View Full LPI 202-450  Exam Dumps and Practice Test Dumps

 

Question 381. Which BIND command can be used to reload zone data without fully restarting the named service?

1. named-checkzone
2. rndc reload
3. dig reload
4. host -r

Correct Answer: 2. rndc reload

Explanation :-

The rndc reload command instructs a running BIND server to reload its configuration and zone data. This allows administrators to apply changes without completely stopping and starting the named daemon. It is particularly useful after modifying zone files or configuration settings. named-checkzone validates zone-file syntax and consistency but does not reload the server. dig is a DNS query utility, while host performs DNS lookups. Using rndc reload is therefore a standard operational method for applying DNS changes to an active BIND installation while minimizing service interruption.

Question 382. Which Apache directive specifies the directory containing the files served for a virtual host?

1. ServerName
2. ServerAlias
3. DirectoryIndex
4. DocumentRoot

Correct Answer: 4. DocumentRoot

Explanation :-

The Apache DocumentRoot directive identifies the filesystem directory from which web content is served. In a virtual-host configuration, each site can have its own DocumentRoot, allowing multiple websites to use different directories on the same server. ServerName identifies the hostname, ServerAlias provides additional hostnames, and DirectoryIndex specifies default files such as index.html. Correctly configuring DocumentRoot is essential because Apache must know where to locate requested resources. File permissions and Apache access controls must also permit the web server to read the selected directory and its contents.

Question 383. Which NFS configuration file defines filesystems that are exported to clients?

1. /etc/exports
2. /etc/fstab
3. /etc/nfs.conf
4. /etc/mounts

Correct Answer: 1. /etc/exports

Explanation :-

The /etc/exports file defines the filesystems that an NFS server makes available to remote clients. Each export can specify permitted hosts or networks and options controlling access behavior, such as read-only access or root squashing. After modifying the file, administrators commonly use exportfs to update the active export table. /etc/fstab is generally used for filesystem mounting, including persistent NFS client mounts. The other files do not serve as the standard primary export-definition file. Proper /etc/exports configuration is important for both functionality and NFS security.

Question 384. Which Samba command checks the syntax and reports errors in the smb.conf configuration?

1. smbstatus
2. smbclient
3. testparm
4. smbpasswd

Correct Answer: 3. testparm

Explanation :-

The testparm utility validates and displays information about the Samba configuration, including the contents of smb.conf. It is commonly used after configuration changes to detect syntax problems or unexpected settings before restarting Samba services. smbstatus reports current Samba connections and locks, smbclient provides a command-line SMB client, and smbpasswd manages Samba password information. Running testparm during troubleshooting can help identify configuration mistakes before they cause service startup failures or unexpected share behavior.

Question 385. Which DNS record type is specifically used to define a canonical alias for another hostname?

1. MX
2. PTR
3. NS
4. CNAME

Correct Answer: 4. CNAME

Explanation :-

A CNAME, or Canonical Name, record creates an alias from one DNS name to another canonical hostname. For example, www.example.com can be configured as a CNAME pointing to web01.example.com. DNS clients then resolve the canonical target according to normal DNS processing. MX records identify mail servers, PTR records provide reverse mappings, and NS records identify authoritative name servers. CNAME records are useful for maintaining aliases without duplicating the target’s address records, although DNS configuration rules restrict where CNAME records can be used within a zone.

Question 386. Which DHCP option identifies the default gateway that a client should use?

1. Option 15
2. Option 3
3. Option 6
4. Option 51

Correct Answer: 2. Option 3

Explanation :-

DHCP option 3 provides the default gateway, or router, information to a DHCP client. A server can supply one or more router addresses through this option, allowing the client to determine where traffic destined for remote networks should be sent. Option 6 specifies DNS servers, option 15 specifies the domain name, and option 51 defines the IP address lease time. If a client has a valid IP address but cannot reach remote networks, checking the DHCP-provided option 3 information can help identify a missing or incorrect default route.

Question 387. Which Postfix configuration parameter specifies the hostname used by the mail system?

1. myhostname
2. mydestination
3. relayhost
4. mynetworks

Correct Answer: 3. myhostname

Explanation :-

The Postfix myhostname parameter specifies the system’s hostname as used by the mail system. It is an important part of Postfix identity and can influence generated message headers and SMTP behavior. mydestination identifies destinations for which Postfix performs local delivery, relayhost specifies an upstream relay, and mynetworks identifies trusted client networks. Administrators should ensure that myhostname corresponds appropriately to the server’s configured hostname and DNS environment. Correct hostname configuration helps avoid confusing SMTP identity and mail-delivery problems.

Question 388. Which Dovecot utility is commonly used to perform mailbox administration tasks such as searching or manipulating messages?

1. doveconf
2. dovecot
3. doveadm
4. dovemail

Correct Answer: 3. doveadm

Explanation :-

The doveadm utility provides administrative commands for Dovecot and can perform various mailbox and user-management operations. Depending on the command and configuration, administrators can use it to inspect mailboxes, search messages, move or delete messages, and perform other maintenance tasks. doveconf is primarily used to inspect effective Dovecot configuration, while dovecot is the main server program. Understanding the distinction between configuration inspection and mailbox administration is important when managing Dovecot-based IMAP and POP3 services.

Question 389. Which SSH configuration directive controls whether password-based authentication is permitted?

1. PermitRootLogin
2. PasswordAuthentication
3. AllowUsers
4. PubkeyAuthentication

Correct Answer: 2. PasswordAuthentication

Explanation :-

The OpenSSH PasswordAuthentication directive controls whether clients may authenticate using passwords. When password authentication is disabled, users generally need another permitted authentication mechanism, such as public-key authentication. PermitRootLogin controls root-account login behavior, AllowUsers restricts which accounts may connect, and PubkeyAuthentication controls public-key authentication. Administrators often disable password authentication in environments that require key-based access, but they must ensure valid alternative credentials are configured first to avoid locking out legitimate users.

Question 390. Which command can display recent authentication-related messages from the system journal?

1. journalctl -u named
2. journalctl -u apache2
3. journalctl -u nfs-server
4. journalctl -u ssh

Correct Answer: 4. journalctl -u ssh

Explanation :-

The journalctl -u ssh command can display journal entries associated with the SSH service when the service unit is named ssh. On systems where the unit is named differently, such as sshd, the corresponding service name should be used. Journal logs can help administrators investigate successful and failed connection attempts, authentication errors, and service startup issues. The other commands target different services: BIND, Apache, and NFS. Examining service-specific journal entries is a useful troubleshooting technique when diagnosing authentication or daemon-related problems.

Question 391. Which nftables family supports rules that can apply to both IPv4 and IPv6 traffic?

1. inet
2. arp
3. bridge
4. netdev

Correct Answer: 1. inet

Explanation :-

The nftables inet address family is designed for rules that can handle both IPv4 and IPv6 traffic. This can simplify firewall configurations because administrators can define common filtering logic without maintaining entirely separate IPv4 and IPv6 rule sets. The ip family is specific to IPv4, while ip6 is specific to IPv6. Other families such as bridge and netdev serve different packet-processing contexts. Using an inet table is therefore useful when a firewall needs consistent filtering policies across both major IP versions.

Question 392. Which DNS record is used to associate an IPv6 address with a hostname?

1. A
2. PTR
3. AAAA
4. CNAME

Correct Answer: 3. AAAA

Explanation :-

An AAAA record maps a hostname to an IPv6 address. It is the IPv6 equivalent of an A record, which maps a hostname to an IPv4 address. PTR records are used for reverse DNS mappings, while CNAME records create aliases to other hostnames. For example, a web server that has an IPv6 address can have an AAAA record associated with its hostname. Administrators can use dig AAAA hostname to inspect IPv6 address records and verify that DNS is providing the expected IPv6 information.

Question 393. Which Apache module provides URL rewriting functionality?

1. mod_ssl
2. mod_proxy
3. mod_rewrite
4. mod_status

Correct Answer: 3. mod_rewrite

Explanation :-

The Apache mod_rewrite module provides URL rewriting capabilities. It works with directives such as RewriteRule and RewriteCond to transform or redirect requests according to defined patterns and conditions. It is widely used for clean URLs, application routing, redirects, and conditional request processing. mod_ssl provides TLS support, mod_proxy supports proxy functionality, and mod_status provides server-status information. When troubleshooting rewrite behavior, administrators should verify that the module is enabled and that the relevant rewrite directives are correctly placed in the applicable configuration context.

Question 394. Which NFS utility reports statistics about NFS client and server operations?

1. showmount
2. nfsstat
3. exportfs
4. rpcinfo

Correct Answer: 2. nfsstat

Explanation :-

The nfsstat utility reports statistics related to NFS operations. It can provide information about client and server activity, including procedure calls and various protocol-related counters. These statistics can help administrators investigate performance or communication problems involving NFS. showmount displays exported filesystems and client information, exportfs manages NFS exports, and rpcinfo reports RPC service information. When an NFS environment experiences unusual delays or failures, examining nfsstat output can provide additional evidence about the behavior of the NFS subsystem.

Question 395. Which Postfix file commonly contains mail aliases such as mapping an administrative address to a local user?

1. /etc/postfix/main.cf
2. /etc/aliases
3. /etc/postfix/master.cf
4. /etc/resolv.conf

Correct Answer: 2. /etc/aliases

Explanation :-

The /etc/aliases file commonly contains local mail aliases that map addresses to other local recipients, programs, or destinations. A typical example is mapping an administrative address such as postmaster to a specific local account. After modifying aliases, administrators commonly run newaliases so that Postfix can use the updated alias database. main.cf contains major Postfix configuration parameters, while master.cf defines service processes and their behavior. /etc/resolv.conf is related to DNS resolver configuration and has no role in defining Postfix mail aliases.

Question 396. Which Linux command can display listening TCP and UDP sockets together with associated processes?

1. ip route
2. ss -lntup
3. ip addr
4. dig

Correct Answer: 2. ss -lntup

Explanation :-

The ss -lntup command provides information about listening sockets and can include the associated processes. The options request listening sockets, numeric addresses and ports, TCP and UDP sockets, and process information. This makes the command useful when determining which services are listening on particular ports. ip route displays routing information, ip addr displays interface addresses, and dig performs DNS queries. When troubleshooting unexpected network exposure, checking listening sockets can help identify services that are accepting connections and may require additional firewall or service configuration.

Question 397. Which OpenSSH directive specifies whether public-key authentication is enabled?

1. PubkeyAuthentication
2. PasswordAuthentication
3. AuthorizedKeysFile
4. AllowGroups

Correct Answer: 1. PubkeyAuthentication

Explanation :-

The OpenSSH PubkeyAuthentication directive controls whether public-key authentication is permitted by the SSH server. When enabled, users can authenticate using an appropriate private key corresponding to a public key accepted by the server. PasswordAuthentication controls password authentication, AuthorizedKeysFile identifies the file containing accepted public keys, and AllowGroups restricts access to members of specified groups. Public-key authentication is widely used for administrative access because it can avoid transmitting reusable passwords during authentication and can be integrated with automated management systems.

Question 398. Which SELinux command searches audit records for messages related to access denials?

1. restorecon
2. getenforce
3. ausearch
4. semanage

Correct Answer: 3. ausearch

Explanation :-

The ausearch utility searches Linux audit logs for selected events and is commonly used to investigate SELinux access denials. Administrators can filter audit records to locate relevant messages and then use the information to determine which process, file, or policy rule was involved. restorecon restores file security contexts, getenforce reports SELinux enforcement mode, and semanage manages persistent SELinux configuration. When an application is blocked by SELinux, examining audit records with tools such as ausearch can provide evidence needed to diagnose the policy interaction.

Question 399. Which command can test whether a remote TCP port is reachable without establishing a full application-level session?

1. nc -z
2. dig -x
3. host -t
4. rndc status

Correct Answer: 1. nc -z

Explanation :-

The nc -z option allows netcat to scan for listening TCP or UDP ports without sending application data in the normal interactive manner. For example, nc -zv server.example.com 443 can test whether TCP port 443 is reachable and accepting connections. This makes netcat useful for basic connectivity and firewall troubleshooting. dig -x performs reverse DNS queries, host -t performs DNS lookups for a specified record type, and rndc status reports BIND server status. Port testing should be performed only against systems where such testing is authorized.

Question 400. Which OpenVPN configuration directive identifies the remote VPN server to which a client should connect?

1. cipher
2. dev
3. proto
4. remote

Correct Answer: 4. remote

Explanation :-

In an OpenVPN client configuration, the remote directive specifies the hostname or IP address of the remote VPN server and can also include the destination port. For example, a client configuration may identify a VPN gateway by hostname and port using the remote directive. dev specifies the virtual network device type, proto specifies the transport protocol, and cipher relates to encryption configuration depending on the OpenVPN version and setup. Correctly configuring the remote endpoint is essential because the client needs to know where to establish the VPN connection.