View Full LPI 202-450  Exam Dumps and Practice Test Dumps

 

Question 101. Which BIND configuration directive specifies which clients are permitted to perform recursive queries?

1. allow-transfer
2. allow-update
3. allow-notify
4. allow-recursion

Correct Answer: 4. allow-recursion

Explanation :-

The BIND allow-recursion option controls which clients are permitted to use the server for recursive DNS queries. Restricting recursion is important on servers that should not provide recursive service to arbitrary external clients. allow-transfer controls which hosts may receive zone transfers, allow-update controls dynamic DNS updates, and allow-notify controls which servers may send zone-change notifications. Recursive DNS servers should generally limit access to trusted networks or clients. Combining recursion controls with appropriate ACL definitions provides more precise management of who can use the server as a resolver.

Question 102. Which BIND command can be used to verify the syntax of the main named configuration file?

1. named-checkconf
2. named-checkzone
3. rndc-check
4. bind-config

Correct Answer: 1. named-checkconf

Explanation :-

named-checkconf checks the syntax of BIND’s configuration files, especially the main named.conf configuration. It can help administrators identify malformed statements before attempting to restart or reload the DNS server. named-checkzone has a different purpose: it validates the contents and structure of an individual DNS zone file. rndc is used to control a running named service, while the other commands listed are not standard BIND configuration-validation utilities. Running named-checkconf after configuration changes can prevent service failures caused by syntax errors.

Question 103. Which DNS record type identifies a service location by specifying a target hostname and port?

1. TXT
2. PTR
3. SRV
4. SOA

Correct Answer: 3. SRV

Explanation :-

SRV records provide information about the location of services, including the target hostname and TCP or UDP port where the service is available. An SRV record can also include priority and weight values that influence service selection. They are commonly used by protocols and applications that need DNS-based service discovery. TXT records contain text information, PTR records provide reverse DNS mappings, and SOA records contain administrative information about a DNS zone. Understanding SRV records is useful when troubleshooting applications that depend on DNS-based discovery rather than simple hostname-to-address resolution.

Question 104. What is the primary purpose of the DNS SOA serial number?

1. To specify the DNS listening port
2. To identify the version of the zone data
3. To define the default gateway
4. To identify the mail exchanger

Correct Answer: 2. To identify the version of the zone data

Explanation :-

The SOA serial number identifies the current version of a DNS zone. Secondary name servers compare the serial number of their local copy with the value on the primary server to determine whether updated zone data needs to be transferred. Administrators should increment the serial number whenever zone data changes in a way that needs to be propagated. The SOA record also contains refresh, retry, and expiration timing information. The serial number does not specify a DNS port, gateway, or mail exchanger; those functions are handled by other configuration elements and DNS records.

Question 105. Which Apache directive specifies the email address or contact information displayed on certain server-generated error pages?

1. ServerAdmin
2. ErrorDocument
3. ServerContact
4. AdminEmail

Correct Answer: 4. ServerAdmin

Explanation :-

The Apache ServerAdmin directive specifies the email address of the server administrator. Apache can use this information on certain automatically generated error pages so users know whom to contact regarding server problems. ErrorDocument controls the documents or responses returned for specific HTTP error codes. ServerName identifies the server’s hostname, while ServerRoot defines the base directory containing server configuration and related files. Although modern websites often customize error pages, understanding ServerAdmin remains useful when examining Apache configuration and server-generated responses.

Question 106. Which Apache directive can define a custom response document for an HTTP 404 error?

1. ErrorPage
2. ErrorDocument
3. CustomError
4. NotFoundDocument

Correct Answer: 2. ErrorDocument

Explanation :-

The Apache ErrorDocument directive defines what Apache should return when a particular HTTP error occurs. For example, an administrator can configure a custom page for status code 404, which indicates that a requested resource was not found. The directive can point to a local URL, a local file, or other supported response forms depending on the configuration. This allows websites to provide more useful error pages instead of relying on generic server responses. Other directives such as DocumentRoot and DirectoryIndex serve different purposes within Apache.

Question 107. Which HTTP status code indicates that the requested resource was not found?

1. 404
2. 401
3. 403
4. 503

Correct Answer: 1. 404

Explanation :-

HTTP status code 404 indicates that the server could not find a representation of the requested resource. It commonly occurs when a URL points to a nonexistent file, an incorrect path, or a resource that has been removed without an appropriate redirect. A 401 response concerns authentication, 403 indicates that access is forbidden, and 503 indicates that the service is temporarily unavailable. When troubleshooting 404 errors, administrators should verify the requested URL, Apache’s DocumentRoot and aliases, rewrite rules, and whether the expected resource actually exists.

Question 108. Which NFS-related service traditionally provides RPC port registration and discovery for services on systems using older NFS architectures?

1. nfsd
2. mountd
3. rpcbind
4. idmapd

Correct Answer: 3. rpcbind

Explanation :-

rpcbind maps RPC service numbers to network ports and allows clients to discover the ports used by RPC-based services. Older NFS configurations commonly rely on RPC services such as mountd and locking-related daemons, making rpcbind an important part of service discovery. NFSv4 reduces this dependency by using TCP port 2049 for its core protocol. nfsd provides the NFS server functionality, mountd handles mount-related requests in applicable configurations, and idmapd is associated with NFSv4 identity mapping. Understanding rpcbind is useful when troubleshooting older NFS deployments and firewall rules.

Question 109. Which NFS command can be used to re-export filesystems after changes to the export configuration?

1. showmount -r
2. exportfs -r
3. nfsstat -r
4. mount.nfs -r

Correct Answer: 2. exportfs -r

Explanation :-

The exportfs -r command re-exports filesystems according to the current export configuration. It is commonly used after changes to /etc/exports so that the NFS server’s active export table reflects the updated configuration. showmount is primarily used to query export information, nfsstat displays NFS statistics, and mount.nfs is used by clients to mount NFS filesystems. Administrators should verify both the export configuration and the resulting active exports when troubleshooting access problems.

Question 110. Which Samba parameter controls whether users can modify files in a share?

1. writable
2. write users
3. read only
4. modify access

Correct Answer: 4. read only

Explanation :-

The Samba read only parameter controls whether a share permits clients to modify its contents. When set to yes, the share is read-only from the Samba service’s perspective; when set to no, clients may be allowed to write, provided underlying filesystem permissions also permit the operation. write users can identify users permitted to write under applicable Samba configurations, but read only is the primary share-level setting for general write access. Samba access controls must always be considered alongside Linux ownership and filesystem permission settings.

Question 111. Which Samba utility can be used to connect to a remote SMB share from the command line and transfer files?

1. smbstatus
2. testparm
3. smbclient
4. smbmountd

Correct Answer: 3. smbclient

Explanation :-

smbclient provides a command-line interface for accessing SMB/CIFS shares. It can be used to list available shares, authenticate to a server, browse directories, and transfer files. Administrators frequently use it to test whether a Samba or Windows file server is reachable and whether credentials have appropriate access. smbstatus displays active Samba sessions and locks, while testparm validates Samba configuration. smbmountd is not a standard Samba utility. Testing with smbclient can help separate SMB authentication or sharing problems from issues involving filesystem mounting.

Question 112. Which Linux configuration file determines the order in which sources such as files and DNS are consulted for hostname resolution?

1. /etc/resolv.conf
2. /etc/hostname
3. /etc/nsswitch.conf
4. /etc/networks

Correct Answer: 1. /etc/nsswitch.conf

Explanation :-

The /etc/nsswitch.conf file controls the sources and ordering used by the Name Service Switch for various types of information, including hostname resolution. For example, a system may be configured to check /etc/hosts before querying DNS. /etc/resolv.conf contains resolver-specific settings such as nameserver addresses, while /etc/hostname identifies the local host. /etc/networks can contain network-name mappings but does not generally control the lookup order. Understanding NSS is important because a system can have correctly configured DNS but still resolve a hostname using another source first.

Question 113. Which command can request a DHCP lease renewal on a Linux client using the common ISC DHCP client utility?

1. dhcp-renew
2. dhclient
3. leasectl
4. dhcpclientctl

Correct Answer: 4. dhclient

Explanation :-

dhclient is the traditional ISC DHCP client utility used to obtain and manage DHCP leases. Depending on the options and existing lease state, it can request or renew an address from a DHCP server. Exact DHCP client tooling varies between Linux distributions because NetworkManager, systemd-networkd, and other frameworks may manage DHCP directly. Nevertheless, dhclient is an important command in Linux networking knowledge and is commonly encountered in LPIC-2 material. Administrators should first determine which network-management system controls the interface before manually invoking DHCP client commands.

Question 114. Which Postfix parameter controls the network interfaces on which the SMTP server listens?

1. inet_interfaces
2. mynetworks
3. smtp_bind_address
4. listen_interfaces

Correct Answer: 2. inet_interfaces

Explanation :-

The Postfix inet_interfaces parameter specifies the network interfaces or addresses on which Postfix accepts network connections. It can be configured to listen on all interfaces, selected addresses, or localhost depending on the server’s intended role. mynetworks defines networks that are trusted for relay and is not the same as determining listening interfaces. Other parameters may affect outbound SMTP connections, but inet_interfaces directly controls where Postfix’s network services bind. Correct configuration helps limit unnecessary exposure of mail services to untrusted networks.

Question 115. Which SMTP response code generally indicates successful completion of a requested mail action?

1. 250
2. 354
3. 421
4. 550

Correct Answer: 1. 250

Explanation :-

SMTP response code 250 generally indicates that a requested action completed successfully. It is commonly returned after commands such as EHLO, MAIL FROM, RCPT TO, or successful message acceptance, depending on the stage of the SMTP transaction. Code 354 indicates that the server is ready to receive message data, 421 indicates that the service is unavailable or closing the connection, and 550 commonly indicates a requested action was not completed because the mailbox or command was rejected. Understanding SMTP response codes helps administrators diagnose mail-delivery failures.

Question 116. Which Dovecot authentication mechanism allows users to authenticate using credentials supplied through a system authentication database such as PAM?

1. passdb
2. namespace
3. mail_location
4. service imap

Correct Answer: 3. passdb

Explanation :-

Dovecot uses passdb configuration to define how user authentication credentials are verified. A passdb can use mechanisms such as PAM, system databases, SQL, LDAP, or other supported authentication sources depending on the deployment. userdb separately provides user information such as mailbox location and UID/GID data. namespace defines mailbox namespaces, while mail_location specifies where messages are stored. Understanding the distinction between passdb and userdb is important when configuring Dovecot authentication and diagnosing situations where users can authenticate but mailbox information cannot be resolved correctly.

Question 117. Which SSH command generates a new public/private key pair for authentication?

1. ssh-copy-id
2. ssh-keygen
3. ssh-keyscan
4. ssh-add

Correct Answer: 4. ssh-keygen

Explanation :-

ssh-keygen generates and manages SSH authentication key pairs. It can create modern key types such as Ed25519 and can also be used to inspect or convert supported keys. ssh-copy-id installs a public key into a remote user’s authorized_keys file, ssh-keyscan retrieves public host keys, and ssh-add loads private keys into an authentication agent. A typical public-key authentication setup involves generating a key pair with ssh-keygen, installing the public key on the remote account, and keeping the private key securely protected.

Question 118. Which SSH feature allows a remote host to use an SSH authentication agent running on the client?

1. Local port forwarding
2. X11 forwarding
3. Agent forwarding
4. TCP forwarding

Correct Answer: 3. Agent forwarding

Explanation :-

SSH agent forwarding allows a remote SSH session to communicate with an authentication agent running on the original client. This can allow the user to authenticate to another SSH server without copying the private key to the intermediate host. It is enabled with options such as ForwardAgent or the -A client option. Because a forwarded agent can potentially be abused by a compromised remote host during the forwarded session, administrators should enable agent forwarding only where necessary and on trusted systems. Local port forwarding and X11 forwarding serve different purposes.

Question 119. Which Linux command can temporarily switch SELinux from enforcing mode to permissive mode?

1. setenforce 0
2. semanage permissive
3. selinuxctl permissive
4. restorecon 0

Correct Answer: 1. setenforce 0

Explanation :-

The command setenforce 0 changes the current SELinux enforcement mode to permissive. In permissive mode, SELinux policy violations are logged but are not generally blocked by enforcement. setenforce 1 switches back to enforcing mode. This change is normally temporary and does not permanently disable SELinux. Administrators can use permissive mode during troubleshooting to determine whether SELinux policy is contributing to an access problem, but they should review audit logs and correct policy issues rather than relying on permissive mode as a permanent configuration.

Question 120. Which nftables object is used to group rules that process packets according to defined hooks and priorities?

1. Set
2. Chain
3. Map
4. Counter

Correct Answer: 2. Chain

Explanation :-

An nftables chain contains rules that are evaluated for packets. Base chains are associated with packet-processing hooks and can have priorities that determine when they are evaluated relative to other chains. Sets store collections of values, maps associate keys with values, and counters track packet and byte statistics. Tables provide a higher-level organizational container for chains, sets, maps, and other objects. Understanding nftables’ hierarchy is important when constructing or troubleshooting firewall rules because tables and chains organize how packet-processing rules are applied.