{"id":23070,"date":"2026-09-26T11:29:23","date_gmt":"2026-09-26T11:29:23","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=23070"},"modified":"2026-09-26T11:29:23","modified_gmt":"2026-09-26T11:29:23","slug":"lpi-202-450-practice-test-questions-and-exam-dumps-part-16-q301-320","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/lpi-202-450-practice-test-questions-and-exam-dumps-part-16-q301-320\/","title":{"rendered":"LPI 202-450 Practice Test Questions and Exam Dumps Part 16 Q301-320"},"content":{"rendered":"

View Full <\/b>LPI 202-450\u00a0 Exam Dumps<\/b><\/a> and Practice Test Dumps<\/b><\/h1>\n

 <\/p>\n

Question 301. Which BIND directive determines whether a server performs recursive queries?<\/b><\/p>\n

    \n
  1. <\/b> recursion<\/span><\/li>\n
  2. <\/b> recursive-query<\/span><\/li>\n
  3. <\/b> enable-recursion<\/span><\/li>\n
  4. <\/b> recursive-mode<\/span><\/li>\n<\/ol>\n

    Correct Answer: 1. <\/b>recursion<\/b><\/p>\n

    Explanation :-<\/b><\/p>\n

    The BIND <\/span>recursion<\/span> option controls whether the DNS server performs recursive queries. When enabled, the server can resolve names by querying other DNS servers when the requested information is not already available locally. This setting is commonly used together with <\/span>allow-recursion<\/span>, which controls which clients are permitted to use recursive service. An authoritative-only server may disable recursion to reduce unnecessary exposure. Administrators should distinguish between enabling recursion and controlling recursive clients: <\/span>recursion<\/span> determines whether the capability exists, while <\/span>allow-recursion<\/span> controls access to it.<\/span><\/p>\n

    Question 302. Which Apache module provides support for SSL\/TLS connections such as HTTPS?<\/b><\/p>\n

      \n
    1. <\/b> mod_http<\/span><\/li>\n
    2. <\/b> mod_secure<\/span><\/li>\n
    3. <\/b> mod_ssl<\/span><\/li>\n
    4. <\/b> mod_tls<\/span><\/li>\n<\/ol>\n

      Correct Answer: 3. <\/b>mod_ssl<\/b><\/p>\n

      Explanation :-<\/b><\/p>\n

      The Apache <\/span>mod_ssl<\/span> module provides SSL\/TLS support for Apache HTTP Server and is commonly used to configure HTTPS virtual hosts. It enables Apache to establish encrypted connections and can be configured with certificates, private keys, protocol settings, and related TLS parameters. Simply enabling <\/span>mod_ssl<\/span> is not sufficient by itself; the appropriate virtual-host configuration and certificate files must also be correctly configured. Modules such as <\/span>mod_rewrite<\/span> serve different purposes, including URL rewriting. Administrators should verify both module availability and the TLS virtual-host configuration when troubleshooting HTTPS services.<\/span><\/p>\n

      Question 303. Which NFS configuration option prevents the root user on an NFS client from being treated as root on the exported file system?<\/b><\/p>\n

        \n
      1. <\/b> no_root<\/span><\/li>\n
      2. <\/b> root_squash<\/span><\/li>\n
      3. <\/b> secure_root<\/span><\/li>\n
      4. <\/b> map_root<\/span><\/li>\n<\/ol>\n

        Correct Answer: 4. <\/b>root_squash<\/b><\/p>\n

        Explanation :-<\/b><\/p>\n

        The NFS <\/span>root_squash<\/span> option maps requests from the root user on an NFS client to an anonymous identity on the server. This prevents a client-side root account from automatically having root-level privileges on the exported file system. It is an important security feature for many NFS exports. The opposite behavior can be enabled with <\/span>no_root_squash<\/span>, although that should be used carefully. NFS permissions involve both export options and underlying Unix ownership and mode bits, so administrators should evaluate all layers when securing shared file systems.<\/span><\/p>\n

        Question 304. Which Samba parameter specifies the directory that is shared through a particular share definition?<\/b><\/p>\n

          \n
        1. <\/b> directory<\/span><\/li>\n
        2. <\/b> share_path<\/span><\/li>\n
        3. <\/b> path<\/span><\/li>\n
        4. <\/b> sharedir<\/span><\/li>\n<\/ol>\n

          Correct Answer: 3. <\/b>path<\/b><\/p>\n

          Explanation :-<\/b><\/p>\n

          The Samba <\/span>path<\/span> parameter specifies the local file-system directory associated with a share. For example, a share definition might contain <\/span>path = \/srv\/shared<\/span>. Samba then exposes that directory through the configured SMB share name. Other parameters control access, visibility, and write behavior, such as <\/span>valid users<\/span>, <\/span>browseable<\/span>, and <\/span>read only<\/span>. The directory specified by <\/span>path<\/span> must also have appropriate underlying Unix permissions and ownership. Therefore, configuring the Samba share correctly does not automatically grant access if the operating system’s file permissions prevent the authenticated user from reading or writing the directory.<\/span><\/p>\n

          Question 305. Which DNS record type is normally used to specify the primary authoritative name server and administrative contact for a zone?<\/b><\/p>\n

            \n
          1. <\/b> SOA<\/span><\/li>\n
          2. <\/b> NS<\/span><\/li>\n
          3. <\/b> MX<\/span><\/li>\n
          4. <\/b> SRV<\/span><\/li>\n<\/ol>\n

            Correct Answer: 3. <\/b>SOA<\/b><\/p>\n

            Explanation :-<\/b><\/p>\n

            The SOA, or Start of Authority, record contains administrative information for a DNS zone. Its fields include the primary name server, the responsible party’s mailbox in DNS notation, the zone serial number, and several timing values such as refresh, retry, and expire. Every authoritative DNS zone has an SOA record. NS records identify authoritative name servers, but the SOA contains the primary server and zone-management information. Correct SOA configuration is important for secondary-server synchronization and DNS administration because the serial and timing fields influence how zone transfers and refresh operations are handled.<\/span><\/p>\n

            Question 306. Which DHCP message is normally broadcast by a client at the beginning of the DHCP address-discovery process?<\/b><\/p>\n

              \n
            1. <\/b> DHCPACK<\/span><\/li>\n
            2. <\/b> DHCPREQUEST<\/span><\/li>\n
            3. <\/b> DHCPOFFER<\/span><\/li>\n
            4. <\/b> DHCPDISCOVER<\/span><\/li>\n<\/ol>\n

              Correct Answer: 4. <\/b>DHCPDISCOVER<\/b><\/p>\n

              Explanation :-<\/b><\/p>\n

              DHCPDISCOVER is normally the first message sent by a DHCP client seeking network configuration. Because the client may not yet have an IP address or know the location of a DHCP server, the message is typically broadcast on the local network. DHCP servers can respond with DHCPOFFER messages containing proposed configuration. The client then selects an offer using DHCPREQUEST, and the server generally completes the process with DHCPACK. Understanding this sequence is useful when troubleshooting DHCP because packet captures can reveal whether the client is discovering servers and whether servers are responding with valid offers.<\/span><\/p>\n

              Question 307. Which Postfix parameter controls the domain appended to locally submitted mail when appropriate?<\/b><\/p>\n

                \n
              1. <\/b> myorigin<\/span><\/li>\n
              2. <\/b> mydomain<\/span><\/li>\n
              3. <\/b> origin_domain<\/span><\/li>\n
              4. <\/b> local_domain<\/span><\/li>\n<\/ol>\n

                Correct Answer: 1. <\/b>myorigin<\/b><\/p>\n

                Explanation :-<\/b><\/p>\n

                The Postfix <\/span>myorigin<\/span> parameter specifies the domain that locally posted mail appears to come from when a domain is not otherwise specified. It can influence the domain appended to local addresses and is commonly derived from other Postfix parameters by default. <\/span>mydestination<\/span> has a different purpose: it identifies destinations for which Postfix performs local delivery. <\/span>mydomain<\/span> can provide a domain value used by other configuration defaults. Understanding these related parameters helps administrators correctly configure local mail identity and distinguish sender-domain behavior from local delivery destinations.<\/span><\/p>\n

                Question 308. Which Dovecot protocol commonly allows users to download messages from a mailbox and optionally remove them from the server?<\/b><\/p>\n

                  \n
                1. <\/b> LMTP<\/span><\/li>\n
                2. <\/b> IMAP<\/span><\/li>\n
                3. <\/b> SMTP<\/span><\/li>\n
                4. <\/b> POP3<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 4. <\/b>POP3<\/b><\/p>\n

                  Explanation :-<\/b><\/p>\n

                  POP3 is a mail-access protocol designed primarily for retrieving messages from a remote mailbox. Depending on the client configuration, downloaded messages may be removed from the server after successful retrieval, although clients can also be configured to leave copies on the server. IMAP is more suitable for synchronized mailbox access across multiple devices because it maintains folders, flags, and message state on the server. SMTP is used for message transfer or submission, while LMTP is commonly used for local mail delivery. Dovecot can provide both POP3 and IMAP services to mail clients.<\/span><\/p>\n

                  Question 309. Which SSH client option enables verbose diagnostic output useful for troubleshooting connection problems?<\/b><\/p>\n

                    \n
                  1. <\/b> -v<\/span><\/li>\n
                  2. <\/b> -d<\/span><\/li>\n
                  3. <\/b> -x<\/span><\/li>\n
                  4. <\/b> -V<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 1. <\/b>-v<\/b><\/p>\n

                    Explanation :-<\/b><\/p>\n

                    The OpenSSH <\/span>-v<\/span> option enables verbose diagnostic output from the SSH client. Increasing verbosity with <\/span>-vv<\/span> or <\/span>-vvv<\/span> provides progressively more detailed information about connection establishment, key exchange, authentication, and other stages. This is particularly useful when an SSH connection fails and the administrator needs to determine where the process stops. The <\/span>-V<\/span> option reports the SSH client version, while other options have unrelated purposes. Verbose logs should be reviewed carefully because they can reveal configuration details, but they are among the most useful first-line diagnostics for SSH connection problems.<\/span><\/p>\n

                    Question 310. Which SELinux command displays whether the system is currently enforcing SELinux policy?<\/b><\/p>\n

                      \n
                    1. <\/b> getenforce<\/span><\/li>\n
                    2. <\/b> getselinux<\/span><\/li>\n
                    3. <\/b> selinuxmode<\/span><\/li>\n
                    4. <\/b> policy-status<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 1. <\/b>getenforce<\/b><\/p>\n

                      Explanation :-<\/b><\/p>\n

                      The <\/span>getenforce<\/span> command displays the current SELinux enforcement mode. Typical results are <\/span>Enforcing<\/span>, <\/span>Permissive<\/span>, or <\/span>Disabled<\/span>. Enforcing mode actively applies policy decisions, while permissive mode logs violations without enforcing the corresponding access denials. The command is useful for quickly determining whether SELinux is active and enforcing policy during troubleshooting. <\/span>sestatus<\/span> provides more detailed information, including policy and configuration data. Administrators should distinguish the current runtime mode from persistent SELinux configuration, because a temporary change made with <\/span>setenforce<\/span> does not necessarily change the mode that will be used after reboot.<\/span><\/p>\n

                      Question 311. Which nftables statement represents a rule that rejects traffic rather than silently dropping it?<\/b><\/p>\n

                        \n
                      1. <\/b> accept<\/span><\/li>\n
                      2. <\/b> drop<\/span><\/li>\n
                      3. <\/b> reject<\/span><\/li>\n
                      4. <\/b> deny<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 3. <\/b>reject<\/b><\/p>\n

                        Explanation :-<\/b><\/p>\n

                        The nftables <\/span>reject<\/span> verdict actively rejects matching traffic, typically generating an appropriate response to the sender depending on the protocol and rule configuration. By contrast, <\/span>drop<\/span> discards matching packets without providing a rejection response. <\/span>accept<\/span> permits the packet to continue through the relevant processing path. <\/span>deny<\/span> is not the standard nftables verdict used for packet rejection. Choosing between <\/span>reject<\/span> and <\/span>drop<\/span> depends on the firewall’s intended behavior, visibility, and security requirements. Administrators should also consider how rejection behavior affects clients and troubleshooting.<\/span><\/p>\n

                        Question 312. Which DNS record maps a domain name directly to an IPv4 address?<\/b><\/p>\n

                          \n
                        1. <\/b> PTR<\/span><\/li>\n
                        2. <\/b> AAAA<\/span><\/li>\n
                        3. <\/b> A<\/span><\/li>\n
                        4. <\/b> CNAME<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 3. <\/b>A<\/b><\/p>\n

                          Explanation :-<\/b><\/p>\n

                          An A record maps a hostname or domain name to an IPv4 address. For example, an A record can associate <\/span>www.example.com<\/span> with an IPv4 address such as <\/span>192.0.2.10<\/span>. AAAA records perform the equivalent function for IPv6 addresses. PTR records are used for reverse DNS, while CNAME records create aliases to other hostnames. Administrators can inspect A records with commands such as <\/span>dig A example.com<\/span> or simply <\/span>dig example.com<\/span>. Correct A-record configuration is fundamental to making IPv4-based web, mail, and other network services reachable by hostname.<\/span><\/p>\n

                          Question 313. Which Apache directive can define an additional hostname that should be handled by an existing virtual host?<\/b><\/p>\n

                            \n
                          1. <\/b> ServerAlias<\/span><\/li>\n
                          2. <\/b> HostAlias<\/span><\/li>\n
                          3. <\/b> VirtualAlias<\/span><\/li>\n
                          4. <\/b> AliasHost<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1. <\/b>ServerAlias<\/b><\/p>\n

                            Explanation :-<\/b><\/p>\n

                            The Apache <\/span>ServerAlias<\/span> directive defines additional hostnames that should match an existing virtual host. For example, a virtual host with <\/span>ServerName example.com<\/span> could use <\/span>ServerAlias www.example.com<\/span> to serve both hostnames using the same configuration. <\/span>ServerName<\/span> identifies the primary hostname, while <\/span>Alias<\/span> is used for mapping URL paths to file-system locations rather than hostnames. Correct virtual-host configuration is important when a server hosts multiple domains or aliases. Administrators should ensure that DNS records also point the relevant hostnames to the Apache server.<\/span><\/p>\n

                            Question 314. Which NFS-related service traditionally provides RPC port mapping for services using dynamically assigned ports?<\/b><\/p>\n

                              \n
                            1. <\/b> nfsd<\/span><\/li>\n
                            2. <\/b> rpcbind<\/span><\/li>\n
                            3. <\/b> mountd<\/span><\/li>\n
                            4. <\/b> statd<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 2. <\/b>rpcbind<\/b><\/p>\n

                              Explanation :-<\/b><\/p>\n

                              The <\/span>rpcbind<\/span> service maps RPC program numbers to network ports. Older NFS configurations and other RPC-based services rely on this mechanism because some services may use dynamically assigned ports. Clients can contact <\/span>rpcbind<\/span> to discover the port associated with a particular RPC program. NFSv4 reduces reliance on separate RPC services compared with older NFS versions, but understanding <\/span>rpcbind<\/span> remains important when administering or troubleshooting NFSv2\/v3 environments and other RPC applications. Firewall configurations must account for the relevant services and ports when supporting these protocols.<\/span><\/p>\n

                              Question 315. Which Postfix utility is used to create or update indexed database files such as those generated from alias maps?<\/b><\/p>\n

                                \n
                              1. <\/b> postmap<\/span><\/li>\n
                              2. <\/b> postaliaser<\/span><\/li>\n
                              3. <\/b> postdb<\/span><\/li>\n
                              4. <\/b> postindex<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 1. <\/b>postmap<\/b><\/p>\n

                                Explanation :-<\/b><\/p>\n

                                The Postfix <\/span>postmap<\/span> utility creates or updates indexed database files from text-based mapping files. It is commonly used with lookup tables such as virtual aliases, transport maps, and other Postfix-supported databases. For example, after modifying a source mapping file, an administrator may run <\/span>postmap<\/span> to generate the database that Postfix actually queries. <\/span>postqueue<\/span> and <\/span>postsuper<\/span> instead manage the mail queue. Correctly rebuilding map databases is important because Postfix may continue using an older database if the generated map is not updated after the source file changes.<\/span><\/p>\n

                                Question 316. Which PAM module is commonly used to enforce per-user resource limits such as maximum open files or processes?<\/b><\/p>\n

                                  \n
                                1. <\/b> pam_env<\/span><\/li>\n
                                2. <\/b> pam_access<\/span><\/li>\n
                                3. <\/b> pam_limits<\/span><\/li>\n
                                4. <\/b> pam_resources<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 3. <\/b>pam_limits<\/b><\/p>\n

                                  Explanation :-<\/b><\/p>\n

                                  The <\/span>pam_limits<\/span> module applies user resource limits configured through files such as <\/span>\/etc\/security\/limits.conf<\/span> and related configuration. These limits can include maximum processes, open files, memory-related resources, and other session constraints depending on the operating system. This mechanism is useful for preventing a single user or service from consuming excessive system resources. <\/span>pam_access<\/span> controls access according to configured rules, while <\/span>pam_env<\/span> manages environment variables. When troubleshooting unexpected resource restrictions, administrators should check both PAM configuration and the applicable limits for the affected user or group.<\/span><\/p>\n

                                  Question 317. Which SSH configuration file is commonly used to define server-side OpenSSH daemon settings?<\/b><\/p>\n

                                    \n
                                  1. <\/b> \/etc\/ssh\/ssh_config<\/span><\/li>\n
                                  2. <\/b> \/etc\/ssh\/sshd_config<\/span><\/li>\n
                                  3. <\/b> \/etc\/sshd\/config<\/span><\/li>\n
                                  4. <\/b> \/etc\/ssh\/server.conf<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 2. <\/b>\/etc\/ssh\/sshd_config<\/b><\/p>\n

                                    Explanation :-<\/b><\/p>\n

                                    The <\/span>\/etc\/ssh\/sshd_config<\/span> file commonly contains server-side configuration for the OpenSSH daemon. Settings such as <\/span>Port<\/span>, <\/span>PermitRootLogin<\/span>, <\/span>PasswordAuthentication<\/span>, and <\/span>PubkeyAuthentication<\/span> can be defined there. The <\/span>\/etc\/ssh\/ssh_config<\/span> file is instead the system-wide configuration for SSH clients. After modifying <\/span>sshd_config<\/span>, administrators should validate the configuration and reload the SSH service so that changes are applied safely. Keeping a working administrative session open during configuration changes can also help prevent accidental loss of remote access if an error is introduced.<\/span><\/p>\n

                                    Question 318. Which SELinux tool can be used to determine why an access denial was logged?<\/b><\/p>\n

                                      \n
                                    1. <\/b> ausearch<\/span><\/li>\n
                                    2. <\/b> selinuxlog<\/span><\/li>\n
                                    3. <\/b> auditcheck<\/span><\/li>\n
                                    4. <\/b> sealertlog<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 1. <\/b>ausearch<\/b><\/p>\n

                                      Explanation :-<\/b><\/p>\n

                                      The <\/span>ausearch<\/span> utility can search Linux audit logs for events, including SELinux access-denial records. Administrators can use it to locate AVC denial messages and investigate which process attempted an operation, which file or resource was targeted, and what SELinux context was involved. The <\/span>auditd<\/span> subsystem records these events when auditing is enabled. Tools such as <\/span>sealert<\/span> may also provide higher-level explanations on systems where they are installed. Reviewing audit information helps administrators distinguish genuine policy problems from Unix permission, ownership, application, or configuration issues.<\/span><\/p>\n

                                      Question 319. Which DNS query type is commonly used to retrieve the SOA record for a zone?<\/b><\/p>\n

                                        \n
                                      1. <\/b> AUTH<\/span><\/li>\n
                                      2. <\/b> ZONE<\/span><\/li>\n
                                      3. <\/b> SOA<\/span><\/li>\n
                                      4. <\/b> START<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 3. <\/b>SOA<\/b><\/p>\n

                                        Explanation :-<\/b><\/p>\n

                                        The DNS query type <\/span>SOA<\/span> requests the Start of Authority record for a zone. Administrators commonly use commands such as <\/span>dig SOA example.com<\/span> to inspect the zone’s primary name server, responsible-party field, serial number, and timing values. The SOA serial is particularly useful when troubleshooting zone transfers because secondary servers use it to determine whether their copy is current. DNS does not use generic query types such as <\/span>AUTH<\/span> or <\/span>ZONE<\/span> for this purpose. Regularly checking SOA information can help identify synchronization and delegation problems.<\/span><\/p>\n

                                        Question 320. Which Linux command displays the neighbor table used for address-to-link-layer mappings?<\/b><\/p>\n

                                          \n
                                        1. <\/b> ip route<\/span><\/li>\n
                                        2. <\/b> ip neigh<\/span><\/li>\n
                                        3. <\/b> ip arp-table<\/span><\/li>\n
                                        4. <\/b> ip link-neighbor<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 2. <\/b>ip neigh<\/b><\/p>\n

                                          Explanation :-<\/b><\/p>\n

                                          The <\/span>ip neigh<\/span> command displays and manages the Linux neighbor table, which contains mappings between network-layer addresses and link-layer addresses. For IPv4, this information corresponds closely to traditional ARP functionality; IPv6 uses Neighbor Discovery. The table can show states such as reachable, stale, delayed, or failed. Administrators can use <\/span>ip neigh<\/span> when troubleshooting local-network communication, duplicate addresses, or incomplete address resolution. <\/span>ip route<\/span> instead displays routing information, while <\/span>ip link<\/span> provides interface and link-state information.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full LPI 202-450\u00a0 Exam Dumps and Practice Test Dumps   Question 301. Which BIND directive determines whether a server performs recursive queries? recursion recursive-query enable-recursion recursive-mode Correct Answer: 1. recursion Explanation :- The BIND recursion option controls whether the DNS server performs recursive queries. When enabled, the server can resolve names by querying other […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23070"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=23070"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23070\/revisions"}],"predecessor-version":[{"id":23071,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23070\/revisions\/23071"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=23070"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=23070"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=23070"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}