{"id":23046,"date":"2026-09-26T11:22:12","date_gmt":"2026-09-26T11:22:12","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=23046"},"modified":"2026-09-26T11:22:12","modified_gmt":"2026-09-26T11:22:12","slug":"lpi-202-450-practice-test-questions-and-exam-dumps-part-4-q61-80","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/lpi-202-450-practice-test-questions-and-exam-dumps-part-4-q61-80\/","title":{"rendered":"LPI 202-450 Practice Test Questions and Exam Dumps Part 4 Q61-80"},"content":{"rendered":"

View Full <\/b>LPI 202-450\u00a0 Exam Dumps<\/b><\/a> and Practice Test Dumps<\/b><\/h1>\n

 <\/p>\n

Question 61. Which BIND directive specifies the directory containing zone files when relative paths are used in the configuration?<\/b><\/p>\n

    \n
  1. <\/b> listen-on<\/span><\/li>\n
  2. <\/b> directory<\/span><\/li>\n
  3. <\/b> recursion<\/span><\/li>\n
  4. <\/b> allow-query<\/span><\/li>\n<\/ol>\n

    Correct Answer: 2. directory<\/b><\/p>\n

    Explanation :-<\/b><\/p>\n

    The BIND <\/span>directory<\/span> option specifies the working directory used by the named daemon. Relative paths for zone files and other files can be interpreted relative to this directory. It is commonly configured within the <\/span>options<\/span> statement in <\/span>named.conf<\/span>. The <\/span>listen-on<\/span> option controls the IPv4 addresses on which BIND listens, <\/span>recursion<\/span> controls recursive query behavior, and <\/span>allow-query<\/span> restricts which clients may submit queries. Correctly understanding BIND’s path handling is important because zone files may be referenced with either absolute paths or paths relative to the configured working directory.<\/span><\/p>\n

    Question 62. Which DNS query type requests information about the name servers authoritative for a domain?<\/b><\/p>\n

      \n
    1. <\/b> A<\/span><\/li>\n
    2. <\/b> MX<\/span><\/li>\n
    3. <\/b> PTR<\/span><\/li>\n
    4. <\/b> NS<\/span><\/li>\n<\/ol>\n

      Correct Answer: 4. NS<\/b><\/p>\n

      Explanation :-<\/b><\/p>\n

      An NS query requests Name Server records identifying the authoritative DNS servers for a domain or zone. These records help resolvers determine which servers are authoritative for the requested namespace. An A query retrieves an IPv4 address, MX identifies mail-exchange servers, and PTR is commonly used for reverse DNS mappings from addresses to hostnames. Administrators can use tools such as <\/span>dig<\/span> to query NS records when troubleshooting delegation or determining which DNS servers provide authoritative answers for a domain.<\/span><\/p>\n

      Question 63. Which BIND configuration option controls whether the server performs recursive DNS queries?<\/b><\/p>\n

        \n
      1. <\/b> recursion<\/span><\/li>\n
      2. <\/b> notify<\/span><\/li>\n
      3. <\/b> transfer-source<\/span><\/li>\n
      4. <\/b> version<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1. recursion<\/b><\/p>\n

        Explanation :-<\/b><\/p>\n

        The BIND <\/span>recursion<\/span> option controls whether the DNS server performs recursive queries on behalf of clients. When recursion is enabled, the server can query other DNS servers to resolve names for which it is not authoritative. A DNS server intended only for authoritative service may disable recursion to reduce unnecessary exposure and prevent unauthorized clients from using it as a recursive resolver. <\/span>notify<\/span> controls zone-change notification behavior, <\/span>transfer-source<\/span> affects zone transfers, and <\/span>version<\/span> controls the version string returned by certain queries. Recursive access can also be restricted using ACL-related configuration.<\/span><\/p>\n

        Question 64. Which DNS record is commonly used to publish arbitrary text information, including some email security policies?<\/b><\/p>\n

          \n
        1. <\/b> SOA<\/span><\/li>\n
        2. <\/b> SRV<\/span><\/li>\n
        3. <\/b> TXT<\/span><\/li>\n
        4. <\/b> PTR<\/span><\/li>\n<\/ol>\n

          Correct Answer: 3. TXT<\/b><\/p>\n

          Explanation :-<\/b><\/p>\n

          TXT records store text associated with a DNS name and are commonly used for verification and policy information. Email security technologies such as SPF-related configurations and domain verification mechanisms frequently use TXT records. The SOA record contains authoritative zone metadata, SRV identifies services and ports, and PTR supports reverse DNS resolution. Because TXT records can contain application-specific information, their syntax and purpose depend on the technology using them. Administrators commonly inspect TXT records with <\/span>dig<\/span> when troubleshooting domain verification or email-related DNS configuration.<\/span><\/p>\n

          Question 65. Which DNS mechanism allows a secondary name server to obtain updated zone data from a primary server?<\/b><\/p>\n

            \n
          1. <\/b> Zone transfer<\/span><\/li>\n
          2. <\/b> DNS caching<\/span><\/li>\n
          3. <\/b> Recursive forwarding<\/span><\/li>\n
          4. <\/b> Reverse lookup<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1. Zone transfer<\/b><\/p>\n

            Explanation :-<\/b><\/p>\n

            DNS zone transfers allow secondary authoritative name servers to obtain zone data from a primary server. Traditional mechanisms include AXFR for a complete transfer and IXFR for an incremental transfer containing changes. The SOA serial number helps secondary servers determine whether their copy of the zone is current. DNS caching is used by recursive resolvers to retain records temporarily, while forwarding sends queries to another resolver and reverse lookup maps addresses to names. Properly restricting zone transfers is important because unrestricted transfers may expose detailed information about a DNS namespace.<\/span><\/p>\n

            Question 66. Which Apache configuration directive enables a specific module in distributions that use explicit module-loading directives?<\/b><\/p>\n

              \n
            1. <\/b> LoadModule<\/span><\/li>\n
            2. <\/b> IncludeOptional<\/span><\/li>\n
            3. <\/b> Alias<\/span><\/li>\n
            4. <\/b> User<\/span><\/li>\n<\/ol>\n

              Correct Answer: 2. LoadModule<\/b><\/p>\n

              Explanation :-<\/b><\/p>\n

              The Apache <\/span>LoadModule<\/span> directive loads a dynamic module into the server process. It specifies the module identifier and the shared-object file that implements the module. For example, a configuration may load an SSL-related module through an appropriate LoadModule directive. <\/span>IncludeOptional<\/span> controls inclusion of configuration files when they exist, <\/span>Alias<\/span> maps URLs to filesystem locations, and <\/span>User<\/span> specifies the account under which Apache workers run on configurations that support it. Module loading is important when enabling functionality such as TLS, URL rewriting, proxying, or authentication.<\/span><\/p>\n

              Question 67. Which HTTP method is normally used to retrieve a resource without requesting that the server return the resource body?<\/b><\/p>\n

                \n
              1. <\/b> POST<\/span><\/li>\n
              2. <\/b> PUT<\/span><\/li>\n
              3. <\/b> HEAD<\/span><\/li>\n
              4. <\/b> DELETE<\/span><\/li>\n<\/ol>\n

                Correct Answer: 3. HEAD<\/b><\/p>\n

                Explanation :-<\/b><\/p>\n

                The HTTP <\/span>HEAD<\/span> method requests the headers that would be returned for a corresponding GET request but does not normally include the response body. It can therefore be useful for checking resource availability, metadata, content length, or cache-related information without transferring the full resource. <\/span>GET<\/span> retrieves a resource and normally returns its representation, while POST commonly submits data and PUT is associated with creating or replacing a resource at a specified URI. HEAD is especially useful for lightweight HTTP diagnostics and monitoring.<\/span><\/p>\n

                Question 68. Which Apache directive can restrict access to a directory using authentication and authorization settings when the appropriate module is enabled?<\/b><\/p>\n

                  \n
                1. <\/b> Require<\/span><\/li>\n
                2. <\/b> ServerName<\/span><\/li>\n
                3. <\/b> Listen<\/span><\/li>\n
                4. <\/b> DirectoryIndex<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 1. Require<\/b><\/p>\n

                  Explanation :-<\/b><\/p>\n

                  The Apache <\/span>Require<\/span> directive is used by the authorization framework to determine which authenticated or otherwise authorized clients can access a protected resource. It can appear within directory, location, and virtual-host configuration contexts depending on the modules and authentication method in use. For example, <\/span>Require valid-user<\/span> can require a successfully authenticated user. <\/span>ServerName<\/span> identifies a virtual host, <\/span>Listen<\/span> controls network listening, and <\/span>DirectoryIndex<\/span> specifies default directory resources. Authentication and authorization should be configured together so that Apache both verifies identities and determines which identities may access protected content.<\/span><\/p>\n

                  Question 69. Which command can mount an NFS export on a Linux client?<\/b><\/p>\n

                    \n
                  1. <\/b> mount.nfs<\/span><\/li>\n
                  2. <\/b> exportfs<\/span><\/li>\n
                  3. <\/b> showmount<\/span><\/li>\n
                  4. <\/b> nfsstat<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 3. mount.nfs<\/b><\/p>\n

                    Explanation :-<\/b><\/p>\n

                    mount.nfs<\/span> is the NFS-specific mount helper used to mount an NFS filesystem on a Linux client. It may also be invoked indirectly through the general <\/span>mount<\/span> command when an NFS filesystem type is specified. <\/span>exportfs<\/span> manages exports on an NFS server, <\/span>showmount<\/span> can display exported filesystems, and <\/span>nfsstat<\/span> reports NFS statistics. A typical NFS client configuration specifies the remote server and exported path together with a local mount point. Correct permissions and network connectivity are also required for the mount operation to succeed.<\/span><\/p>\n

                    Question 70. Which NFS version introduced a stateful protocol design and uses a single well-known port for the core NFS service?<\/b><\/p>\n

                      \n
                    1. <\/b> NFSv2<\/span><\/li>\n
                    2. <\/b> NFSv3<\/span><\/li>\n
                    3. <\/b> NFSv4<\/span><\/li>\n
                    4. <\/b> NFSv1<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 4. NFSv4<\/b><\/p>\n

                      Explanation :-<\/b><\/p>\n

                      NFSv4 introduced significant architectural changes compared with earlier versions, including a stateful protocol design and a simplified port model. The core NFSv4 service uses TCP port 2049, reducing reliance on the collection of auxiliary RPC services commonly associated with earlier NFS versions. NFSv4 also introduced features such as integrated locking and a more unified namespace model. NFSv2 and NFSv3 commonly depend more heavily on auxiliary RPC services for functions such as mounting and locking. Understanding these differences helps administrators troubleshoot firewall and service configurations.<\/span><\/p>\n

                      Question 71. Which Samba option determines whether a share is accessible without requiring a password under appropriate guest-access configuration?<\/b><\/p>\n

                        \n
                      1. <\/b> read only<\/span><\/li>\n
                      2. <\/b> guest ok<\/span><\/li>\n
                      3. <\/b> force group<\/span><\/li>\n
                      4. <\/b> create mask<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 2. guest ok<\/b><\/p>\n

                        Explanation :-<\/b><\/p>\n

                        The Samba <\/span>guest ok<\/span> parameter controls whether a share permits guest access. When enabled, clients may be allowed to access the share without authenticating as a specific Samba user, subject to the server’s overall guest configuration and filesystem permissions. <\/span>read only<\/span> controls whether clients can modify files, <\/span>force group<\/span> controls group ownership behavior for created files, and <\/span>create mask<\/span> influences permissions on newly created files. Guest access should be enabled deliberately because it can allow unauthenticated users to access shared resources.<\/span><\/p>\n

                        Question 72. Which Samba parameter defines the local filesystem directory that corresponds to a shared resource?<\/b><\/p>\n

                          \n
                        1. <\/b> path<\/span><\/li>\n
                        2. <\/b> hosts allow<\/span><\/li>\n
                        3. <\/b> browseable<\/span><\/li>\n
                        4. <\/b> security<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 1. path<\/b><\/p>\n

                          Explanation :-<\/b><\/p>\n

                          The Samba <\/span>path<\/span> parameter specifies the local filesystem directory that is exported through a particular Samba share. For example, a share named <\/span>[documents]<\/span> could use <\/span>path = \/srv\/documents<\/span>. Samba then applies its share-level access rules and filesystem permissions to that directory. <\/span>hosts allow<\/span> can restrict client addresses, <\/span>browseable<\/span> controls visibility in browse lists, and <\/span>security<\/span> relates to authentication and security modes depending on the Samba version and configuration. Correctly setting <\/span>path<\/span> is essential because it determines which local files are exposed to SMB clients.<\/span><\/p>\n

                          Question 73. Which Linux command can display the IP address of the DNS resolver being used for a particular interface when systemd-resolved is active?<\/b><\/p>\n

                            \n
                          1. <\/b> resolvectl dns<\/span><\/li>\n
                          2. <\/b> dnsquery interface<\/span><\/li>\n
                          3. <\/b> systemctl resolver<\/span><\/li>\n
                          4. <\/b> hostnamectl dns<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1. resolvectl dns<\/b><\/p>\n

                            Explanation :-<\/b><\/p>\n

                            resolvectl dns<\/span> displays the DNS server configuration associated with network links when <\/span>systemd-resolved<\/span> is active. It can also be used to configure per-link DNS servers. This is useful when diagnosing systems where different interfaces use different DNS resolvers. <\/span>resolvectl status<\/span> provides broader resolver information, while the other commands listed are not standard mechanisms for displaying systemd-resolved DNS settings. When troubleshooting name resolution, administrators should examine both resolver configuration and actual DNS query results to distinguish configuration problems from unreachable or malfunctioning DNS servers.<\/span><\/p>\n

                            Question 74. Which DHCP message does a server send to indicate that a client has been offered an available IP address?<\/b><\/p>\n

                              \n
                            1. <\/b> DHCPDECLINE<\/span><\/li>\n
                            2. <\/b> DHCPRELEASE<\/span><\/li>\n
                            3. <\/b> DHCPNAK<\/span><\/li>\n
                            4. <\/b> DHCPOFFER<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 4. DHCPOFFER<\/b><\/p>\n

                              Explanation :-<\/b><\/p>\n

                              A DHCP server sends a DHCPOFFER message in response to a client’s DHCPDISCOVER request. The offer normally contains a proposed IP address along with lease and configuration information such as subnet mask, gateway, and DNS servers. The client then typically responds with DHCPREQUEST to indicate which offer it wants to accept. DHCPDECLINE is used when a client detects that an offered address is already in use, DHCPRELEASE relinquishes a lease, and DHCPNAK indicates that a requested configuration cannot be granted. This sequence is fundamental to DHCP troubleshooting.<\/span><\/p>\n

                              Question 75. Which Postfix parameter specifies the hostname that the mail system uses to identify itself?<\/b><\/p>\n

                                \n
                              1. <\/b> mydestination<\/span><\/li>\n
                              2. <\/b> relay_domains<\/span><\/li>\n
                              3. <\/b> myhostname<\/span><\/li>\n
                              4. <\/b> virtual_alias_maps<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 3. myhostname<\/b><\/p>\n

                                Explanation :-<\/b><\/p>\n

                                The Postfix <\/span>myhostname<\/span> parameter specifies the system’s fully qualified hostname that Postfix uses for various mail-system functions. It can influence the hostname presented during SMTP communication and serves as a basis for other Postfix defaults. <\/span>mydestination<\/span> identifies domains for which the system provides final delivery, <\/span>relay_domains<\/span> identifies destinations for which relay service is permitted, and <\/span>virtual_alias_maps<\/span> defines mappings for virtual aliases. Correct hostname configuration is important for mail identity, logging, and interoperability with other SMTP servers.<\/span><\/p>\n

                                Question 76. Which command is commonly used to inspect Postfix configuration parameter values?<\/b><\/p>\n

                                  \n
                                1. <\/b> postconf<\/span><\/li>\n
                                2. <\/b> postqueue<\/span><\/li>\n
                                3. <\/b> postsuper<\/span><\/li>\n
                                4. <\/b> postdrop<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 1. postconf<\/b><\/p>\n

                                  Explanation :-<\/b><\/p>\n

                                  postconf<\/span> is the principal command-line utility for displaying and managing Postfix configuration parameters. Running <\/span>postconf<\/span> without arguments can display configured parameters, while specifying a parameter can retrieve its current value. Administrators can also use it to modify configuration settings when appropriate. <\/span>postqueue<\/span> manages queue display and submission operations, <\/span>postsuper<\/span> performs administrative queue operations, and <\/span>postdrop<\/span> is used to submit mail to the Postfix maildrop. <\/span>postconf<\/span> is therefore the primary tool for examining Postfix configuration during administration and troubleshooting.<\/span><\/p>\n

                                  Question 77. Which Dovecot configuration file commonly contains the main service and protocol configuration on systems using the standard Dovecot layout?<\/b><\/p>\n

                                    \n
                                  1. <\/b> \/etc\/dovecot\/dovecot.conf<\/span><\/li>\n
                                  2. <\/b> \/etc\/mail\/dovecot.cf<\/span><\/li>\n
                                  3. <\/b> \/var\/lib\/dovecot\/config<\/span><\/li>\n
                                  4. <\/b> \/etc\/imap.conf<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 1. \/etc\/dovecot\/dovecot.conf<\/b><\/p>\n

                                    Explanation :-<\/b><\/p>\n

                                    The main Dovecot configuration is commonly located at <\/span>\/etc\/dovecot\/dovecot.conf<\/span>, although exact layouts can vary by distribution. This configuration can include additional files under the Dovecot configuration directory, where settings for protocols, authentication, SSL\/TLS, and mail locations may be defined. Administrators should check the distribution’s packaging and Dovecot’s effective configuration when troubleshooting. The other paths listed are not the standard primary Dovecot configuration file locations. The <\/span>doveconf<\/span> utility can be used to inspect the effective configuration generated from the available configuration files.<\/span><\/p>\n

                                    Question 78. Which OpenSSH feature allows a client to securely access a service on a remote network by forwarding a local TCP port through an SSH server?<\/b><\/p>\n

                                      \n
                                    1. <\/b> X11 forwarding<\/span><\/li>\n
                                    2. <\/b> Local port forwarding<\/span><\/li>\n
                                    3. <\/b> Agent forwarding<\/span><\/li>\n
                                    4. <\/b> Remote command execution<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 2. Local port forwarding<\/b><\/p>\n

                                      Explanation :-<\/b><\/p>\n

                                      Local port forwarding allows an SSH client to bind a local TCP port and forward connections through the SSH server to a specified destination. It is commonly configured with the <\/span>-L<\/span> option. For example, an administrator can use it to securely access a service that is reachable from the SSH server but not directly from the administrator’s workstation. X11 forwarding transports graphical application traffic, agent forwarding provides access to an SSH authentication agent, and remote command execution runs commands on the SSH server. Port forwarding should be restricted appropriately because it can provide access to otherwise unreachable network services.<\/span><\/p>\n

                                      Question 79. Which Linux command can display the current SELinux enforcement status?<\/b><\/p>\n

                                        \n
                                      1. <\/b> sestatus<\/span><\/li>\n
                                      2. <\/b> selinux-status<\/span><\/li>\n
                                      3. <\/b> getselinux<\/span><\/li>\n
                                      4. <\/b> semanage-status<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 1. sestatus<\/b><\/p>\n

                                        Explanation :-<\/b><\/p>\n

                                        The <\/span>sestatus<\/span> command displays information about the current SELinux configuration and enforcement state. Its output can indicate whether SELinux is enabled and whether the system is operating in enforcing or permissive mode. Other SELinux tools serve different purposes: <\/span>getenforce<\/span> provides a concise enforcement-mode result, while <\/span>semanage<\/span> manages SELinux policy configuration. The ability to identify the current SELinux state is important when troubleshooting access denials because a service may appear correctly configured at the traditional Unix permission level but still be restricted by SELinux policy.<\/span><\/p>\n

                                        Question 80. Which Linux firewall framework is the modern successor commonly used in place of legacy iptables tooling on current distributions?<\/b><\/p>\n

                                          \n
                                        1. <\/b> TCP Wrappers<\/span><\/li>\n
                                        2. <\/b> nftables<\/span><\/li>\n
                                        3. <\/b> xinetd<\/span><\/li>\n
                                        4. <\/b> inetd<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 2. nftables<\/b><\/p>\n

                                          Explanation :-<\/b><\/p>\n

                                          nftables is the modern Linux packet-filtering framework designed to replace the older iptables family of tools. It provides a unified framework for IPv4 and IPv6 filtering, NAT, and related packet-processing tasks. The <\/span>nft<\/span> command is used to inspect and manage nftables rulesets. TCP Wrappers historically provided host-based access controls for selected services, while xinetd and inetd are service-supervision mechanisms rather than modern packet-filtering frameworks. Understanding nftables is important for contemporary Linux security administration, especially when configuring firewall rules on distributions that have moved away from legacy iptables commands.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full LPI 202-450\u00a0 Exam Dumps and Practice Test Dumps   Question 61. Which BIND directive specifies the directory containing zone files when relative paths are used in the configuration? listen-on directory recursion allow-query Correct Answer: 2. directory Explanation :- The BIND directory option specifies the working directory used by the named daemon. Relative paths […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23046"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=23046"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23046\/revisions"}],"predecessor-version":[{"id":23047,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23046\/revisions\/23047"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=23046"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=23046"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=23046"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}