View Full LPI 202-450  Exam Dumps and Practice Test Dumps

 

Question 361. Which BIND configuration file commonly contains the primary server-wide DNS configuration?

1. /etc/hosts
2. /etc/resolv.conf
3. /etc/named.conf
4. /etc/dhcp/dhcpd.conf

Correct Answer: 3. /etc/named.conf

Explanation :-

The /etc/named.conf file is the primary configuration file commonly used by BIND named servers. It can define global server options, logging, access controls, zone declarations, and other operational settings. Zone data itself is typically stored in separate zone files referenced from this configuration. /etc/hosts provides static hostname mappings, /etc/resolv.conf contains resolver configuration for clients, and /etc/dhcp/dhcpd.conf belongs to the ISC DHCP server. Administrators commonly use named-checkconf to validate the syntax of a BIND configuration before restarting or reloading the DNS service.

Question 362. Which Apache directive specifies an alternate hostname that should map to an existing virtual host?

1. ServerAlias
2. ServerAdmin
3. DirectoryIndex
4. ErrorDocument

Correct Answer: 1. ServerAlias

Explanation :-

The Apache ServerAlias directive defines additional hostnames that should be associated with a virtual host. For example, a virtual host configured with ServerName example.com can use ServerAlias www.example.com to accept requests for the additional hostname. ServerAdmin identifies the administrator’s contact address, DirectoryIndex defines default index files, and ErrorDocument controls responses for HTTP errors. Server aliases are particularly useful when a website must respond to multiple DNS names while using the same virtual-host configuration and document root.

Question 363. Which NFS command displays the exports currently advertised by a remote NFS server?

1. nfsstat
2. exportfs
3. mount
4. showmount -e

Correct Answer: 4. showmount -e

Explanation :-

The showmount -e command queries an NFS server and displays its exported filesystems. It is useful when determining which directories a server makes available to NFS clients. The -e option specifically requests the export list. exportfs is primarily used on an NFS server to maintain the export table, mount attaches a filesystem locally, and nfsstat reports NFS statistics. When troubleshooting an NFS client, showmount -e servername can help verify that the expected export is being advertised before attempting to mount it.

Question 364. In Samba, which parameter controls whether a share is visible when browsing available SMB shares?

1. writable
2. browseable
3. valid users
4. guest ok

Correct Answer: 2. browseable

Explanation :-

The Samba browseable parameter determines whether a configured share is displayed when clients browse the available SMB shares. Setting browseable = yes makes the share visible in normal browsing operations, while setting it to no can hide the share even though clients that know its name may still access it if permitted. writable controls whether users can write to a share, valid users restricts account access, and guest ok controls guest access. This distinction is useful when a share exists but does not appear in a client’s browse list.

Question 365. Which DNS record identifies the authoritative name servers for a DNS zone?

1. NS
2. A
3. TXT
4. PTR

Correct Answer: 1. NS

Explanation :-

An NS, or Name Server, record identifies the authoritative DNS servers for a zone. A properly delegated domain normally has NS records that identify the servers responsible for answering authoritatively for that domain. A records map names to IPv4 addresses, TXT records contain text information such as verification or policy data, and PTR records provide reverse DNS mappings. NS records therefore play an important role in DNS delegation and zone authority. When troubleshooting DNS delegation, administrators commonly examine NS records to determine which servers are authoritative.

Question 366. Which DHCP message does a server send in response to a client’s DHCPDISCOVER when offering an address?

1. DHCPACK
2. DHCPREQUEST
3. DHCPOFFER
4. DHCPDECLINE

Correct Answer: 3. DHCPOFFER

Explanation :-

A DHCP server normally responds to a client’s DHCPDISCOVER with a DHCPOFFER message. The offer contains proposed configuration information such as an IP address, subnet mask, lease duration, and potentially gateway and DNS server information. The client can then respond with DHCPREQUEST to indicate which offer it wants to accept. DHCPACK confirms an accepted lease, while DHCPDECLINE indicates that the offered address appears to be in use. Understanding the DHCP exchange is important when diagnosing failures in automatic network configuration.

Question 367. Which Postfix parameter specifies the networks that are trusted to relay mail through the server?

1. mydestination
2. myorigin
3. relayhost
4. mynetworks

Correct Answer: 4. mynetworks

Explanation :-

The Postfix mynetworks parameter defines the client networks that are considered trusted for mail relay. Properly configuring this parameter is important because overly broad trusted networks can allow unauthorized systems to relay mail through the server. mydestination identifies local delivery destinations, myorigin controls the domain used for locally generated mail, and relayhost specifies an upstream mail relay. Administrators should carefully define mynetworks according to the actual trusted hosts and networks rather than permitting unrestricted relay access.

Question 368. Which Dovecot command can display the effective configuration after included configuration files have been processed?

1. doveadm auth
2. doveconf
3. dovecotctl
4. dovecheck

Correct Answer: 2. doveconf

Explanation :-

The doveconf command displays Dovecot’s effective configuration, including settings obtained through included configuration files. This makes it useful when troubleshooting because the effective configuration can differ from what appears in a single configuration file. Administrators can use it to inspect authentication, mailbox, protocol, and service-related settings. doveadm provides various administrative operations, but doveconf is specifically associated with displaying and examining Dovecot configuration. Reviewing the effective configuration can help identify inherited settings or overrides that are otherwise easy to miss.

Question 369. Which OpenSSH client option specifies a destination port other than the default SSH port?

1. -i
2. -L
3. -p
4. -X

Correct Answer: 3. -p

Explanation :-

The OpenSSH client uses the -p option to specify the destination TCP port when connecting to an SSH server. For example, ssh -p 2222 user@example.com attempts the connection on TCP port 2222 instead of the default port 22. The -i option specifies an identity file, -L creates local port forwarding, and -X enables X11 forwarding. When an SSH server has been configured to listen on a non-standard port, the client must either specify that port with -p or use an equivalent configuration entry in the SSH client configuration.

Question 370. Which command displays the current SELinux status, including whether SELinux is enabled and its policy mode?

1. sestatus
2. getsebool
3. semodule
4. restorecon

Correct Answer: 1. sestatus

Explanation :-

The sestatus command provides detailed information about SELinux status, including whether SELinux is enabled, the current mode, and policy information. It is more comprehensive than getenforce, which primarily reports the current enforcement mode. getsebool displays SELinux boolean values, semodule manages SELinux policy modules, and restorecon restores file security contexts. When investigating an SELinux-related service problem, sestatus can provide useful information about the overall security policy environment before examining individual contexts or audit records.

Question 371. Which nftables command lists the rules contained in a specific table?

1. nft show table
2. nft table list
3. nft list table inet filter
4. nft ruleset table inet filter

Correct Answer: 3. nft list table inet filter

Explanation :-

The nft list table inet filter command displays the contents of the specified filter table in the inet address family. It can show chains, rules, and other objects contained in that table. This is useful when an administrator needs to inspect a particular firewall table rather than displaying the entire active ruleset. The broader nft list ruleset command displays all configured nftables rules. Using the appropriate listing command makes firewall troubleshooting more focused and helps verify whether expected rules are actually loaded.

Question 372. Which DNS record type maps a hostname directly to an IPv4 address?

1. AAAA
2. CNAME
3. MX
4. A

Correct Answer: 4. A

Explanation :-

An A record maps a hostname to an IPv4 address. It is one of the fundamental DNS record types used for ordinary forward name resolution. An AAAA record performs a similar function for IPv6 addresses, while CNAME creates an alias to another DNS name and MX identifies mail-exchange servers. For example, an A record can associate www.example.com with an IPv4 address assigned to a web server. Administrators commonly use tools such as dig or host to inspect A records during DNS troubleshooting.

Question 373. Which Apache directive can rewrite request URLs according to specified patterns and substitution rules?

1. RewriteRule
2. Redirect
3. Alias
4. ProxyPass

Correct Answer: 1. RewriteRule

Explanation :-

The Apache RewriteRule directive is used by the URL rewriting engine to transform request URLs according to matching patterns and substitution expressions. It is commonly used for redirects, clean URLs, application routing, and other URL-processing requirements. The Redirect directive provides simpler redirection behavior, Alias maps URL paths to filesystem locations, and ProxyPass is used for reverse-proxy mappings. Rewrite rules can be combined with conditions and other mod_rewrite directives, making them useful for more complex request-processing requirements.

Question 374. Which NFS mount option causes the client to continue retrying NFS requests when the server is unavailable?

1. soft
2. ro
3. sync
4. hard

Correct Answer: 4. hard

Explanation :-

The NFS hard mount option causes the client to continue retrying requests when the NFS server becomes unavailable. This behavior is generally intended to avoid silently losing or prematurely failing filesystem operations. A soft mount can return an error after retries under configured conditions, which may have different application implications. The ro option makes the filesystem read-only, while sync relates to write synchronization behavior. NFS mount behavior should be selected carefully because retry and failure semantics can affect applications using the mounted filesystem.

Question 375. Which Postfix command displays the configured value of a specific parameter?

1. postqueue -p
2. postconf
3. postmap
4. postsuper -d

Correct Answer: 2. postconf

Explanation :-

The postconf utility is used to display and modify Postfix configuration parameters. Running postconf without a specific parameter can display configuration settings, while postconf parameter_name can be used to inspect a particular setting. postqueue -p displays the mail queue, postmap manages lookup databases, and postsuper performs administrative operations on queued messages. During Postfix troubleshooting, postconf is particularly useful for verifying whether important settings such as mydestination, mynetworks, or relayhost contain the expected values.

Question 376. Which Linux configuration file determines the order in which sources such as files and DNS are consulted for hostname resolution?

1. /etc/hosts
2. /etc/resolv.conf
3. /etc/nsswitch.conf
4. /etc/hostname

Correct Answer: 3. /etc/nsswitch.conf

Explanation :-

The /etc/nsswitch.conf file controls the order and sources used by the Name Service Switch for various types of lookups, including hostname resolution. An entry such as hosts: files dns indicates that the system should consult local files such as /etc/hosts before DNS. /etc/resolv.conf provides resolver-specific information such as DNS server addresses, while /etc/hostname identifies the system’s hostname. Understanding nsswitch.conf is important because a DNS server can be reachable and correctly configured while hostname resolution still behaves differently due to the configured lookup order.

Question 377. Which SSH server configuration directive can restrict connections to specific user accounts?

1. AllowUsers
2. Port
3. HostKey
4. X11Forwarding

Correct Answer: 1. AllowUsers

Explanation :-

The OpenSSH AllowUsers directive restricts SSH access to specified user accounts. Administrators can use it to define which accounts are permitted to authenticate through the SSH service, providing an additional access-control layer. Port specifies the listening port, HostKey identifies server host-key files, and X11Forwarding controls X11 forwarding. AllowUsers can be particularly useful on multi-user systems where only certain administrative or service accounts should be permitted to access SSH. More complex restrictions can also involve groups, source addresses, and other SSH access-control directives.

Question 378. Which PAM module is commonly used to enforce password quality requirements such as minimum length?

1. pam_limits
2. pam_env
3. pam_unix
4. pam_pwquality

Correct Answer: 4. pam_pwquality

Explanation :-

The pam_pwquality module is commonly used to enforce password-quality requirements in Linux systems. It can help enforce policies involving password length, character classes, and other complexity requirements depending on its configuration. pam_limits controls resource limits, pam_env manages environment variables, and pam_unix provides traditional Unix authentication functionality. Password policies are configured through PAM configuration files and related module settings. Administrators should understand the order and control flow of PAM modules because authentication and password-management behavior can depend on how these modules are arranged.

Question 379. Which DNS utility can query a specific DNS server directly for a record?

1. rndc
2. dig
3. named-checkconf
4. named-checkzone

Correct Answer: 2. dig

Explanation :-

The dig utility can send DNS queries directly to a specified DNS server. For example, dig @192.0.2.53 example.com A asks the specified server for an A record. This capability is useful when comparing responses from different DNS servers or troubleshooting delegation and resolver behavior. rndc communicates with a BIND server for administrative control, while named-checkconf validates BIND configuration syntax and named-checkzone validates zone-file syntax and consistency. dig is therefore one of the primary command-line tools for examining live DNS responses.

Question 380. Which Linux command displays the system’s current IP routing table?

1. ip neigh
2. ip addr
3. ip link
4. ip route

Correct Answer: 4. ip route

Explanation :-

The ip route command displays and manages the Linux IP routing table. Running ip route without additional arguments shows routes currently known to the system, including directly connected networks and default routes when configured. ip addr displays addresses assigned to interfaces, ip link displays interface information, and ip neigh displays the neighbor cache. Examining the routing table is a fundamental network troubleshooting step because an incorrect or missing route can prevent a system from reaching remote networks even when its interface and IP address configuration appear correct.