{"id":23066,"date":"2026-09-26T11:28:54","date_gmt":"2026-09-26T11:28:54","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=23066"},"modified":"2026-09-26T11:28:54","modified_gmt":"2026-09-26T11:28:54","slug":"lpi-202-450-practice-test-questions-and-exam-dumps-part-14-q261-280","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/lpi-202-450-practice-test-questions-and-exam-dumps-part-14-q261-280\/","title":{"rendered":"LPI 202-450 Practice Test Questions and Exam Dumps Part 14 Q261-280"},"content":{"rendered":"

View Full <\/b>LPI 202-450\u00a0 Exam Dumps<\/b><\/a> and Practice Test Dumps<\/b><\/h1>\n

 <\/p>\n

Question 261. Which BIND utility verifies the syntax of a DNS zone file?<\/b><\/p>\n

    \n
  1. <\/b> rndc-checkzone<\/span><\/li>\n
  2. <\/b> named-checkzone<\/span><\/li>\n
  3. <\/b> named-checkconf<\/span><\/li>\n
  4. <\/b> dnscheck<\/span><\/li>\n<\/ol>\n

    Correct Answer: 2. <\/b>named-checkzone<\/b><\/p>\n

    Explanation :-<\/b><\/p>\n

    The <\/span>named-checkzone<\/span> utility validates the syntax and integrity of a BIND zone file. It normally requires the zone name and the path to the zone file, for example, <\/span>named-checkzone example.com \/var\/named\/example.com.zone<\/span>. This helps administrators detect syntax errors before reloading the DNS service. <\/span>named-checkconf<\/span> instead validates the BIND configuration file, while <\/span>rndc<\/span> is used to control a running BIND server. Checking zone files before deployment is an important DNS administration practice because malformed records can prevent a zone from loading correctly.<\/span><\/p>\n

    Question 262. Which Apache directive defines the hostname that the server uses to identify itself?<\/b><\/p>\n

      \n
    1. <\/b> ServerAlias<\/span><\/li>\n
    2. <\/b> HostName<\/span><\/li>\n
    3. <\/b> ListenName<\/span><\/li>\n
    4. <\/b> ServerName<\/span><\/li>\n<\/ol>\n

      Correct Answer: 4. <\/b>ServerName<\/b><\/p>\n

      Explanation :-<\/b><\/p>\n

      The Apache <\/span>ServerName<\/span> directive specifies the hostname and optionally the port that the server uses to identify itself. It is commonly configured inside a virtual host definition and is important when Apache serves multiple sites. <\/span>ServerAlias<\/span> defines additional hostnames that should match the same virtual host. <\/span>Listen<\/span> controls the network address and port on which Apache accepts connections, rather than defining the server’s hostname. Correct <\/span>ServerName<\/span> configuration can also help avoid startup warnings and ensures that virtual-host matching behaves as intended.<\/span><\/p>\n

      Question 263. Which NFS mount option prevents clients from modifying files on the exported file system?<\/b><\/p>\n

        \n
      1. <\/b> ro<\/span><\/li>\n
      2. <\/b> sync<\/span><\/li>\n
      3. <\/b> noexec<\/span><\/li>\n
      4. <\/b> hard<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1. <\/b>ro<\/b><\/p>\n

        Explanation :-<\/b><\/p>\n

        The NFS <\/span>ro<\/span> mount option mounts an exported file system as read-only from the client. This prevents normal write operations through that mount point. It can be useful when clients need access to shared reference data without being allowed to modify it. The <\/span>sync<\/span> option controls synchronization behavior, <\/span>noexec<\/span> prevents execution of binaries from the mounted file system, and <\/span>hard<\/span> controls how NFS requests behave when the server becomes unavailable. Read-only access can also be enforced on the server through the corresponding export configuration.<\/span><\/p>\n

        Question 264. Which Samba parameter restricts access to a share to specified users or groups?<\/b><\/p>\n

          \n
        1. <\/b> share users<\/span><\/li>\n
        2. <\/b> allowed users<\/span><\/li>\n
        3. <\/b> valid users<\/span><\/li>\n
        4. <\/b> authorized users<\/span><\/li>\n<\/ol>\n

          Correct Answer: 3. <\/b>valid users<\/b><\/p>\n

          Explanation :-<\/b><\/p>\n

          The Samba <\/span>valid users<\/span> parameter specifies which users or groups are permitted to access a particular share. For example, <\/span>valid users = @sales<\/span> can restrict access to members of the <\/span>sales<\/span> group. This is different from <\/span>browseable<\/span>, which controls whether the share appears in browse lists, and <\/span>read only<\/span>, which controls whether permitted users can modify files. Samba access control can involve several layers, including Unix permissions, Samba configuration, and authentication. Administrators should therefore verify both Samba-level restrictions and underlying file-system permissions when troubleshooting access problems.<\/span><\/p>\n

          Question 265. Which DNS record type is used to associate a service with a hostname and port?<\/b><\/p>\n

            \n
          1. <\/b> TXT<\/span><\/li>\n
          2. <\/b> SRV<\/span><\/li>\n
          3. <\/b> MX<\/span><\/li>\n
          4. <\/b> NS<\/span><\/li>\n<\/ol>\n

            Correct Answer: 2. <\/b>SRV<\/b><\/p>\n

            Explanation :-<\/b><\/p>\n

            An SRV record specifies the location of a service by identifying a target hostname and port, along with priority and weight values. It is commonly used by protocols and applications that need service discovery, such as SIP and certain directory services. The record has a structured format containing service, protocol, priority, weight, port, and target fields. MX records are specifically used for mail delivery, NS records identify authoritative DNS servers, and TXT records contain arbitrary text information. SRV records therefore provide a standardized way for clients to discover where particular network services are available.<\/span><\/p>\n

            Question 266. Which Linux command requests a DHCP lease from a DHCP server using the common ISC DHCP client?<\/b><\/p>\n

              \n
            1. <\/b> dhcp-request<\/span><\/li>\n
            2. <\/b> dhclient<\/span><\/li>\n
            3. <\/b> ip dhcp<\/span><\/li>\n
            4. <\/b> dhcpctl<\/span><\/li>\n<\/ol>\n

              Correct Answer: 2. <\/b>dhclient<\/b><\/p>\n

              Explanation :-<\/b><\/p>\n

              The <\/span>dhclient<\/span> utility is the traditional ISC DHCP client used on many Linux systems to obtain network configuration from a DHCP server. It can request an address and other options such as DNS servers, gateways, and domain information. Administrators may use <\/span>dhclient<\/span> during network troubleshooting to renew or obtain a lease on an interface. Modern Linux distributions may use NetworkManager or systemd-networkd instead, so the exact client utility depends on the system. Nevertheless, understanding DHCP client behavior and <\/span>dhclient<\/span> remains relevant to Linux network administration and troubleshooting.<\/span><\/p>\n

              Question 267. Which Postfix parameter specifies networks that are trusted to relay mail through the server?<\/b><\/p>\n

                \n
              1. <\/b> relay_networks<\/span><\/li>\n
              2. <\/b> trusted_hosts<\/span><\/li>\n
              3. <\/b> mynetworks<\/span><\/li>\n
              4. <\/b> allowed_relays<\/span><\/li>\n<\/ol>\n

                Correct Answer: 3. <\/b>mynetworks<\/b><\/p>\n

                Explanation :-<\/b><\/p>\n

                The Postfix <\/span>mynetworks<\/span> parameter defines the IP addresses or networks that Postfix considers trusted for relay access under its configured restrictions. It is commonly used to permit mail submission from local or organizational networks. Administrators must configure this carefully because overly broad trusted networks can permit unauthorized relay activity. <\/span>relay_domains<\/span> serves a different purpose by defining destinations for which the server provides relay service. <\/span>mydestination<\/span> identifies domains delivered locally. Understanding these parameters is essential when configuring Postfix to distinguish local delivery, trusted submission, and relay behavior.<\/span><\/p>\n

                Question 268. Which Dovecot authentication database setting identifies the database used to verify a user’s password?<\/b><\/p>\n

                  \n
                1. <\/b> maildb<\/span><\/li>\n
                2. <\/b> userdb<\/span><\/li>\n
                3. <\/b> authdb<\/span><\/li>\n
                4. <\/b> passdb<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 4. <\/b>passdb<\/b><\/p>\n

                  Explanation :-<\/b><\/p>\n

                  Dovecot’s <\/span>passdb<\/span> configuration defines the password database used for authentication. It can use sources such as system accounts, SQL databases, LDAP, or other supported authentication mechanisms. The <\/span>userdb<\/span> configuration serves a different purpose: it provides information about the user’s mailbox location, UID, GID, and related account properties. Separating authentication credentials from user mailbox information gives Dovecot flexibility when integrating with external identity systems. When troubleshooting authentication, administrators should therefore determine whether the problem is in <\/span>passdb<\/span>, <\/span>userdb<\/span>, the authentication mechanism, or the underlying credential source.<\/span><\/p>\n

                  Question 269. Which SSH command option specifies a non-default TCP port for the remote SSH server?<\/b><\/p>\n

                    \n
                  1. <\/b> -i<\/span><\/li>\n
                  2. <\/b> -p<\/span><\/li>\n
                  3. <\/b> -P<\/span><\/li>\n
                  4. <\/b> -t<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 2. <\/b>-p<\/b><\/p>\n

                    Explanation :-<\/b><\/p>\n

                    The OpenSSH client <\/span>-p<\/span> option specifies the TCP port on which the remote SSH server is listening. For example, <\/span>ssh -p 2222 user@server.example.com<\/span> connects to TCP port 2222 instead of the default SSH port 22. The <\/span>-i<\/span> option specifies a private identity key, while <\/span>-t<\/span> requests allocation of a pseudo-terminal. Using the correct port is important when SSH has been configured to listen on a non-standard port. Administrators can combine <\/span>-p<\/span> with other options when troubleshooting connectivity or accessing servers with customized SSH configurations.<\/span><\/p>\n

                    Question 270. Which command temporarily changes SELinux from enforcing mode to permissive mode?<\/b><\/p>\n

                      \n
                    1. <\/b> getenforce 0<\/span><\/li>\n
                    2. <\/b> sestatus –permissive<\/span><\/li>\n
                    3. <\/b> setenforce 0<\/span><\/li>\n
                    4. <\/b> selinux permissive<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 3. <\/b>setenforce 0<\/b><\/p>\n

                      Explanation :-<\/b><\/p>\n

                      The <\/span>setenforce 0<\/span> command temporarily changes SELinux from enforcing mode to permissive mode. In permissive mode, SELinux policy violations are logged but are not enforced as access denials. This can be useful for controlled troubleshooting when determining whether SELinux is contributing to a problem. The change is generally temporary and does not permanently alter the system’s SELinux configuration. <\/span>getenforce<\/span> reports the current mode, while <\/span>sestatus<\/span> provides broader status information. Administrators should use permissive mode carefully and return to enforcing mode after troubleshooting when appropriate.<\/span><\/p>\n

                      Question 271. Which nftables command creates a new table named <\/b>filter<\/b> in the <\/b>inet<\/b> address family?<\/b><\/p>\n

                        \n
                      1. <\/b> nft add table inet filter<\/span><\/li>\n
                      2. <\/b> nft create filter inet<\/span><\/li>\n
                      3. <\/b> nft table add inet filter<\/span><\/li>\n
                      4. <\/b> nft new inet filter table<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 1. <\/b>nft add table inet filter<\/b><\/p>\n

                        Explanation :-<\/b><\/p>\n

                        The nftables command <\/span>nft add table inet filter<\/span> creates a table named <\/span>filter<\/span> in the <\/span>inet<\/span> address family. The <\/span>inet<\/span> family allows rules to handle both IPv4 and IPv6 traffic. Tables provide organizational containers for chains, sets, maps, and related firewall objects. After creating a table, administrators can create chains within it and then add rules. The command structure follows nftables’ object hierarchy, where <\/span>add table<\/span> identifies the operation and the family and table name specify the target. Correct table creation is the first step in building many nftables configurations.<\/span><\/p>\n

                        Question 272. Which DNS command can display the canonical name associated with an alias?<\/b><\/p>\n

                          \n
                        1. <\/b> dnsalias<\/span><\/li>\n
                        2. <\/b> named -C<\/span><\/li>\n
                        3. <\/b> host<\/span><\/li>\n
                        4. <\/b> zoneinfo<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 3. <\/b>host<\/b><\/p>\n

                          Explanation :-<\/b><\/p>\n

                          The <\/span>host<\/span> utility performs DNS lookups and can display information about aliases and their canonical names. When querying a CNAME, the output can show both the alias and the canonical hostname to which it points. <\/span>host<\/span> is useful for quick DNS checks and supports common record types without the more extensive output provided by <\/span>dig<\/span>. <\/span>named<\/span> is the BIND server process rather than a general-purpose lookup command. Administrators often use <\/span>host<\/span>, <\/span>dig<\/span>, and <\/span>nslookup<\/span> during DNS troubleshooting, selecting the tool according to the level of diagnostic detail required.<\/span><\/p>\n

                          Question 273. Which Apache directive can restrict access to resources based on client authorization rules in modern Apache 2.4?<\/b><\/p>\n

                            \n
                          1. <\/b> AllowFrom<\/span><\/li>\n
                          2. <\/b> Require<\/span><\/li>\n
                          3. <\/b> AccessControl<\/span><\/li>\n
                          4. <\/b> Permit<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 4. <\/b>Require<\/b><\/p>\n

                            Explanation :-<\/b><\/p>\n

                            Apache 2.4 uses the <\/span>Require<\/span> directive as a central mechanism for authorization. It can permit or deny access based on conditions such as users, groups, host addresses, or other authorization providers. For example, <\/span>Require all granted<\/span> allows access to a resource, while <\/span>Require valid-user<\/span> requires successful authentication. Older Apache versions used directives such as <\/span>Allow<\/span> and <\/span>Deny<\/span> more directly. When managing Apache 2.4 configurations, administrators should understand the newer authorization framework and ensure that access rules are placed in the correct directory, virtual-host, or location context.<\/span><\/p>\n

                            Question 274. Which NFS utility displays statistics about NFS client and server operations?<\/b><\/p>\n

                              \n
                            1. <\/b> nfsstat<\/span><\/li>\n
                            2. <\/b> nfsshow<\/span><\/li>\n
                            3. <\/b> nfsinfo<\/span><\/li>\n
                            4. <\/b> rpcstats<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 1. <\/b>nfsstat<\/b><\/p>\n

                              Explanation :-<\/b><\/p>\n

                              The <\/span>nfsstat<\/span> utility displays statistics related to NFS client and server operations. It can provide information about RPC calls, NFS requests, retransmissions, and other activity depending on the options and system implementation. This makes it useful for diagnosing performance and connectivity issues. For example, unusually high retransmission counts can provide clues about network or server problems. <\/span>showmount<\/span> serves a different purpose by displaying NFS exports, while <\/span>exportfs<\/span> manages exports on an NFS server. Administrators can combine <\/span>nfsstat<\/span> output with system and network monitoring tools for deeper troubleshooting.<\/span><\/p>\n

                              Question 275. Which Postfix command can immediately request processing of messages currently waiting in the mail queue?<\/b><\/p>\n

                                \n
                              1. <\/b> postqueue -f<\/span><\/li>\n
                              2. <\/b> postfix -flush<\/span><\/li>\n
                              3. <\/b> postsuper -r<\/span><\/li>\n
                              4. <\/b> postmail -f<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 1. <\/b>postqueue -f<\/b><\/p>\n

                                Explanation :-<\/b><\/p>\n

                                The <\/span>postqueue -f<\/span> command requests that Postfix attempt to deliver messages currently waiting in its mail queue. It is commonly used when a temporary delivery problem has been resolved and the administrator wants Postfix to retry queued messages immediately rather than waiting for the normal queue-processing schedule. <\/span>postqueue -p<\/span> displays the queue, while <\/span>postsuper<\/span> is primarily used for administrative operations on queued messages. Flushing the queue does not guarantee successful delivery; messages can remain queued if the destination server, DNS, network, or other delivery conditions are still unavailable.<\/span><\/p>\n

                                Question 276. Which Linux file contains static hostname-to-IP address mappings commonly consulted before DNS when configured in NSS?<\/b><\/p>\n

                                  \n
                                1. <\/b> \/etc\/resolv.conf<\/span><\/li>\n
                                2. <\/b> \/etc\/hosts<\/span><\/li>\n
                                3. <\/b> \/etc\/hostname<\/span><\/li>\n
                                4. <\/b> \/etc\/networks<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 2. <\/b>\/etc\/hosts<\/b><\/p>\n

                                  Explanation :-<\/b><\/p>\n

                                  The <\/span>\/etc\/hosts<\/span> file contains local static mappings between IP addresses and hostnames. When the NSS configuration specifies <\/span>files<\/span> before <\/span>dns<\/span> for hostname resolution, entries in <\/span>\/etc\/hosts<\/span> are consulted before DNS. This can be useful for local systems, testing, temporary name resolution, or environments where DNS is not available. <\/span>\/etc\/resolv.conf<\/span> specifies resolver configuration such as DNS servers, while <\/span>\/etc\/hostname<\/span> normally identifies the local system hostname. The <\/span>\/etc\/networks<\/span> file has a different purpose and is not the primary source for ordinary hostname resolution.<\/span><\/p>\n

                                  Question 277. Which SSH server directive controls whether root is allowed to authenticate directly using SSH?<\/b><\/p>\n

                                    \n
                                  1. <\/b> RootAccess<\/span><\/li>\n
                                  2. <\/b> PermitRootLogin<\/span><\/li>\n
                                  3. <\/b> AllowRootSSH<\/span><\/li>\n
                                  4. <\/b> RootAuthentication<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 2. <\/b>PermitRootLogin<\/b><\/p>\n

                                    Explanation :-<\/b><\/p>\n

                                    The OpenSSH <\/span>PermitRootLogin<\/span> directive controls whether the root account may authenticate directly through SSH and under what conditions. Depending on the configured value, direct root login can be disabled or restricted to specific authentication methods. This setting is found in the SSH server configuration, commonly <\/span>\/etc\/ssh\/sshd_config<\/span>. It is distinct from <\/span>PasswordAuthentication<\/span>, which controls password-based authentication generally. Administrators should evaluate SSH access controls together because disabling one authentication method does not automatically disable other permitted methods. Configuration changes should be tested carefully before reloading the SSH daemon.<\/span><\/p>\n

                                    Question 278. Which command can display the current IP addresses assigned to Linux network interfaces?<\/b><\/p>\n

                                      \n
                                    1. <\/b> ip addr<\/span><\/li>\n
                                    2. <\/b> ip route<\/span><\/li>\n
                                    3. <\/b> ip hosts<\/span><\/li>\n
                                    4. <\/b> ip config<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 1. <\/b>ip addr<\/b><\/p>\n

                                      Explanation :-<\/b><\/p>\n

                                      The <\/span>ip addr<\/span> command displays network interfaces and their assigned IP addresses. It can show IPv4 and IPv6 addresses, interface states, prefix lengths, and related information. Administrators commonly use it when troubleshooting network configuration, checking whether an address was obtained through DHCP, or verifying that an interface is active. <\/span>ip route<\/span> instead displays routing information. The <\/span>ip<\/span> utility provides modern Linux networking functionality and replaces many older commands such as <\/span>ifconfig<\/span>. When diagnosing connectivity, administrators often inspect both <\/span>ip addr<\/span> and <\/span>ip route<\/span> to verify addressing and routing.<\/span><\/p>\n

                                      Question 279. Which DNS record is commonly used to publish SPF-related information for a domain?<\/b><\/p>\n

                                        \n
                                      1. <\/b> SPF<\/span><\/li>\n
                                      2. <\/b> MAIL<\/span><\/li>\n
                                      3. <\/b> TXT<\/span><\/li>\n
                                      4. <\/b> AUTH<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 3. <\/b>TXT<\/b><\/p>\n

                                        Explanation :-<\/b><\/p>\n

                                        SPF policies are commonly published in DNS TXT records. A TXT record can contain text data associated with a domain, including an SPF policy that identifies authorized mail-sending systems. Although an SPF-specific DNS record type was defined historically, modern SPF publication relies on TXT records. MX records identify mail exchangers and do not themselves define the complete SPF policy. Administrators can inspect published SPF information using commands such as <\/span>dig TXT example.com<\/span>. Correct DNS publication is important because mail systems may use SPF information when evaluating whether a sending host is authorized to send mail for a domain.<\/span><\/p>\n

                                        Question 280. Which Linux command displays active listening TCP and UDP sockets along with associated processes when run with appropriate privileges?<\/b><\/p>\n

                                          \n
                                        1. <\/b> route -p<\/span><\/li>\n
                                        2. <\/b> ss -lntup<\/span><\/li>\n
                                        3. <\/b> ip socket<\/span><\/li>\n
                                        4. <\/b> netroute -s<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 2. <\/b>ss -lntup<\/b><\/p>\n

                                          Explanation :-<\/b><\/p>\n

                                          The <\/span>ss -lntup<\/span> command displays listening sockets using several useful options: <\/span>-l<\/span> shows listening sockets, <\/span>-n<\/span> prevents name resolution, <\/span>-t<\/span> selects TCP sockets, <\/span>-u<\/span> selects UDP sockets, and <\/span>-p<\/span> displays associated processes when sufficient privileges are available. This makes the command useful for identifying which services are listening on network ports. Administrators can use the output to verify whether a service is running, determine which address it is bound to, and investigate unexpected open ports. <\/span>ss<\/span> is the modern Linux socket-inspection utility.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full LPI 202-450\u00a0 Exam Dumps and Practice Test Dumps   Question 261. Which BIND utility verifies the syntax of a DNS zone file? rndc-checkzone named-checkzone named-checkconf dnscheck Correct Answer: 2. named-checkzone Explanation :- The named-checkzone utility validates the syntax and integrity of a BIND zone file. It normally requires the zone name and the […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23066"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=23066"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23066\/revisions"}],"predecessor-version":[{"id":23067,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23066\/revisions\/23067"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=23066"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=23066"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=23066"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}