View Full LPI 202-450  Exam Dumps and Practice Test Dumps

 

Question 41. Which BIND utility can be used to send control commands to a running named server?

1. dig
2. host
3. rndc
4. named-checkzone

Correct Answer: 3. rndc

Explanation :-

rndc is the Remote Name Daemon Control utility used to communicate with and control a running BIND named server. Administrators can use it for operations such as reloading zones, checking server status, flushing caches, and stopping or restarting the name server. Authentication is normally configured using a shared key between the control utility and named. dig and host are primarily DNS query utilities, while named-checkzone validates DNS zone-file syntax and consistency. Using rndc allows administrators to perform many BIND management tasks without manually terminating and restarting the service.

Question 42. Which DNS record type provides an alias from one canonical hostname to another hostname?

1. MX
2. CNAME
3. PTR
4. TXT

Correct Answer: 2. CNAME

Explanation :-

A CNAME (Canonical Name) record creates an alias from one DNS name to another canonical hostname. For example, www.example.com can be configured as a CNAME pointing to web.example.com. DNS resolvers then continue resolving the canonical name to obtain the appropriate address records. CNAME records are different from A or AAAA records, which directly map names to IPv4 or IPv6 addresses. MX records identify mail servers, PTR records support reverse DNS, and TXT records store arbitrary text data used for purposes such as verification and email-related policies.

Question 43. Which DNS record type maps a hostname directly to an IPv6 address?

1. AAAA
2. A
3. PTR
4. SRV

Correct Answer: 1. AAAA

Explanation :-

An AAAA record maps a hostname to an IPv6 address. It serves a role for IPv6 that is analogous to the A record for IPv4. For example, a hostname can have an AAAA record containing an address such as 2001:db8::10. A records contain IPv4 addresses, PTR records are used for reverse DNS lookups, and SRV records identify services and their associated ports. When a client performs DNS resolution for an IPv6-capable service, it may query for AAAA records to determine the IPv6 addresses associated with the requested hostname.

Question 44. Which BIND command validates the syntax and structure of a DNS zone file?

1. rndc
2. host
3. named-checkzone
4. dig

Correct Answer: 3. named-checkzone

Explanation :-

named-checkzone validates a BIND DNS zone file and checks its syntax and structural consistency. It normally receives the zone name and the path to the zone file as arguments. This makes it useful before loading or reloading a modified zone into a production DNS server. named-checkconf instead validates the main BIND configuration file, while dig and host are used to query DNS servers. Testing a zone file before deployment can prevent malformed records from causing zone-loading failures or unexpected DNS behavior.

Question 45. In DNS, what is the purpose of the TTL value associated with a resource record?

1. It identifies the authoritative name server
2. It specifies how long resolvers may cache the record
3. It determines the DNS server’s listening port
4. It defines the zone serial number

Correct Answer: 2. It specifies how long resolvers may cache the record

Explanation :-

TTL, or Time To Live, specifies how long a DNS resolver may cache a resource record before it should obtain fresh information from an authoritative source. A longer TTL can reduce DNS query traffic and improve caching efficiency, while a shorter TTL allows changes to become visible to resolvers more quickly after cached information expires. TTL is different from the SOA serial number, which identifies a particular version of a DNS zone. It also does not define the DNS server’s listening port or identify the authoritative name server. Proper TTL selection is an important part of DNS administration.

Question 46. Which Apache module provides support for URL rewriting through RewriteRule directives?

1. mod_proxy
2. mod_ssl
3. mod_alias
4. mod_rewrite

Correct Answer: 4. mod_rewrite

Explanation :-

Apache’s mod_rewrite module provides flexible URL rewriting capabilities through directives such as RewriteRule and RewriteCond. It can transform requested URLs, redirect users, implement clean URLs, and route requests based on conditions. mod_ssl provides TLS and SSL functionality, mod_proxy enables proxying features, and mod_alias provides simpler URL mapping and redirection functionality. Because mod_rewrite can make complex conditional transformations, it is widely used in web-server configurations. Administrators should test rewrite rules carefully because poorly designed rules can create loops or unexpected request handling.

Question 47. Which Apache directive is used to specify an additional hostname that should match a virtual host?

1. ServerAlias
2. ServerRoot
3. DocumentRoot
4. ErrorLog

Correct Answer: 1. ServerAlias

Explanation :-

The Apache ServerAlias directive specifies additional hostnames that should be associated with a virtual host. For example, a virtual host using www.example.com as its primary name could use ServerAlias example.com to respond to requests for the second hostname as well. ServerName identifies the primary hostname, DocumentRoot specifies the directory containing website files, and ErrorLog identifies the error-log destination. ServerAlias is especially useful when one website needs to respond to multiple DNS names without creating separate virtual-host configurations for each name.

Question 48. Which HTTP status code indicates that a requested resource has been permanently moved to a new URL?

1. 200
2. 301
3. 403
4. 500

Correct Answer: 2. 301

Explanation :-

HTTP status code 301 indicates that a resource has been permanently moved to another URL. A web server can return this response with a Location header identifying the new destination. Clients and search engines can use this information to update references to the resource. Status 200 indicates a successful request, 403 indicates that access is forbidden, and 500 indicates an internal server error. Permanent redirects are commonly used when website URLs change, domains are reorganized, or administrators want to redirect an old path to a replacement resource.

Question 49. Which FTP mode establishes a data connection from the server back toward the client?

1. Passive mode
2. Extended mode
3. Anonymous mode
4. Active mode

Correct Answer: 4. Active mode

Explanation :-

In traditional FTP active mode, the client establishes the control connection to the server, and the server initiates the data connection back toward the client. This behavior can cause problems when the client is behind a firewall or NAT device that does not permit the incoming connection. In passive mode, the client initiates both the control and data connections, which is generally easier to accommodate through client-side firewalls and NAT. FTP’s separate control and data connections are an important consideration when troubleshooting connectivity and firewall configurations.

Question 50. Which NFS mount option causes the client to retry an NFS operation indefinitely when the server becomes unavailable?

1. soft
2. intr
3. hard
4. bg

Correct Answer: 3. hard

Explanation :-

The hard NFS mount behavior causes the client to continue retrying NFS requests when the server is unavailable. This behavior is intended to protect data integrity by avoiding premature failure of filesystem operations. A soft configuration can cause operations to return errors after retries, which may have undesirable consequences for applications depending on the NFS filesystem. The bg option relates to background retry behavior during mounting, while intr has historically controlled interruption of certain NFS operations on older systems. Administrators should carefully consider NFS reliability and application requirements when selecting mount options.

Question 51. Which Samba service is primarily responsible for providing SMB file and printer sharing?

1. nmbd
2. winbindd
3. smbd
4. rpcbind

Correct Answer: 1. smbd

Explanation :-

The Samba smbd daemon provides SMB/CIFS file and printer-sharing services and handles many client interactions with shared resources. It is the core daemon responsible for serving files and printers over the SMB protocol. nmbd historically provides NetBIOS name-service and browsing-related functionality, while winbindd integrates Samba with Windows domain identity information. rpcbind is associated with RPC service registration and is not a Samba daemon. Understanding the roles of these services is useful when troubleshooting Samba connectivity, authentication, and resource-sharing problems.

Question 52. Which Samba configuration parameter specifies the name that clients see for a shared directory?

1. path
2. browseable
3. valid users
4. comment

Correct Answer: 2. browseable

Explanation :-

The browseable parameter controls whether a Samba share is visible when clients browse available shares. Setting it to yes generally allows the share to appear in browse lists, while setting it to no can hide the share from browsing even though users who know its name may still access it if permitted. The path parameter identifies the local filesystem directory, valid users restricts access to specified users or groups, and comment provides descriptive information. Share visibility and access control are separate concepts in Samba configuration.

Question 53. Which command displays the current routing table using the modern iproute2 utilities?

1. ip route
2. ip neigh
3. ip link
4. ip rule

Correct Answer: 1. ip route

Explanation :-

The ip route command displays and manages the Linux kernel’s IP routing table. It can show destination networks, gateways, interfaces, metrics, and other routing information. ip link focuses on network interfaces and their link-layer state, ip neigh displays the neighbor table, and ip rule manages policy-routing rules. When troubleshooting a network client that cannot reach a remote network, examining the routing table with ip route can reveal whether a suitable route and default gateway are present.

Question 54. Which DHCP option normally provides clients with the IP address of their default gateway?

1. Option 6
2. Option 15
3. Option 3
4. Option 53

Correct Answer: 3. Option 3

Explanation :-

DHCP option 3 specifies the router or default gateway addresses that a DHCP server provides to clients. A client uses this information to determine where packets destined for networks outside its local subnet should be sent. DHCP option 6 identifies DNS servers, option 15 specifies the domain name, and option 53 identifies the DHCP message type. Correct gateway information is essential for communication beyond the local network. When diagnosing DHCP-related connectivity issues, administrators should verify that clients receive the expected router option as part of their lease configuration.

Question 55. Which command can display the DNS servers currently configured through systemd-resolved?

1. resolvectl status
2. dig status
3. named-status
4. systemctl dns

Correct Answer: 4. resolvectl status

Explanation :-

resolvectl status displays detailed DNS resolver information when systemd-resolved is being used. The output can include DNS servers, search domains, per-link DNS settings, and other resolver state. This makes it useful for diagnosing situations where applications cannot resolve hostnames or are using an unexpected DNS server. dig is a DNS query tool rather than a systemd-resolved status command. named-status is not a standard command for this purpose, and systemctl dns is not a generic systemd DNS status command. Resolver configuration should be checked alongside interface and routing information during network troubleshooting.

Question 56. Which Postfix command displays messages currently waiting in the mail queue?

1. postconf
2. postqueue -p
3. postalias
4. postsuper -d ALL

Correct Answer: 2. postqueue -p

Explanation :-

postqueue -p displays the contents of the Postfix mail queue, including messages that are waiting for delivery. It is a useful diagnostic command when mail is delayed or delivery attempts are failing. postconf displays or manages Postfix configuration parameters, postalias manages alias databases, and postsuper performs administrative operations on the mail queue, including deletion when used with appropriate options. Examining the queue can help administrators identify deferred messages and investigate delivery problems before taking corrective action.

Question 57. Which email protocol is traditionally designed for downloading messages from a server to a client, often with limited server-side mailbox management?

1. SMTP
2. IMAP
3. POP3
4. LDAP

Correct Answer: 3. POP3

Explanation :-

POP3, the Post Office Protocol version 3, is primarily designed for retrieving email messages from a mail server. Traditional POP3 usage often involves downloading messages to the client and may remove them from the server, although clients can be configured to leave copies on the server. IMAP provides more extensive server-side mailbox management and synchronization, while SMTP handles message submission and transfer between mail systems. LDAP is a directory-access protocol rather than an email retrieval protocol. Understanding the differences between POP3, IMAP, and SMTP is essential when configuring mail clients and servers.

Question 58. Which OpenSSH client option specifies the private key file to use for public-key authentication?

1. -p
2. -i
3. -L
4. -X

Correct Answer: 2. -i

Explanation :-

The OpenSSH client -i option specifies an identity file containing a private key used for public-key authentication. For example, ssh -i ~/.ssh/id_ed25519 user@host tells the SSH client to use that private key when authenticating. The -p option specifies a non-default TCP port, -L configures local port forwarding, and -X enables X11 forwarding. Public-key authentication can improve security and automation when configured correctly, but private keys must be protected because possession of an authorized private key can allow authentication to remote systems.

Question 59. Which Linux security framework uses policy rules to confine processes and can operate in enforcing or permissive modes?

1. SELinux
2. PAM
3. OpenSSH
4. cron

Correct Answer: 1. SELinux

Explanation :-

SELinux, Security-Enhanced Linux, provides mandatory access control through security policies that define what processes and users are permitted to access. It can operate in enforcing mode, where policy violations are blocked, or permissive mode, where violations are logged but generally not prevented. PAM addresses authentication and account-management functions, while OpenSSH provides secure remote access and cron handles scheduled tasks. SELinux policies can significantly restrict the effects of a compromised service by limiting the resources that service is permitted to access.

Question 60. Which command can be used to determine whether a TCP port is reachable on a remote host without establishing a full application session?

1. passwd
2. chmod
3. ss
4. nc

Correct Answer: 4. nc

Explanation :-

The nc command, commonly called Netcat, can be used to test TCP or UDP connectivity to specified hosts and ports. For example, nc -vz host.example.com 443 can test whether a TCP connection to port 443 can be established. This makes Netcat useful for troubleshooting firewalls, services, and network paths. ss primarily displays local socket and connection information, while passwd changes user passwords and chmod changes filesystem permissions. Network connectivity tests with nc should be interpreted alongside firewall rules, service status, and routing information.