{"id":23060,"date":"2026-09-26T11:27:51","date_gmt":"2026-09-26T11:27:51","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=23060"},"modified":"2026-09-26T11:27:51","modified_gmt":"2026-09-26T11:27:51","slug":"lpi-202-450-practice-test-questions-and-exam-dumps-part-11-q201-220","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/lpi-202-450-practice-test-questions-and-exam-dumps-part-11-q201-220\/","title":{"rendered":"LPI 202-450 Practice Test Questions and Exam Dumps Part 11 Q201-220"},"content":{"rendered":"

View Full <\/b>LPI 202-450\u00a0 Exam Dumps<\/b><\/a> and Practice Test Dumps<\/b><\/h1>\n

 <\/p>\n

Question 201. Which BIND record controls the authoritative information and timing parameters for a DNS zone?<\/b><\/p>\n

    \n
  1. <\/b> NS<\/span><\/li>\n
  2. <\/b> MX<\/span><\/li>\n
  3. <\/b> SOA<\/span><\/li>\n
  4. <\/b> CNAME<\/span><\/li>\n<\/ol>\n

    Correct Answer: 3. SOA<\/b><\/p>\n

    Explanation :-<\/b><\/p>\n

    The SOA, or Start of Authority, record contains administrative information for a DNS zone. It identifies the primary authoritative name server and includes the responsible party, serial number, refresh interval, retry interval, expire interval, and negative caching TTL. Secondary servers use the serial number to determine whether their copy of the zone needs to be updated. NS records identify authoritative name servers, MX records identify mail servers, and CNAME records provide aliases. A correctly maintained SOA record is therefore fundamental to zone management, secondary synchronization, and DNS administration.<\/span><\/p>\n

    Question 202. Which Apache directive can define additional hostnames that should be handled by the same virtual host?<\/b><\/p>\n

      \n
    1. <\/b> ServerAlias<\/span><\/li>\n
    2. <\/b> DocumentRoot<\/span><\/li>\n
    3. <\/b> ErrorDocument<\/span><\/li>\n
    4. <\/b> DirectoryIndex<\/span><\/li>\n<\/ol>\n

      Correct Answer: 1. ServerAlias<\/b><\/p>\n

      Explanation :-<\/b><\/p>\n

      The Apache <\/span>ServerAlias<\/span> directive specifies additional hostnames that should match an existing virtual host. For example, a virtual host with <\/span>ServerName www.example.com<\/span> can use <\/span>ServerAlias example.com<\/span> so requests for both names are handled by the same configuration. <\/span>DocumentRoot<\/span> specifies the directory containing web content, <\/span>DirectoryIndex<\/span> identifies default files for directory requests, and <\/span>ErrorDocument<\/span> controls custom responses for HTTP errors. ServerAlias is particularly useful when a website must respond to several related domain names without maintaining separate virtual-host configurations.<\/span><\/p>\n

      Question 203. Which NFS mount option makes a client mount a filesystem as read-only?<\/b><\/p>\n

        \n
      1. <\/b> sync<\/span><\/li>\n
      2. <\/b> hard<\/span><\/li>\n
      3. <\/b> noexec<\/span><\/li>\n
      4. <\/b> ro<\/span><\/li>\n<\/ol>\n

        Correct Answer: 4. ro<\/b><\/p>\n

        Explanation :-<\/b><\/p>\n

        The NFS <\/span>ro<\/span> mount option mounts the exported filesystem as read-only from the client perspective. This prevents normal write operations through that mount and can be useful when clients only need to consume shared data. The <\/span>hard<\/span> option controls retry behavior when the NFS server becomes unavailable, <\/span>noexec<\/span> prevents execution of binaries from the mounted filesystem, and <\/span>sync<\/span> concerns synchronization behavior. Read-only access should also be considered alongside server-side export permissions because both client and server configuration can influence the effective access available to users.<\/span><\/p>\n

        Question 204. Which Samba configuration parameter specifies the filesystem directory associated with a share?<\/b><\/p>\n

          \n
        1. <\/b> path<\/span><\/li>\n
        2. <\/b> valid users<\/span><\/li>\n
        3. <\/b> browseable<\/span><\/li>\n
        4. <\/b> guest ok<\/span><\/li>\n<\/ol>\n

          Correct Answer: 2. path<\/b><\/p>\n

          Explanation :-<\/b><\/p>\n

          The Samba <\/span>path<\/span> parameter specifies the local filesystem directory that is exported through an SMB share. For example, <\/span>path = \/srv\/shared<\/span> associates the Samba share with that directory. <\/span>valid users<\/span> controls which users may access the share, <\/span>browseable<\/span> determines whether it appears in browse lists, and <\/span>guest ok<\/span> controls whether guest access is permitted. Samba access therefore involves both the share configuration and underlying Linux filesystem permissions. A correctly configured path is essential because Samba must be able to access the directory and its contents using the permissions of the relevant service or user context.<\/span><\/p>\n

          Question 205. Which DNS record type creates an alias that points one DNS name to another canonical name?<\/b><\/p>\n

            \n
          1. <\/b> PTR<\/span><\/li>\n
          2. <\/b> MX<\/span><\/li>\n
          3. <\/b> TXT<\/span><\/li>\n
          4. <\/b> CNAME<\/span><\/li>\n<\/ol>\n

            Correct Answer: 4. CNAME<\/b><\/p>\n

            Explanation :-<\/b><\/p>\n

            A CNAME record creates an alias from one DNS name to another canonical name. For example, <\/span>www.example.com<\/span> can be configured as a CNAME pointing to <\/span>web01.example.com<\/span>. When resolving the alias, the DNS client can then continue resolving the canonical target. PTR records are used for reverse DNS, MX records identify mail servers, and TXT records contain textual information. CNAME records are useful for service aliases and hostname abstraction, although they have specific DNS restrictions and generally should not be used at the zone apex where other required records coexist.<\/span><\/p>\n

            Question 206. Which DHCP message confirms that a server has accepted a client’s requested lease?<\/b><\/p>\n

              \n
            1. <\/b> DHCPDISCOVER<\/span><\/li>\n
            2. <\/b> DHCPREQUEST<\/span><\/li>\n
            3. <\/b> DHCPACK<\/span><\/li>\n
            4. <\/b> DHCPOFFER<\/span><\/li>\n<\/ol>\n

              Correct Answer: 3. DHCPACK<\/b><\/p>\n

              Explanation :-<\/b><\/p>\n

              DHCPACK is the message a DHCP server normally sends to confirm that a client’s requested configuration and lease have been accepted. The typical allocation sequence begins with DHCPDISCOVER, followed by DHCPOFFER, DHCPREQUEST, and DHCPACK. DHCPNAK can be sent when the requested configuration is invalid or cannot be provided. Understanding these messages helps administrators diagnose DHCP failures. If a client receives an offer but does not receive an appropriate acknowledgment, troubleshooting should include DHCP server configuration, network connectivity, relay behavior, firewall rules, and address-pool availability.<\/span><\/p>\n

              Question 207. Which Postfix parameter identifies the domains for which the server is an authorized final destination?<\/b><\/p>\n

                \n
              1. <\/b> mydestination<\/span><\/li>\n
              2. <\/b> relayhost<\/span><\/li>\n
              3. <\/b> mynetworks<\/span><\/li>\n
              4. <\/b> myorigin<\/span><\/li>\n<\/ol>\n

                Correct Answer: 1. mydestination<\/b><\/p>\n

                Explanation :-<\/b><\/p>\n

                The Postfix <\/span>mydestination<\/span> parameter identifies domains and hostnames for which the mail server considers itself the final destination. Messages addressed to these destinations can be delivered locally rather than relayed to another server. <\/span>relayhost<\/span> specifies an upstream relay, <\/span>mynetworks<\/span> identifies trusted networks, and <\/span>myorigin<\/span> determines the domain used for locally generated mail. Incorrect <\/span>mydestination<\/span> settings can cause local mail to be rejected, routed incorrectly, or treated as mail requiring relay. Administrators should therefore configure it consistently with the system hostname and domains hosted by the server.<\/span><\/p>\n

                Question 208. Which Dovecot setting controls which mail protocols are enabled, such as IMAP and POP3?<\/b><\/p>\n

                  \n
                1. <\/b> mail_location<\/span><\/li>\n
                2. <\/b> protocols<\/span><\/li>\n
                3. <\/b> passdb<\/span><\/li>\n
                4. <\/b> userdb<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 2. protocols<\/b><\/p>\n

                  Explanation :-<\/b><\/p>\n

                  The Dovecot <\/span>protocols<\/span> setting determines which supported mail protocols are enabled, such as IMAP and POP3. For example, a configuration can enable IMAP while disabling POP3 when only IMAP access is required. <\/span>mail_location<\/span> specifies mailbox storage, <\/span>passdb<\/span> provides authentication information, and <\/span>userdb<\/span> supplies user-related mailbox information. Protocol configuration should also be considered together with listener and TLS settings because enabling a protocol does not by itself guarantee that clients can connect successfully. Proper protocol selection reduces unnecessary service exposure.<\/span><\/p>\n

                  Question 209. Which SSH command generates a new public\/private key pair?<\/b><\/p>\n

                    \n
                  1. <\/b> ssh-add<\/span><\/li>\n
                  2. <\/b> ssh-agent<\/span><\/li>\n
                  3. <\/b> ssh-keygen<\/span><\/li>\n
                  4. <\/b> ssh-copy-id<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 3. ssh-keygen<\/b><\/p>\n

                    Explanation :-<\/b><\/p>\n

                    The <\/span>ssh-keygen<\/span> utility generates and manages SSH public\/private key pairs. It can create keys using algorithms such as Ed25519 or RSA, depending on the OpenSSH version and selected options. <\/span>ssh-agent<\/span> manages private keys in an authentication agent, <\/span>ssh-add<\/span> loads a private key into that agent, and <\/span>ssh-copy-id<\/span> installs a public key into a remote user’s authorized keys file. Public-key authentication is commonly preferred for secure administrative access because it avoids transmitting passwords during authentication and can support strong, manageable credentials.<\/span><\/p>\n

                    Question 210. Which SELinux command reports whether the system is currently enforcing or permissive?<\/b><\/p>\n

                      \n
                    1. <\/b> restorecon<\/span><\/li>\n
                    2. <\/b> semanage<\/span><\/li>\n
                    3. <\/b> audit2allow<\/span><\/li>\n
                    4. <\/b> getenforce<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 4. getenforce<\/b><\/p>\n

                      Explanation :-<\/b><\/p>\n

                      The <\/span>getenforce<\/span> command reports the current SELinux enforcement mode, normally returning <\/span>Enforcing<\/span>, <\/span>Permissive<\/span>, or <\/span>Disabled<\/span> depending on the system state. <\/span>restorecon<\/span> restores SELinux file contexts, <\/span>semanage<\/span> manages persistent policy-related settings, and <\/span>audit2allow<\/span> can generate policy rules from audit information. Checking the enforcement mode is often an early troubleshooting step when an application unexpectedly receives access denials. However, the mode alone does not explain why access is denied; administrators should also examine SELinux contexts, policy rules, and audit logs.<\/span><\/p>\n

                      Question 211. Which nftables command adds a rule to accept TCP traffic destined for port 443 in an existing input chain?<\/b><\/p>\n

                        \n
                      1. <\/b> nft allow tcp 443<\/span><\/li>\n
                      2. <\/b> nft add rule inet filter input tcp dport 443 accept<\/span><\/li>\n
                      3. <\/b> nft insert tcp 443 input<\/span><\/li>\n
                      4. <\/b> nft permit inet 443<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 2. nft add rule inet filter input tcp dport 443 accept<\/b><\/p>\n

                        Explanation :-<\/b><\/p>\n

                        The nftables command <\/span>nft add rule inet filter input tcp dport 443 accept<\/span> adds an accept rule to the <\/span>input<\/span> chain of the <\/span>filter<\/span> table in the <\/span>inet<\/span> family. It matches TCP packets whose destination port is 443 and accepts them. The relevant table and chain must already exist unless the command is part of a larger configuration sequence that creates them first. Understanding nftables syntax requires identifying the family, table, chain, protocol, matching criteria, and verdict. This structure provides flexible control over firewall behavior.<\/span><\/p>\n

                        Question 212. Which DNS query type asks a resolver for the IPv4 address associated with a hostname?<\/b><\/p>\n

                          \n
                        1. <\/b> PTR<\/span><\/li>\n
                        2. <\/b> AAAA<\/span><\/li>\n
                        3. <\/b> MX<\/span><\/li>\n
                        4. <\/b> A<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 1. A<\/b><\/p>\n

                          Explanation :-<\/b><\/p>\n

                          An A query requests the IPv4 address associated with a DNS hostname. For example, querying an A record for <\/span>www.example.com<\/span> may return an IPv4 address such as <\/span>192.0.2.10<\/span>. AAAA records provide IPv6 addresses, PTR records perform reverse mapping from addresses to hostnames, and MX records identify mail servers. When troubleshooting DNS, administrators can explicitly specify the record type with tools such as <\/span>dig<\/span>. Comparing A and AAAA responses can also help diagnose differences in IPv4 and IPv6 connectivity.<\/span><\/p>\n

                          Question 213. Which Apache module is commonly used to rewrite requested URLs according to configurable rules?<\/b><\/p>\n

                            \n
                          1. <\/b> mod_status<\/span><\/li>\n
                          2. <\/b> mod_proxy<\/span><\/li>\n
                          3. <\/b> mod_rewrite<\/span><\/li>\n
                          4. <\/b> mod_autoindex<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 4. mod_rewrite<\/b><\/p>\n

                            Explanation :-<\/b><\/p>\n

                            Apache’s <\/span>mod_rewrite<\/span> module provides rule-based URL rewriting and redirection. It can modify requested URLs, implement redirects, route requests to different resources, and support various application URL structures. <\/span>mod_proxy<\/span> provides proxy functionality, <\/span>mod_status<\/span> exposes server-status information, and <\/span>mod_autoindex<\/span> can generate directory listings. Because rewrite rules can affect many requests, administrators should test them carefully and inspect Apache logs when unexpected redirects or 404 errors occur. Understanding rewrite conditions and substitutions is particularly important for modern websites using clean or application-generated URLs.<\/span><\/p>\n

                            Question 214. Which NFS service is responsible for registering RPC-based services and helping clients determine their ports on systems using traditional NFS configurations?<\/b><\/p>\n

                              \n
                            1. <\/b> rpcbind<\/span><\/li>\n
                            2. <\/b> sshd<\/span><\/li>\n
                            3. <\/b> named<\/span><\/li>\n
                            4. <\/b> smbd<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 3. rpcbind<\/b><\/p>\n

                              Explanation :-<\/b><\/p>\n

                              The <\/span>rpcbind<\/span> service maps RPC program numbers to network addresses and ports. Traditional NFS configurations rely on RPC-based services, and clients can query rpcbind to determine where required services are listening. NFSv4 simplifies this architecture by using TCP port 2049 for its primary protocol, although other services may still exist depending on the environment. <\/span>sshd<\/span> provides SSH access, <\/span>named<\/span> provides DNS, and <\/span>smbd<\/span> provides Samba file-sharing services. Understanding rpcbind is particularly important when troubleshooting older NFS deployments and firewall rules involving dynamic RPC services.<\/span><\/p>\n

                              Question 215. Which Postfix utility can remove or otherwise perform administrative operations on messages in the mail queue?<\/b><\/p>\n

                                \n
                              1. <\/b> postconf<\/span><\/li>\n
                              2. <\/b> postmap<\/span><\/li>\n
                              3. <\/b> postqueue<\/span><\/li>\n
                              4. <\/b> postsuper<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 1. postsuper<\/b><\/p>\n

                                Explanation :-<\/b><\/p>\n

                                The <\/span>postsuper<\/span> utility performs administrative operations on the Postfix mail queue, including operations such as deleting queued messages under appropriate administrative control. <\/span>postqueue<\/span> is commonly used to inspect or trigger queue processing, <\/span>postconf<\/span> manages configuration parameters, and <\/span>postmap<\/span> creates lookup databases. Queue administration should be performed carefully because deleting messages can permanently remove mail that has not yet been delivered. Administrators should normally inspect queue identifiers and delivery status before taking corrective action.<\/span><\/p>\n

                                Question 216. Which Dovecot database provides information about a user’s mailbox location and other user-specific settings?<\/b><\/p>\n

                                  \n
                                1. <\/b> passdb<\/span><\/li>\n
                                2. <\/b> userdb<\/span><\/li>\n
                                3. <\/b> auth_mechanisms<\/span><\/li>\n
                                4. <\/b> protocols<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 2. userdb<\/b><\/p>\n

                                  Explanation :-<\/b><\/p>\n

                                  Dovecot’s <\/span>userdb<\/span> provides user-specific information needed after authentication, such as mailbox location, UID, GID, home directory, or other account-related values depending on the configuration. <\/span>passdb<\/span> is responsible for authentication credentials, while <\/span>auth_mechanisms<\/span> defines supported authentication methods and <\/span>protocols<\/span> controls enabled mail protocols. Keeping authentication and user information conceptually separate allows Dovecot to use different backend systems for passwords and mailbox data. Incorrect userdb configuration can result in successful authentication followed by mailbox-access or permission problems.<\/span><\/p>\n

                                  Question 217. Which SSH configuration option controls whether public-key authentication is enabled?<\/b><\/p>\n

                                    \n
                                  1. <\/b> PubkeyAuthentication<\/span><\/li>\n
                                  2. <\/b> PermitRootLogin<\/span><\/li>\n
                                  3. <\/b> AllowGroups<\/span><\/li>\n
                                  4. <\/b> X11Forwarding<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 4. PubkeyAuthentication<\/b><\/p>\n

                                    Explanation :-<\/b><\/p>\n

                                    The OpenSSH <\/span>PubkeyAuthentication<\/span> option controls whether public-key authentication is permitted. When enabled, SSH can authenticate users using authorized public keys rather than relying solely on passwords. <\/span>PermitRootLogin<\/span> controls direct root access, <\/span>AllowGroups<\/span> restricts which groups may log in, and <\/span>X11Forwarding<\/span> controls X11 forwarding. Public-key authentication typically involves a private key retained securely by the client and a corresponding public key stored in the user’s authorized keys configuration on the server. Proper file permissions and ownership are important for successful key-based authentication.<\/span><\/p>\n

                                    Question 218. Which command searches the Linux audit log for events associated with a particular SELinux denial?<\/b><\/p>\n

                                      \n
                                    1. <\/b> restorecon<\/span><\/li>\n
                                    2. <\/b> ausearch<\/span><\/li>\n
                                    3. <\/b> semanage<\/span><\/li>\n
                                    4. <\/b> getsebool<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 3. ausearch<\/b><\/p>\n

                                      Explanation :-<\/b><\/p>\n

                                      The <\/span>ausearch<\/span> utility searches Linux audit logs for events that match specified criteria. It is frequently used when investigating SELinux denials because SELinux access-control decisions can generate audit records. Administrators can use appropriate search filters to identify recent denial events and then inspect the associated information to determine which process, file, class, or permission was involved. <\/span>restorecon<\/span> manages file contexts, <\/span>semanage<\/span> manages persistent SELinux configuration, and <\/span>getsebool<\/span> displays Boolean settings. Audit information should be interpreted carefully before changing policy.<\/span><\/p>\n

                                      Question 219. Which DNS tool can perform a reverse lookup when given an IP address?<\/b><\/p>\n

                                        \n
                                      1. <\/b> named-checkconf<\/span><\/li>\n
                                      2. <\/b> rndc<\/span><\/li>\n
                                      3. <\/b> host<\/span><\/li>\n
                                      4. <\/b> exportfs<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 2. host<\/b><\/p>\n

                                        Explanation :-<\/b><\/p>\n

                                        The <\/span>host<\/span> utility can perform both forward and reverse DNS lookups. When given an IP address, it can query the corresponding reverse DNS information, normally using a PTR record. This is useful for checking whether an address has an associated hostname. <\/span>named-checkconf<\/span> validates BIND configuration syntax, <\/span>rndc<\/span> controls a running BIND server, and <\/span>exportfs<\/span> manages NFS exports. Reverse DNS results depend on the appropriate reverse zone and PTR record being configured and delegated correctly, so a missing result does not necessarily indicate a problem with forward DNS.<\/span><\/p>\n

                                        Question 220. Which command displays the current IPv4 and IPv6 neighbor cache maintained by the Linux kernel?<\/b><\/p>\n

                                          \n
                                        1. <\/b> ip neigh<\/span><\/li>\n
                                        2. <\/b> ip route<\/span><\/li>\n
                                        3. <\/b> ip addr<\/span><\/li>\n
                                        4. <\/b> ss -n<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 1. ip neigh<\/b><\/p>\n

                                          Explanation :-<\/b><\/p>\n

                                          The <\/span>ip neigh<\/span> command displays the Linux kernel’s neighbor table, which contains information about neighboring devices and their link-layer address mappings. For IPv4, this commonly corresponds to ARP information, while IPv6 uses Neighbor Discovery. The table can help administrators diagnose local-network connectivity problems, stale address mappings, or incomplete neighbor resolution. <\/span>ip addr<\/span> displays interface addresses, <\/span>ip route<\/span> displays routing information, and <\/span>ss<\/span> displays socket information. Examining the neighbor table is particularly useful when a host has an IP configuration but cannot communicate correctly with devices on its local network.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full LPI 202-450\u00a0 Exam Dumps and Practice Test Dumps   Question 201. Which BIND record controls the authoritative information and timing parameters for a DNS zone? NS MX SOA CNAME Correct Answer: 3. SOA Explanation :- The SOA, or Start of Authority, record contains administrative information for a DNS zone. It identifies the primary […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23060"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=23060"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23060\/revisions"}],"predecessor-version":[{"id":23061,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23060\/revisions\/23061"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=23060"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=23060"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=23060"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}