available from a specified server?

1. showmount -e
2. exportfs -s
3. nfsstat -e
4. mount.nfs -l

Correct Answer: 1. showmount -e

Explanation :-

The showmount -e command queries an NFS server and displays its exported file systems. For example, showmount -e nfs.example.com can show which directories the server advertises as available for mounting. This is useful when troubleshooting NFS access or verifying that an export is being published. exportfs is primarily used on the NFS server to manage its exports, while nfsstat reports NFS statistics. mount.nfs is used to mount an NFS file system rather than list server exports.

Question 224. Which Samba parameter controls whether a share is visible in network browse lists?

1. visible_share
2. browseable
3. discoverable
4. show_share

Correct Answer: 2. browseable

Explanation :-

The Samba browseable parameter determines whether a share is displayed in network browse lists. Setting browseable = yes makes the share visible through browsing mechanisms, while browseable = no hides it from the browse list without necessarily preventing clients that know the share name from accessing it. This is different from access-control parameters such as valid users, which determine who may connect. Administrators commonly use testparm after modifying /etc/samba/smb.conf to validate the configuration before restarting or reloading Samba services.

Question 225. Which DNS record identifies the mail server responsible for accepting email for a domain?

1. TXT
2. NS
3. PTR
4. MX

Correct Answer: 4. MX

Explanation :-

An MX, or Mail Exchange, record identifies the mail servers responsible for receiving email for a DNS domain. The record contains a preference value and a hostname. For example, an MX record may direct mail for example.com to mail.example.com. Lower preference values have higher priority when multiple MX records exist. An NS record identifies authoritative name servers, a PTR record provides reverse DNS mapping, and a TXT record stores arbitrary text information such as SPF-related data. DNS administrators can inspect MX records using tools such as dig or host.

Question 226. Which DHCP option specifies the default gateway that a client should use?

1. Option 6
2. Option 15
3. Option 3
4. Option 12

Correct Answer: 3. Option 3

Explanation :-

DHCP option 3 specifies the router or default gateway information that a DHCP server supplies to clients. When a client receives this option, it can install the specified gateway as its default route. Option 6 identifies DNS servers, option 15 specifies the DNS domain name, and option 12 supplies the client hostname. Correct DHCP options are essential for proper network connectivity because a client may have an IP address while still being unable to reach remote networks if it lacks a valid default gateway.

Question 227. Which Postfix command displays the contents of the mail queue in a traditional queue-list format?

1. postqueue -p
2. postfix -q
3. postconf -q
4. mailq –flush

Correct Answer: 1. postqueue -p

Explanation :-

The postqueue -p command displays the Postfix mail queue. It provides information about queued messages, including queue IDs, sender and recipient information, message size, and the reason a message may remain undelivered. Administrators use this command when troubleshooting delayed or stuck email delivery. postfix manages the Postfix service, while postconf is primarily used to inspect or modify configuration parameters. The postqueue -f option is used to request immediate queue processing, making the distinction between viewing and flushing the queue important during mail-service troubleshooting.

Question 228. Which Dovecot command can be used to display the effective configuration after configuration files have been processed?

1. doveconf
2. dovecot-config
3. doveadm-config
4. dovecot –show

Correct Answer: 1. doveconf

Explanation :-

The doveconf utility displays Dovecot’s effective configuration. It is particularly useful when troubleshooting because Dovecot may combine settings from multiple configuration files and included fragments. Running doveconf allows an administrator to see the resulting configuration rather than inspecting individual files separately. This helps identify incorrect settings, overrides, or unexpected defaults. doveadm is primarily an administrative command interface for Dovecot services and mailboxes. Reviewing the effective configuration is especially useful when diagnosing authentication, mailbox, listener, or protocol-related problems.

Question 229. Which SSH configuration directive controls whether password authentication is permitted?

1. UsePAM
2. PasswordAuthentication
3. AllowPasswords
4. LoginPassword

Correct Answer: 2. PasswordAuthentication

Explanation :-

The OpenSSH PasswordAuthentication directive controls whether password-based authentication is permitted by the SSH server. In sshd_config, setting PasswordAuthentication no disables this authentication method, while yes permits it, subject to other authentication controls. This setting is commonly adjusted when administrators want to require public-key authentication instead of passwords. UsePAM controls whether PAM is used by the SSH server, but it is not itself the directive that directly enables or disables password authentication. After changing the SSH server configuration, administrators should validate the configuration and reload or restart the service appropriately.

Question 230. Which command displays the current SELinux enforcement mode?

1. selinux-status
2. getenforce
3. sestatus-mode
4. enforce-status

Correct Answer: 2. getenforce

Explanation :-

The getenforce command displays the current SELinux mode, typically as Enforcing, Permissive, or Disabled. Enforcing mode actively applies SELinux policy, while permissive mode logs policy violations without blocking the associated operations. The setenforce command changes between enforcing and permissive modes temporarily. sestatus provides more comprehensive SELinux status information, including policy details and configuration. Knowing the difference between these commands is useful when troubleshooting access-denied events because SELinux restrictions can prevent an operation even when traditional Unix permissions appear to allow it.

Question 231. Which nftables command lists the rules in the filter table of the inet family?

1. nft show filter inet
2. nft list inet filter
3. nft display table filter
4. nft rules inet filter

Correct Answer: 2. nft list inet filter

Explanation :-

The nftables command nft list table inet filter displays the complete contents of the filter table in the inet address family. The inet family can contain rules that apply to both IPv4 and IPv6 traffic. Administrators use table and chain listing commands to inspect the active firewall configuration and troubleshoot unexpected packet handling. The general syntax follows the nftables hierarchy of family, table, chain, and rule. Commands such as nft list ruleset can instead display the entire active nftables configuration across all families and tables.

Question 232. Which DNS record maps a hostname to an IPv6 address?

1. A
2. PTR
3. AAAA
4. CNAME

Correct Answer: 3. AAAA

Explanation :-

An AAAA record maps a hostname to an IPv6 address. It serves a role similar to an A record, which maps a hostname to an IPv4 address. For example, an AAAA record may associate www.example.com with an IPv6 address such as 2001:db8::10. A PTR record is used for reverse DNS mapping, while a CNAME creates an alias pointing to another canonical hostname. Administrators can inspect AAAA records using dig, for example with dig AAAA www.example.com. Correct IPv6 DNS configuration is an important part of modern network-client management.

Question 233. Which Apache directive is commonly used to enable URL rewriting through the mod_rewrite module?

1. RewriteRule
2. URLRewrite
3. RedirectRule
4. RouteRule

Correct Answer: 1. RewriteRule

Explanation :-

The Apache RewriteRule directive defines pattern-based URL rewriting when the mod_rewrite module is enabled. It can rewrite requested URLs internally or redirect clients to different URLs depending on the rule configuration and flags. Rewrite rules are widely used for clean URLs, redirects, application routing, and compatibility with legacy paths. The RewriteCond directive can provide conditions that determine when a rule should be applied. Redirect is another Apache mechanism for redirects, but it does not provide the same pattern-based processing capabilities as mod_rewrite.

Question 234. Which NFS option causes a client operation to wait and retry when the server becomes temporarily unavailable?

1. soft
2. async
3. bg
4. hard

Correct Answer: 4. hard

Explanation :-

The NFS hard mount option causes NFS client requests to continue retrying when the server becomes unavailable. This behavior is important for data integrity because applications generally continue waiting rather than immediately receiving an I/O error. By contrast, a soft mount can return errors after retry limits are reached, which may create application-level problems depending on the workload. The bg option controls how mounting behaves after an initial failure, while async concerns write synchronization behavior. Administrators should understand these options carefully because NFS mount behavior directly affects application availability and data handling.

Question 235. Which Postfix parameter specifies the domains for which this mail server should consider itself the final destination?

1. mydestination
2. relay_domains
3. mynetworks
4. myorigin

Correct Answer: 1. mydestination

Explanation :-

The Postfix mydestination parameter defines the domains and hostnames for which the server considers itself the final destination. Mail addressed to these destinations can be delivered locally rather than relayed elsewhere. This parameter is therefore important when configuring Postfix as a destination mail server. mynetworks defines trusted client networks, relay_domains controls domains for which the server provides relay service, and myorigin determines the domain used for locally posted mail. Incorrect mydestination configuration can cause mail-delivery failures or unintended relay behavior.

Question 236. Which PAM module is commonly used to enforce password quality requirements?

1. pam_access
2. pam_limits
3. pam_pwquality
4. pam_env

Correct Answer: 3. pam_pwquality

Explanation :-

The pam_pwquality module is commonly used to enforce password-quality requirements through PAM. It can enforce characteristics such as minimum password length and restrictions on password composition, depending on the configured policy. It is typically integrated into PAM configuration for password-changing operations. pam_access controls access based on configured rules, pam_limits manages resource limits, and pam_env manages environment variables. Because PAM configuration is distribution-dependent and can affect authentication broadly, administrators should carefully validate changes to avoid accidentally preventing legitimate users from authenticating or changing passwords.

Question 237. Which SSH option specifies the private key file to use for public-key authentication?

1. -k
2. -i
3. -p
4. -f

Correct Answer: 2. -i

Explanation :-

The SSH client -i option specifies the identity, or private-key, file to use when attempting public-key authentication. For example, ssh -i ~/.ssh/id_ed25519 user@server tells the SSH client to use the specified private key. The -p option specifies a non-default SSH port, while -f requests that SSH go into the background after authentication and -k is associated with GSSAPI credential delegation behavior. Correct key selection is especially useful when a client has multiple identities and the administrator needs to select a particular key for a specific remote server.

Question 238. Which command can be used to search the systemd journal for messages from a particular service?

1. systemctl log
2. journalctl -u
3. systemd-msg
4. journal -s

Correct Answer: 2. journalctl -u

Explanation :-

The journalctl -u option filters systemd journal entries by a specific systemd unit, such as a service. For example, journalctl -u sshd can display journal messages associated with the SSH daemon service. This is useful when diagnosing service startup failures, authentication problems, or runtime errors. systemctl manages services but does not use systemctl log as a standard command for viewing journal entries. Administrators can combine journalctl -u with options such as -b to restrict results to the current boot, making troubleshooting more focused.

Question 239. Which DNS utility is commonly used to perform detailed DNS queries and inspect specific record types?

1. dig
2. nslookupd
3. dnsquery
4. named-query

Correct Answer: 1. dig

Explanation :-

The dig utility is widely used for detailed DNS queries and troubleshooting. It allows administrators to specify record types, query particular DNS servers, inspect authoritative responses, and examine response sections. For example, dig MX example.com requests MX records, while dig @192.0.2.53 example.com sends the query to a specified DNS server. The host command is also useful for simpler lookups, but dig provides substantially more diagnostic detail. DNS administrators frequently use it to investigate delegation, recursion, caching, authoritative responses, and zone configuration problems.

Question 240. Which command displays established TCP and UDP socket information on a modern Linux system?

1. route
2. ss
3. ip sockets
4. netconf

Correct Answer: 2. ss

Explanation :-

The ss command displays socket statistics and network connection information on Linux systems. It can show listening and established TCP connections, UDP sockets, Unix sockets, ports, process associations, and other network details. For example, ss -lnt displays listening TCP sockets using numeric addresses and ports. The command is commonly used for troubleshooting services that are unreachable or listening on unexpected ports. Although older systems frequently used netstat for similar tasks, ss is the modern utility commonly associated with socket inspection and is part of the standard Linux networking toolkit.