View Full LPI 202-450  Exam Dumps and Practice Test Dumps

 

Question 61. Which BIND directive specifies the directory containing zone files when relative paths are used in the configuration?

1. listen-on
2. directory
3. recursion
4. allow-query

Correct Answer: 2. directory

Explanation :-

The BIND directory option specifies the working directory used by the named daemon. Relative paths for zone files and other files can be interpreted relative to this directory. It is commonly configured within the options statement in named.conf. The listen-on option controls the IPv4 addresses on which BIND listens, recursion controls recursive query behavior, and allow-query restricts which clients may submit queries. Correctly understanding BIND’s path handling is important because zone files may be referenced with either absolute paths or paths relative to the configured working directory.

Question 62. Which DNS query type requests information about the name servers authoritative for a domain?

1. A
2. MX
3. PTR
4. NS

Correct Answer: 4. NS

Explanation :-

An NS query requests Name Server records identifying the authoritative DNS servers for a domain or zone. These records help resolvers determine which servers are authoritative for the requested namespace. An A query retrieves an IPv4 address, MX identifies mail-exchange servers, and PTR is commonly used for reverse DNS mappings from addresses to hostnames. Administrators can use tools such as dig to query NS records when troubleshooting delegation or determining which DNS servers provide authoritative answers for a domain.

Question 63. Which BIND configuration option controls whether the server performs recursive DNS queries?

1. recursion
2. notify
3. transfer-source
4. version

Correct Answer: 1. recursion

Explanation :-

The BIND recursion option controls whether the DNS server performs recursive queries on behalf of clients. When recursion is enabled, the server can query other DNS servers to resolve names for which it is not authoritative. A DNS server intended only for authoritative service may disable recursion to reduce unnecessary exposure and prevent unauthorized clients from using it as a recursive resolver. notify controls zone-change notification behavior, transfer-source affects zone transfers, and version controls the version string returned by certain queries. Recursive access can also be restricted using ACL-related configuration.

Question 64. Which DNS record is commonly used to publish arbitrary text information, including some email security policies?

1. SOA
2. SRV
3. TXT
4. PTR

Correct Answer: 3. TXT

Explanation :-

TXT records store text associated with a DNS name and are commonly used for verification and policy information. Email security technologies such as SPF-related configurations and domain verification mechanisms frequently use TXT records. The SOA record contains authoritative zone metadata, SRV identifies services and ports, and PTR supports reverse DNS resolution. Because TXT records can contain application-specific information, their syntax and purpose depend on the technology using them. Administrators commonly inspect TXT records with dig when troubleshooting domain verification or email-related DNS configuration.

Question 65. Which DNS mechanism allows a secondary name server to obtain updated zone data from a primary server?

1. Zone transfer
2. DNS caching
3. Recursive forwarding
4. Reverse lookup

Correct Answer: 1. Zone transfer

Explanation :-

DNS zone transfers allow secondary authoritative name servers to obtain zone data from a primary server. Traditional mechanisms include AXFR for a complete transfer and IXFR for an incremental transfer containing changes. The SOA serial number helps secondary servers determine whether their copy of the zone is current. DNS caching is used by recursive resolvers to retain records temporarily, while forwarding sends queries to another resolver and reverse lookup maps addresses to names. Properly restricting zone transfers is important because unrestricted transfers may expose detailed information about a DNS namespace.

Question 66. Which Apache configuration directive enables a specific module in distributions that use explicit module-loading directives?

1. LoadModule
2. IncludeOptional
3. Alias
4. User

Correct Answer: 2. LoadModule

Explanation :-

The Apache LoadModule directive loads a dynamic module into the server process. It specifies the module identifier and the shared-object file that implements the module. For example, a configuration may load an SSL-related module through an appropriate LoadModule directive. IncludeOptional controls inclusion of configuration files when they exist, Alias maps URLs to filesystem locations, and User specifies the account under which Apache workers run on configurations that support it. Module loading is important when enabling functionality such as TLS, URL rewriting, proxying, or authentication.

Question 67. Which HTTP method is normally used to retrieve a resource without requesting that the server return the resource body?

1. POST
2. PUT
3. HEAD
4. DELETE

Correct Answer: 3. HEAD

Explanation :-

The HTTP HEAD method requests the headers that would be returned for a corresponding GET request but does not normally include the response body. It can therefore be useful for checking resource availability, metadata, content length, or cache-related information without transferring the full resource. GET retrieves a resource and normally returns its representation, while POST commonly submits data and PUT is associated with creating or replacing a resource at a specified URI. HEAD is especially useful for lightweight HTTP diagnostics and monitoring.

Question 68. Which Apache directive can restrict access to a directory using authentication and authorization settings when the appropriate module is enabled?

1. Require
2. ServerName
3. Listen
4. DirectoryIndex

Correct Answer: 1. Require

Explanation :-

The Apache Require directive is used by the authorization framework to determine which authenticated or otherwise authorized clients can access a protected resource. It can appear within directory, location, and virtual-host configuration contexts depending on the modules and authentication method in use. For example, Require valid-user can require a successfully authenticated user. ServerName identifies a virtual host, Listen controls network listening, and DirectoryIndex specifies default directory resources. Authentication and authorization should be configured together so that Apache both verifies identities and determines which identities may access protected content.

Question 69. Which command can mount an NFS export on a Linux client?

1. mount.nfs
2. exportfs
3. showmount
4. nfsstat

Correct Answer: 3. mount.nfs

Explanation :-

mount.nfs is the NFS-specific mount helper used to mount an NFS filesystem on a Linux client. It may also be invoked indirectly through the general mount command when an NFS filesystem type is specified. exportfs manages exports on an NFS server, showmount can display exported filesystems, and nfsstat reports NFS statistics. A typical NFS client configuration specifies the remote server and exported path together with a local mount point. Correct permissions and network connectivity are also required for the mount operation to succeed.

Question 70. Which NFS version introduced a stateful protocol design and uses a single well-known port for the core NFS service?

1. NFSv2
2. NFSv3
3. NFSv4
4. NFSv1

Correct Answer: 4. NFSv4

Explanation :-

NFSv4 introduced significant architectural changes compared with earlier versions, including a stateful protocol design and a simplified port model. The core NFSv4 service uses TCP port 2049, reducing reliance on the collection of auxiliary RPC services commonly associated with earlier NFS versions. NFSv4 also introduced features such as integrated locking and a more unified namespace model. NFSv2 and NFSv3 commonly depend more heavily on auxiliary RPC services for functions such as mounting and locking. Understanding these differences helps administrators troubleshoot firewall and service configurations.

Question 71. Which Samba option determines whether a share is accessible without requiring a password under appropriate guest-access configuration?

1. read only
2. guest ok
3. force group
4. create mask

Correct Answer: 2. guest ok

Explanation :-

The Samba guest ok parameter controls whether a share permits guest access. When enabled, clients may be allowed to access the share without authenticating as a specific Samba user, subject to the server’s overall guest configuration and filesystem permissions. read only controls whether clients can modify files, force group controls group ownership behavior for created files, and create mask influences permissions on newly created files. Guest access should be enabled deliberately because it can allow unauthenticated users to access shared resources.

Question 72. Which Samba parameter defines the local filesystem directory that corresponds to a shared resource?

1. path
2. hosts allow
3. browseable
4. security

Correct Answer: 1. path

Explanation :-

The Samba path parameter specifies the local filesystem directory that is exported through a particular Samba share. For example, a share named [documents] could use path = /srv/documents. Samba then applies its share-level access rules and filesystem permissions to that directory. hosts allow can restrict client addresses, browseable controls visibility in browse lists, and security relates to authentication and security modes depending on the Samba version and configuration. Correctly setting path is essential because it determines which local files are exposed to SMB clients.

Question 73. Which Linux command can display the IP address of the DNS resolver being used for a particular interface when systemd-resolved is active?

1. resolvectl dns
2. dnsquery interface
3. systemctl resolver
4. hostnamectl dns

Correct Answer: 1. resolvectl dns

Explanation :-

resolvectl dns displays the DNS server configuration associated with network links when systemd-resolved is active. It can also be used to configure per-link DNS servers. This is useful when diagnosing systems where different interfaces use different DNS resolvers. resolvectl status provides broader resolver information, while the other commands listed are not standard mechanisms for displaying systemd-resolved DNS settings. When troubleshooting name resolution, administrators should examine both resolver configuration and actual DNS query results to distinguish configuration problems from unreachable or malfunctioning DNS servers.

Question 74. Which DHCP message does a server send to indicate that a client has been offered an available IP address?

1. DHCPDECLINE
2. DHCPRELEASE
3. DHCPNAK
4. DHCPOFFER

Correct Answer: 4. DHCPOFFER

Explanation :-

A DHCP server sends a DHCPOFFER message in response to a client’s DHCPDISCOVER request. The offer normally contains a proposed IP address along with lease and configuration information such as subnet mask, gateway, and DNS servers. The client then typically responds with DHCPREQUEST to indicate which offer it wants to accept. DHCPDECLINE is used when a client detects that an offered address is already in use, DHCPRELEASE relinquishes a lease, and DHCPNAK indicates that a requested configuration cannot be granted. This sequence is fundamental to DHCP troubleshooting.

Question 75. Which Postfix parameter specifies the hostname that the mail system uses to identify itself?

1. mydestination
2. relay_domains
3. myhostname
4. virtual_alias_maps

Correct Answer: 3. myhostname

Explanation :-

The Postfix myhostname parameter specifies the system’s fully qualified hostname that Postfix uses for various mail-system functions. It can influence the hostname presented during SMTP communication and serves as a basis for other Postfix defaults. mydestination identifies domains for which the system provides final delivery, relay_domains identifies destinations for which relay service is permitted, and virtual_alias_maps defines mappings for virtual aliases. Correct hostname configuration is important for mail identity, logging, and interoperability with other SMTP servers.

Question 76. Which command is commonly used to inspect Postfix configuration parameter values?

1. postconf
2. postqueue
3. postsuper
4. postdrop

Correct Answer: 1. postconf

Explanation :-

postconf is the principal command-line utility for displaying and managing Postfix configuration parameters. Running postconf without arguments can display configured parameters, while specifying a parameter can retrieve its current value. Administrators can also use it to modify configuration settings when appropriate. postqueue manages queue display and submission operations, postsuper performs administrative queue operations, and postdrop is used to submit mail to the Postfix maildrop. postconf is therefore the primary tool for examining Postfix configuration during administration and troubleshooting.

Question 77. Which Dovecot configuration file commonly contains the main service and protocol configuration on systems using the standard Dovecot layout?

1. /etc/dovecot/dovecot.conf
2. /etc/mail/dovecot.cf
3. /var/lib/dovecot/config
4. /etc/imap.conf

Correct Answer: 1. /etc/dovecot/dovecot.conf

Explanation :-

The main Dovecot configuration is commonly located at /etc/dovecot/dovecot.conf, although exact layouts can vary by distribution. This configuration can include additional files under the Dovecot configuration directory, where settings for protocols, authentication, SSL/TLS, and mail locations may be defined. Administrators should check the distribution’s packaging and Dovecot’s effective configuration when troubleshooting. The other paths listed are not the standard primary Dovecot configuration file locations. The doveconf utility can be used to inspect the effective configuration generated from the available configuration files.

Question 78. Which OpenSSH feature allows a client to securely access a service on a remote network by forwarding a local TCP port through an SSH server?

1. X11 forwarding
2. Local port forwarding
3. Agent forwarding
4. Remote command execution

Correct Answer: 2. Local port forwarding

Explanation :-

Local port forwarding allows an SSH client to bind a local TCP port and forward connections through the SSH server to a specified destination. It is commonly configured with the -L option. For example, an administrator can use it to securely access a service that is reachable from the SSH server but not directly from the administrator’s workstation. X11 forwarding transports graphical application traffic, agent forwarding provides access to an SSH authentication agent, and remote command execution runs commands on the SSH server. Port forwarding should be restricted appropriately because it can provide access to otherwise unreachable network services.

Question 79. Which Linux command can display the current SELinux enforcement status?

1. sestatus
2. selinux-status
3. getselinux
4. semanage-status

Correct Answer: 1. sestatus

Explanation :-

The sestatus command displays information about the current SELinux configuration and enforcement state. Its output can indicate whether SELinux is enabled and whether the system is operating in enforcing or permissive mode. Other SELinux tools serve different purposes: getenforce provides a concise enforcement-mode result, while semanage manages SELinux policy configuration. The ability to identify the current SELinux state is important when troubleshooting access denials because a service may appear correctly configured at the traditional Unix permission level but still be restricted by SELinux policy.

Question 80. Which Linux firewall framework is the modern successor commonly used in place of legacy iptables tooling on current distributions?

1. TCP Wrappers
2. nftables
3. xinetd
4. inetd

Correct Answer: 2. nftables

Explanation :-

nftables is the modern Linux packet-filtering framework designed to replace the older iptables family of tools. It provides a unified framework for IPv4 and IPv6 filtering, NAT, and related packet-processing tasks. The nft command is used to inspect and manage nftables rulesets. TCP Wrappers historically provided host-based access controls for selected services, while xinetd and inetd are service-supervision mechanisms rather than modern packet-filtering frameworks. Understanding nftables is important for contemporary Linux security administration, especially when configuring firewall rules on distributions that have moved away from legacy iptables commands.