{"id":23062,"date":"2026-09-26T11:28:13","date_gmt":"2026-09-26T11:28:13","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=23062"},"modified":"2026-09-26T11:28:13","modified_gmt":"2026-09-26T11:28:13","slug":"lpi-202-450-practice-test-questions-and-exam-dumps-part-12-q221-240","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/lpi-202-450-practice-test-questions-and-exam-dumps-part-12-q221-240\/","title":{"rendered":"LPI 202-450 Practice Test Questions and Exam Dumps Part 12 Q221-240"},"content":{"rendered":"

View Full <\/b>LPI 202-450\u00a0 Exam Dumps<\/b><\/a> and Practice Test Dumps<\/b><\/h1>\n

 <\/p>\n

Question 221. Which BIND directive specifies the default time-to-live value for negative DNS responses?<\/b><\/p>\n

    \n
  1. <\/b> refresh<\/span><\/li>\n
  2. <\/b> expire<\/span><\/li>\n
  3. <\/b> minimum<\/span><\/li>\n
  4. <\/b> retry<\/span><\/li>\n<\/ol>\n

    Correct Answer: 4. minimum<\/b><\/p>\n

    Explanation :-<\/b><\/p>\n

    The <\/span>minimum<\/span> field in the SOA record historically defines the negative caching TTL, meaning how long resolvers may cache negative responses such as NXDOMAIN. Modern DNS implementations follow the RFC 2308 interpretation of this field for negative caching. The other SOA fields have different purposes: refresh controls secondary-server refresh timing, retry determines how soon a secondary retries a failed refresh, and expire determines how long a secondary may continue serving a zone without successful refreshes. Understanding SOA fields is important when diagnosing DNS caching and propagation behavior.<\/span><\/p>\n

    Question 222. In Apache HTTP Server, which directive can be used to define the default file served when a client requests a directory?<\/b><\/p>\n

      \n
    1. <\/b> DirectoryIndex<\/span><\/li>\n
    2. <\/b> DirectoryRoot<\/span><\/li>\n
    3. <\/b> DefaultFile<\/span><\/li>\n
    4. <\/b> IndexFile<\/span><\/li>\n<\/ol>\n

      Correct Answer: 1. DirectoryIndex<\/b><\/p>\n

      Explanation :-<\/b><\/p>\n

      The Apache <\/span>DirectoryIndex<\/span> directive specifies the resources Apache should look for when a client requests a directory without naming a specific file. For example, <\/span>DirectoryIndex index.html index.php<\/span> causes Apache to check those files in the specified order. This directive is commonly configured in the main Apache configuration, virtual host configuration, or permitted <\/span>.htaccess<\/span> files. <\/span>DirectoryRoot<\/span>, <\/span>DefaultFile<\/span>, and <\/span>IndexFile<\/span> are not standard Apache directives for this purpose. If none of the configured index files exists, Apache may generate a directory listing when indexing is enabled, or return an error when it is disabled.<\/span><\/p>\n

      Question 223. Which command displays the NFS exports currently available from a specified server?<\/b><\/p>\n

        \n
      1. <\/b> showmount -e<\/span><\/li>\n
      2. <\/b> exportfs -s<\/span><\/li>\n
      3. <\/b> nfsstat -e<\/span><\/li>\n
      4. <\/b> mount.nfs -l<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1. showmount -e<\/b><\/p>\n

        Explanation :-<\/b><\/p>\n

        The <\/span>showmount -e<\/span> command queries an NFS server and displays its exported file systems. For example, <\/span>showmount -e nfs.example.com<\/span> can show which directories the server advertises as available for mounting. This is useful when troubleshooting NFS access or verifying that an export is being published. <\/span>exportfs<\/span> is primarily used on the NFS server to manage its exports, while <\/span>nfsstat<\/span> reports NFS statistics. <\/span>mount.nfs<\/span> is used to mount an NFS file system rather than list server exports.<\/span><\/p>\n

        Question 224. Which Samba parameter controls whether a share is visible in network browse lists?<\/b><\/p>\n

          \n
        1. <\/b> visible_share<\/span><\/li>\n
        2. <\/b> browseable<\/span><\/li>\n
        3. <\/b> discoverable<\/span><\/li>\n
        4. <\/b> show_share<\/span><\/li>\n<\/ol>\n

          Correct Answer: 2. browseable<\/b><\/p>\n

          Explanation :-<\/b><\/p>\n

          The Samba <\/span>browseable<\/span> parameter determines whether a share is displayed in network browse lists. Setting <\/span>browseable = yes<\/span> makes the share visible through browsing mechanisms, while <\/span>browseable = no<\/span> hides it from the browse list without necessarily preventing clients that know the share name from accessing it. This is different from access-control parameters such as <\/span>valid users<\/span>, which determine who may connect. Administrators commonly use <\/span>testparm<\/span> after modifying <\/span>\/etc\/samba\/smb.conf<\/span> to validate the configuration before restarting or reloading Samba services.<\/span><\/p>\n

          Question 225. Which DNS record identifies the mail server responsible for accepting email for a domain?<\/b><\/p>\n

            \n
          1. <\/b> TXT<\/span><\/li>\n
          2. <\/b> NS<\/span><\/li>\n
          3. <\/b> PTR<\/span><\/li>\n
          4. <\/b> MX<\/span><\/li>\n<\/ol>\n

            Correct Answer: 4. MX<\/b><\/p>\n

            Explanation :-<\/b><\/p>\n

            An MX, or Mail Exchange, record identifies the mail servers responsible for receiving email for a DNS domain. The record contains a preference value and a hostname. For example, an MX record may direct mail for <\/span>example.com<\/span> to <\/span>mail.example.com<\/span>. Lower preference values have higher priority when multiple MX records exist. An NS record identifies authoritative name servers, a PTR record provides reverse DNS mapping, and a TXT record stores arbitrary text information such as SPF-related data. DNS administrators can inspect MX records using tools such as <\/span>dig<\/span> or <\/span>host<\/span>.<\/span><\/p>\n

            Question 226. Which DHCP option specifies the default gateway that a client should use?<\/b><\/p>\n

              \n
            1. <\/b> Option 6<\/span><\/li>\n
            2. <\/b> Option 15<\/span><\/li>\n
            3. <\/b> Option 3<\/span><\/li>\n
            4. <\/b> Option 12<\/span><\/li>\n<\/ol>\n

              Correct Answer: 3. Option 3<\/b><\/p>\n

              Explanation :-<\/b><\/p>\n

              DHCP option 3 specifies the router or default gateway information that a DHCP server supplies to clients. When a client receives this option, it can install the specified gateway as its default route. Option 6 identifies DNS servers, option 15 specifies the DNS domain name, and option 12 supplies the client hostname. Correct DHCP options are essential for proper network connectivity because a client may have an IP address while still being unable to reach remote networks if it lacks a valid default gateway.<\/span><\/p>\n

              Question 227. Which Postfix command displays the contents of the mail queue in a traditional queue-list format?<\/b><\/p>\n

                \n
              1. <\/b> postqueue -p<\/span><\/li>\n
              2. <\/b> postfix -q<\/span><\/li>\n
              3. <\/b> postconf -q<\/span><\/li>\n
              4. <\/b> mailq –flush<\/span><\/li>\n<\/ol>\n

                Correct Answer: 1. postqueue -p<\/b><\/p>\n

                Explanation :-<\/b><\/p>\n

                The <\/span>postqueue -p<\/span> command displays the Postfix mail queue. It provides information about queued messages, including queue IDs, sender and recipient information, message size, and the reason a message may remain undelivered. Administrators use this command when troubleshooting delayed or stuck email delivery. <\/span>postfix<\/span> manages the Postfix service, while <\/span>postconf<\/span> is primarily used to inspect or modify configuration parameters. The <\/span>postqueue -f<\/span> option is used to request immediate queue processing, making the distinction between viewing and flushing the queue important during mail-service troubleshooting.<\/span><\/p>\n

                Question 228. Which Dovecot command can be used to display the effective configuration after configuration files have been processed?<\/b><\/p>\n

                  \n
                1. <\/b> doveconf<\/span><\/li>\n
                2. <\/b> dovecot-config<\/span><\/li>\n
                3. <\/b> doveadm-config<\/span><\/li>\n
                4. <\/b> dovecot –show<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 1. doveconf<\/b><\/p>\n

                  Explanation :-<\/b><\/p>\n

                  The <\/span>doveconf<\/span> utility displays Dovecot’s effective configuration. It is particularly useful when troubleshooting because Dovecot may combine settings from multiple configuration files and included fragments. Running <\/span>doveconf<\/span> allows an administrator to see the resulting configuration rather than inspecting individual files separately. This helps identify incorrect settings, overrides, or unexpected defaults. <\/span>doveadm<\/span> is primarily an administrative command interface for Dovecot services and mailboxes. Reviewing the effective configuration is especially useful when diagnosing authentication, mailbox, listener, or protocol-related problems.<\/span><\/p>\n

                  Question 229. Which SSH configuration directive controls whether password authentication is permitted?<\/b><\/p>\n

                    \n
                  1. <\/b> UsePAM<\/span><\/li>\n
                  2. <\/b> PasswordAuthentication<\/span><\/li>\n
                  3. <\/b> AllowPasswords<\/span><\/li>\n
                  4. <\/b> LoginPassword<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 2. PasswordAuthentication<\/b><\/p>\n

                    Explanation :-<\/b><\/p>\n

                    The OpenSSH <\/span>PasswordAuthentication<\/span> directive controls whether password-based authentication is permitted by the SSH server. In <\/span>sshd_config<\/span>, setting <\/span>PasswordAuthentication no<\/span> disables this authentication method, while <\/span>yes<\/span> permits it, subject to other authentication controls. This setting is commonly adjusted when administrators want to require public-key authentication instead of passwords. <\/span>UsePAM<\/span> controls whether PAM is used by the SSH server, but it is not itself the directive that directly enables or disables password authentication. After changing the SSH server configuration, administrators should validate the configuration and reload or restart the service appropriately.<\/span><\/p>\n

                    Question 230. Which command displays the current SELinux enforcement mode?<\/b><\/p>\n

                      \n
                    1. <\/b> selinux-status<\/span><\/li>\n
                    2. <\/b> getenforce<\/span><\/li>\n
                    3. <\/b> sestatus-mode<\/span><\/li>\n
                    4. <\/b> enforce-status<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 2. getenforce<\/b><\/p>\n

                      Explanation :-<\/b><\/p>\n

                      The <\/span>getenforce<\/span> command displays the current SELinux mode, typically as <\/span>Enforcing<\/span>, <\/span>Permissive<\/span>, or <\/span>Disabled<\/span>. Enforcing mode actively applies SELinux policy, while permissive mode logs policy violations without blocking the associated operations. The <\/span>setenforce<\/span> command changes between enforcing and permissive modes temporarily. <\/span>sestatus<\/span> provides more comprehensive SELinux status information, including policy details and configuration. Knowing the difference between these commands is useful when troubleshooting access-denied events because SELinux restrictions can prevent an operation even when traditional Unix permissions appear to allow it.<\/span><\/p>\n

                      Question 231. Which nftables command lists the rules in the <\/b>filter<\/b> table of the <\/b>inet<\/b> family?<\/b><\/p>\n

                        \n
                      1. <\/b> nft show filter inet<\/span><\/li>\n
                      2. <\/b> nft list inet filter<\/span><\/li>\n
                      3. <\/b> nft display table filter<\/span><\/li>\n
                      4. <\/b> nft rules inet filter<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 2. nft list inet filter<\/b><\/p>\n

                        Explanation :-<\/b><\/p>\n

                        The nftables command <\/span>nft list table inet filter<\/span> displays the complete contents of the <\/span>filter<\/span> table in the <\/span>inet<\/span> address family. The <\/span>inet<\/span> family can contain rules that apply to both IPv4 and IPv6 traffic. Administrators use table and chain listing commands to inspect the active firewall configuration and troubleshoot unexpected packet handling. The general syntax follows the nftables hierarchy of family, table, chain, and rule. Commands such as <\/span>nft list ruleset<\/span> can instead display the entire active nftables configuration across all families and tables.<\/span><\/p>\n

                        Question 232. Which DNS record maps a hostname to an IPv6 address?<\/b><\/p>\n

                          \n
                        1. <\/b> A<\/span><\/li>\n
                        2. <\/b> PTR<\/span><\/li>\n
                        3. <\/b> AAAA<\/span><\/li>\n
                        4. <\/b> CNAME<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 3. AAAA<\/b><\/p>\n

                          Explanation :-<\/b><\/p>\n

                          An AAAA record maps a hostname to an IPv6 address. It serves a role similar to an A record, which maps a hostname to an IPv4 address. For example, an AAAA record may associate <\/span>www.example.com<\/span> with an IPv6 address such as <\/span>2001:db8::10<\/span>. A PTR record is used for reverse DNS mapping, while a CNAME creates an alias pointing to another canonical hostname. Administrators can inspect AAAA records using <\/span>dig<\/span>, for example with <\/span>dig AAAA www.example.com<\/span>. Correct IPv6 DNS configuration is an important part of modern network-client management.<\/span><\/p>\n

                          Question 233. Which Apache directive is commonly used to enable URL rewriting through the mod_rewrite module?<\/b><\/p>\n

                            \n
                          1. <\/b> RewriteRule<\/span><\/li>\n
                          2. <\/b> URLRewrite<\/span><\/li>\n
                          3. <\/b> RedirectRule<\/span><\/li>\n
                          4. <\/b> RouteRule<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1. RewriteRule<\/b><\/p>\n

                            Explanation :-<\/b><\/p>\n

                            The Apache <\/span>RewriteRule<\/span> directive defines pattern-based URL rewriting when the <\/span>mod_rewrite<\/span> module is enabled. It can rewrite requested URLs internally or redirect clients to different URLs depending on the rule configuration and flags. Rewrite rules are widely used for clean URLs, redirects, application routing, and compatibility with legacy paths. The <\/span>RewriteCond<\/span> directive can provide conditions that determine when a rule should be applied. <\/span>Redirect<\/span> is another Apache mechanism for redirects, but it does not provide the same pattern-based processing capabilities as <\/span>mod_rewrite<\/span>.<\/span><\/p>\n

                            Question 234. Which NFS option causes a client operation to wait and retry when the server becomes temporarily unavailable?<\/b><\/p>\n

                              \n
                            1. <\/b> soft<\/span><\/li>\n
                            2. <\/b> async<\/span><\/li>\n
                            3. <\/b> bg<\/span><\/li>\n
                            4. <\/b> hard<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 4. hard<\/b><\/p>\n

                              Explanation :-<\/b><\/p>\n

                              The NFS <\/span>hard<\/span> mount option causes NFS client requests to continue retrying when the server becomes unavailable. This behavior is important for data integrity because applications generally continue waiting rather than immediately receiving an I\/O error. By contrast, a <\/span>soft<\/span> mount can return errors after retry limits are reached, which may create application-level problems depending on the workload. The <\/span>bg<\/span> option controls how mounting behaves after an initial failure, while <\/span>async<\/span> concerns write synchronization behavior. Administrators should understand these options carefully because NFS mount behavior directly affects application availability and data handling.<\/span><\/p>\n

                              Question 235. Which Postfix parameter specifies the domains for which this mail server should consider itself the final destination?<\/b><\/p>\n

                                \n
                              1. <\/b> mydestination<\/span><\/li>\n
                              2. <\/b> relay_domains<\/span><\/li>\n
                              3. <\/b> mynetworks<\/span><\/li>\n
                              4. <\/b> myorigin<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 1. mydestination<\/b><\/p>\n

                                Explanation :-<\/b><\/p>\n

                                The Postfix <\/span>mydestination<\/span> parameter defines the domains and hostnames for which the server considers itself the final destination. Mail addressed to these destinations can be delivered locally rather than relayed elsewhere. This parameter is therefore important when configuring Postfix as a destination mail server. <\/span>mynetworks<\/span> defines trusted client networks, <\/span>relay_domains<\/span> controls domains for which the server provides relay service, and <\/span>myorigin<\/span> determines the domain used for locally posted mail. Incorrect <\/span>mydestination<\/span> configuration can cause mail-delivery failures or unintended relay behavior.<\/span><\/p>\n

                                Question 236. Which PAM module is commonly used to enforce password quality requirements?<\/b><\/p>\n

                                  \n
                                1. <\/b> pam_access<\/span><\/li>\n
                                2. <\/b> pam_limits<\/span><\/li>\n
                                3. <\/b> pam_pwquality<\/span><\/li>\n
                                4. <\/b> pam_env<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 3. pam_pwquality<\/b><\/p>\n

                                  Explanation :-<\/b><\/p>\n

                                  The <\/span>pam_pwquality<\/span> module is commonly used to enforce password-quality requirements through PAM. It can enforce characteristics such as minimum password length and restrictions on password composition, depending on the configured policy. It is typically integrated into PAM configuration for password-changing operations. <\/span>pam_access<\/span> controls access based on configured rules, <\/span>pam_limits<\/span> manages resource limits, and <\/span>pam_env<\/span> manages environment variables. Because PAM configuration is distribution-dependent and can affect authentication broadly, administrators should carefully validate changes to avoid accidentally preventing legitimate users from authenticating or changing passwords.<\/span><\/p>\n

                                  Question 237. Which SSH option specifies the private key file to use for public-key authentication?<\/b><\/p>\n

                                    \n
                                  1. <\/b> -k<\/span><\/li>\n
                                  2. <\/b> -i<\/span><\/li>\n
                                  3. <\/b> -p<\/span><\/li>\n
                                  4. <\/b> -f<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 2. <\/b>-i<\/b><\/p>\n

                                    Explanation :-<\/b><\/p>\n

                                    The SSH client <\/span>-i<\/span> option specifies the identity, or private-key, file to use when attempting public-key authentication. For example, <\/span>ssh -i ~\/.ssh\/id_ed25519 user@server<\/span> tells the SSH client to use the specified private key. The <\/span>-p<\/span> option specifies a non-default SSH port, while <\/span>-f<\/span> requests that SSH go into the background after authentication and <\/span>-k<\/span> is associated with GSSAPI credential delegation behavior. Correct key selection is especially useful when a client has multiple identities and the administrator needs to select a particular key for a specific remote server.<\/span><\/p>\n

                                    Question 238. Which command can be used to search the systemd journal for messages from a particular service?<\/b><\/p>\n

                                      \n
                                    1. <\/b> systemctl log<\/span><\/li>\n
                                    2. <\/b> journalctl -u<\/span><\/li>\n
                                    3. <\/b> systemd-msg<\/span><\/li>\n
                                    4. <\/b> journal -s<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 2. journalctl -u<\/b><\/p>\n

                                      Explanation :-<\/b><\/p>\n

                                      The <\/span>journalctl -u<\/span> option filters systemd journal entries by a specific systemd unit, such as a service. For example, <\/span>journalctl -u sshd<\/span> can display journal messages associated with the SSH daemon service. This is useful when diagnosing service startup failures, authentication problems, or runtime errors. <\/span>systemctl<\/span> manages services but does not use <\/span>systemctl log<\/span> as a standard command for viewing journal entries. Administrators can combine <\/span>journalctl -u<\/span> with options such as <\/span>-b<\/span> to restrict results to the current boot, making troubleshooting more focused.<\/span><\/p>\n

                                      Question 239. Which DNS utility is commonly used to perform detailed DNS queries and inspect specific record types?<\/b><\/p>\n

                                        \n
                                      1. <\/b> dig<\/span><\/li>\n
                                      2. <\/b> nslookupd<\/span><\/li>\n
                                      3. <\/b> dnsquery<\/span><\/li>\n
                                      4. <\/b> named-query<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 1. dig<\/b><\/p>\n

                                        Explanation :-<\/b><\/p>\n

                                        The <\/span>dig<\/span> utility is widely used for detailed DNS queries and troubleshooting. It allows administrators to specify record types, query particular DNS servers, inspect authoritative responses, and examine response sections. For example, <\/span>dig MX example.com<\/span> requests MX records, while <\/span>dig @192.0.2.53 example.com<\/span> sends the query to a specified DNS server. The <\/span>host<\/span> command is also useful for simpler lookups, but <\/span>dig<\/span> provides substantially more diagnostic detail. DNS administrators frequently use it to investigate delegation, recursion, caching, authoritative responses, and zone configuration problems.<\/span><\/p>\n

                                        Question 240. Which command displays established TCP and UDP socket information on a modern Linux system?<\/b><\/p>\n

                                          \n
                                        1. <\/b> route<\/span><\/li>\n
                                        2. <\/b> ss<\/span><\/li>\n
                                        3. <\/b> ip sockets<\/span><\/li>\n
                                        4. <\/b> netconf<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 2. ss<\/b><\/p>\n

                                          Explanation :-<\/b><\/p>\n

                                          The <\/span>ss<\/span> command displays socket statistics and network connection information on Linux systems. It can show listening and established TCP connections, UDP sockets, Unix sockets, ports, process associations, and other network details. For example, <\/span>ss -lnt<\/span> displays listening TCP sockets using numeric addresses and ports. The command is commonly used for troubleshooting services that are unreachable or listening on unexpected ports. Although older systems frequently used <\/span>netstat<\/span> for similar tasks, <\/span>ss<\/span> is the modern utility commonly associated with socket inspection and is part of the standard Linux networking toolkit.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full LPI 202-450\u00a0 Exam Dumps and Practice Test Dumps   Question 221. Which BIND directive specifies the default time-to-live value for negative DNS responses? refresh expire minimum retry Correct Answer: 4. minimum Explanation :- The minimum field in the SOA record historically defines the negative caching TTL, meaning how long resolvers may cache negative […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23062"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=23062"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23062\/revisions"}],"predecessor-version":[{"id":23063,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23062\/revisions\/23063"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=23062"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=23062"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=23062"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}