{"id":23078,"date":"2026-09-26T11:30:20","date_gmt":"2026-09-26T11:30:20","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=23078"},"modified":"2026-09-26T11:30:20","modified_gmt":"2026-09-26T11:30:20","slug":"lpi-202-450-practice-test-questions-and-exam-dumps-part-20-q381-400","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/lpi-202-450-practice-test-questions-and-exam-dumps-part-20-q381-400\/","title":{"rendered":"LPI 202-450 Practice Test Questions and Exam Dumps Part 20 Q381-400"},"content":{"rendered":"

View Full <\/b>LPI 202-450\u00a0 Exam Dumps<\/b><\/a> and Practice Test Dumps<\/b><\/h1>\n

 <\/p>\n

Question 381. Which BIND command can be used to reload zone data without fully restarting the named service?<\/b><\/p>\n

    \n
  1. <\/b> named-checkzone<\/span><\/li>\n
  2. <\/b> rndc reload<\/span><\/li>\n
  3. <\/b> dig reload<\/span><\/li>\n
  4. <\/b> host -r<\/span><\/li>\n<\/ol>\n

    Correct Answer: 2. rndc reload<\/b><\/p>\n

    Explanation :-<\/b><\/p>\n

    The <\/span>rndc reload<\/span> command instructs a running BIND server to reload its configuration and zone data. This allows administrators to apply changes without completely stopping and starting the <\/span>named<\/span> daemon. It is particularly useful after modifying zone files or configuration settings. <\/span>named-checkzone<\/span> validates zone-file syntax and consistency but does not reload the server. <\/span>dig<\/span> is a DNS query utility, while <\/span>host<\/span> performs DNS lookups. Using <\/span>rndc reload<\/span> is therefore a standard operational method for applying DNS changes to an active BIND installation while minimizing service interruption.<\/span><\/p>\n

    Question 382. Which Apache directive specifies the directory containing the files served for a virtual host?<\/b><\/p>\n

      \n
    1. <\/b> ServerName<\/span><\/li>\n
    2. <\/b> ServerAlias<\/span><\/li>\n
    3. <\/b> DirectoryIndex<\/span><\/li>\n
    4. <\/b> DocumentRoot<\/span><\/li>\n<\/ol>\n

      Correct Answer: 4. DocumentRoot<\/b><\/p>\n

      Explanation :-<\/b><\/p>\n

      The Apache <\/span>DocumentRoot<\/span> directive identifies the filesystem directory from which web content is served. In a virtual-host configuration, each site can have its own <\/span>DocumentRoot<\/span>, allowing multiple websites to use different directories on the same server. <\/span>ServerName<\/span> identifies the hostname, <\/span>ServerAlias<\/span> provides additional hostnames, and <\/span>DirectoryIndex<\/span> specifies default files such as <\/span>index.html<\/span>. Correctly configuring <\/span>DocumentRoot<\/span> is essential because Apache must know where to locate requested resources. File permissions and Apache access controls must also permit the web server to read the selected directory and its contents.<\/span><\/p>\n

      Question 383. Which NFS configuration file defines filesystems that are exported to clients?<\/b><\/p>\n

        \n
      1. <\/b> \/etc\/exports<\/span><\/li>\n
      2. <\/b> \/etc\/fstab<\/span><\/li>\n
      3. <\/b> \/etc\/nfs.conf<\/span><\/li>\n
      4. <\/b> \/etc\/mounts<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1. \/etc\/exports<\/b><\/p>\n

        Explanation :-<\/b><\/p>\n

        The <\/span>\/etc\/exports<\/span> file defines the filesystems that an NFS server makes available to remote clients. Each export can specify permitted hosts or networks and options controlling access behavior, such as read-only access or root squashing. After modifying the file, administrators commonly use <\/span>exportfs<\/span> to update the active export table. <\/span>\/etc\/fstab<\/span> is generally used for filesystem mounting, including persistent NFS client mounts. The other files do not serve as the standard primary export-definition file. Proper <\/span>\/etc\/exports<\/span> configuration is important for both functionality and NFS security.<\/span><\/p>\n

        Question 384. Which Samba command checks the syntax and reports errors in the smb.conf configuration?<\/b><\/p>\n

          \n
        1. <\/b> smbstatus<\/span><\/li>\n
        2. <\/b> smbclient<\/span><\/li>\n
        3. <\/b> testparm<\/span><\/li>\n
        4. <\/b> smbpasswd<\/span><\/li>\n<\/ol>\n

          Correct Answer: 3. testparm<\/b><\/p>\n

          Explanation :-<\/b><\/p>\n

          The <\/span>testparm<\/span> utility validates and displays information about the Samba configuration, including the contents of <\/span>smb.conf<\/span>. It is commonly used after configuration changes to detect syntax problems or unexpected settings before restarting Samba services. <\/span>smbstatus<\/span> reports current Samba connections and locks, <\/span>smbclient<\/span> provides a command-line SMB client, and <\/span>smbpasswd<\/span> manages Samba password information. Running <\/span>testparm<\/span> during troubleshooting can help identify configuration mistakes before they cause service startup failures or unexpected share behavior.<\/span><\/p>\n

          Question 385. Which DNS record type is specifically used to define a canonical alias for another hostname?<\/b><\/p>\n

            \n
          1. <\/b> MX<\/span><\/li>\n
          2. <\/b> PTR<\/span><\/li>\n
          3. <\/b> NS<\/span><\/li>\n
          4. <\/b> CNAME<\/span><\/li>\n<\/ol>\n

            Correct Answer: 4. CNAME<\/b><\/p>\n

            Explanation :-<\/b><\/p>\n

            A CNAME, or Canonical Name, record creates an alias from one DNS name to another canonical hostname. For example, <\/span>www.example.com<\/span> can be configured as a CNAME pointing to <\/span>web01.example.com<\/span>. DNS clients then resolve the canonical target according to normal DNS processing. MX records identify mail servers, PTR records provide reverse mappings, and NS records identify authoritative name servers. CNAME records are useful for maintaining aliases without duplicating the target’s address records, although DNS configuration rules restrict where CNAME records can be used within a zone.<\/span><\/p>\n

            Question 386. Which DHCP option identifies the default gateway that a client should use?<\/b><\/p>\n

              \n
            1. <\/b> Option 15<\/span><\/li>\n
            2. <\/b> Option 3<\/span><\/li>\n
            3. <\/b> Option 6<\/span><\/li>\n
            4. <\/b> Option 51<\/span><\/li>\n<\/ol>\n

              Correct Answer: 2. Option 3<\/b><\/p>\n

              Explanation :-<\/b><\/p>\n

              DHCP option 3 provides the default gateway, or router, information to a DHCP client. A server can supply one or more router addresses through this option, allowing the client to determine where traffic destined for remote networks should be sent. Option 6 specifies DNS servers, option 15 specifies the domain name, and option 51 defines the IP address lease time. If a client has a valid IP address but cannot reach remote networks, checking the DHCP-provided option 3 information can help identify a missing or incorrect default route.<\/span><\/p>\n

              Question 387. Which Postfix configuration parameter specifies the hostname used by the mail system?<\/b><\/p>\n

                \n
              1. <\/b> myhostname<\/span><\/li>\n
              2. <\/b> mydestination<\/span><\/li>\n
              3. <\/b> relayhost<\/span><\/li>\n
              4. <\/b> mynetworks<\/span><\/li>\n<\/ol>\n

                Correct Answer: 3. myhostname<\/b><\/p>\n

                Explanation :-<\/b><\/p>\n

                The Postfix <\/span>myhostname<\/span> parameter specifies the system’s hostname as used by the mail system. It is an important part of Postfix identity and can influence generated message headers and SMTP behavior. <\/span>mydestination<\/span> identifies destinations for which Postfix performs local delivery, <\/span>relayhost<\/span> specifies an upstream relay, and <\/span>mynetworks<\/span> identifies trusted client networks. Administrators should ensure that <\/span>myhostname<\/span> corresponds appropriately to the server’s configured hostname and DNS environment. Correct hostname configuration helps avoid confusing SMTP identity and mail-delivery problems.<\/span><\/p>\n

                Question 388. Which Dovecot utility is commonly used to perform mailbox administration tasks such as searching or manipulating messages?<\/b><\/p>\n

                  \n
                1. <\/b> doveconf<\/span><\/li>\n
                2. <\/b> dovecot<\/span><\/li>\n
                3. <\/b> doveadm<\/span><\/li>\n
                4. <\/b> dovemail<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 3. doveadm<\/b><\/p>\n

                  Explanation :-<\/b><\/p>\n

                  The <\/span>doveadm<\/span> utility provides administrative commands for Dovecot and can perform various mailbox and user-management operations. Depending on the command and configuration, administrators can use it to inspect mailboxes, search messages, move or delete messages, and perform other maintenance tasks. <\/span>doveconf<\/span> is primarily used to inspect effective Dovecot configuration, while <\/span>dovecot<\/span> is the main server program. Understanding the distinction between configuration inspection and mailbox administration is important when managing Dovecot-based IMAP and POP3 services.<\/span><\/p>\n

                  Question 389. Which SSH configuration directive controls whether password-based authentication is permitted?<\/b><\/p>\n

                    \n
                  1. <\/b> PermitRootLogin<\/span><\/li>\n
                  2. <\/b> PasswordAuthentication<\/span><\/li>\n
                  3. <\/b> AllowUsers<\/span><\/li>\n
                  4. <\/b> PubkeyAuthentication<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 2. PasswordAuthentication<\/b><\/p>\n

                    Explanation :-<\/b><\/p>\n

                    The OpenSSH <\/span>PasswordAuthentication<\/span> directive controls whether clients may authenticate using passwords. When password authentication is disabled, users generally need another permitted authentication mechanism, such as public-key authentication. <\/span>PermitRootLogin<\/span> controls root-account login behavior, <\/span>AllowUsers<\/span> restricts which accounts may connect, and <\/span>PubkeyAuthentication<\/span> controls public-key authentication. Administrators often disable password authentication in environments that require key-based access, but they must ensure valid alternative credentials are configured first to avoid locking out legitimate users.<\/span><\/p>\n

                    Question 390. Which command can display recent authentication-related messages from the system journal?<\/b><\/p>\n

                      \n
                    1. <\/b> journalctl -u named<\/span><\/li>\n
                    2. <\/b> journalctl -u apache2<\/span><\/li>\n
                    3. <\/b> journalctl -u nfs-server<\/span><\/li>\n
                    4. <\/b> journalctl -u ssh<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 4. journalctl -u ssh<\/b><\/p>\n

                      Explanation :-<\/b><\/p>\n

                      The <\/span>journalctl -u ssh<\/span> command can display journal entries associated with the SSH service when the service unit is named <\/span>ssh<\/span>. On systems where the unit is named differently, such as <\/span>sshd<\/span>, the corresponding service name should be used. Journal logs can help administrators investigate successful and failed connection attempts, authentication errors, and service startup issues. The other commands target different services: BIND, Apache, and NFS. Examining service-specific journal entries is a useful troubleshooting technique when diagnosing authentication or daemon-related problems.<\/span><\/p>\n

                      Question 391. Which nftables family supports rules that can apply to both IPv4 and IPv6 traffic?<\/b><\/p>\n

                        \n
                      1. <\/b> inet<\/span><\/li>\n
                      2. <\/b> arp<\/span><\/li>\n
                      3. <\/b> bridge<\/span><\/li>\n
                      4. <\/b> netdev<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 1. inet<\/b><\/p>\n

                        Explanation :-<\/b><\/p>\n

                        The nftables <\/span>inet<\/span> address family is designed for rules that can handle both IPv4 and IPv6 traffic. This can simplify firewall configurations because administrators can define common filtering logic without maintaining entirely separate IPv4 and IPv6 rule sets. The <\/span>ip<\/span> family is specific to IPv4, while <\/span>ip6<\/span> is specific to IPv6. Other families such as <\/span>bridge<\/span> and <\/span>netdev<\/span> serve different packet-processing contexts. Using an <\/span>inet<\/span> table is therefore useful when a firewall needs consistent filtering policies across both major IP versions.<\/span><\/p>\n

                        Question 392. Which DNS record is used to associate an IPv6 address with a hostname?<\/b><\/p>\n

                          \n
                        1. <\/b> A<\/span><\/li>\n
                        2. <\/b> PTR<\/span><\/li>\n
                        3. <\/b> AAAA<\/span><\/li>\n
                        4. <\/b> CNAME<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 3. AAAA<\/b><\/p>\n

                          Explanation :-<\/b><\/p>\n

                          An AAAA record maps a hostname to an IPv6 address. It is the IPv6 equivalent of an A record, which maps a hostname to an IPv4 address. PTR records are used for reverse DNS mappings, while CNAME records create aliases to other hostnames. For example, a web server that has an IPv6 address can have an AAAA record associated with its hostname. Administrators can use <\/span>dig AAAA hostname<\/span> to inspect IPv6 address records and verify that DNS is providing the expected IPv6 information.<\/span><\/p>\n

                          Question 393. Which Apache module provides URL rewriting functionality?<\/b><\/p>\n

                            \n
                          1. <\/b> mod_ssl<\/span><\/li>\n
                          2. <\/b> mod_proxy<\/span><\/li>\n
                          3. <\/b> mod_rewrite<\/span><\/li>\n
                          4. <\/b> mod_status<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 3. mod_rewrite<\/b><\/p>\n

                            Explanation :-<\/b><\/p>\n

                            The Apache <\/span>mod_rewrite<\/span> module provides URL rewriting capabilities. It works with directives such as <\/span>RewriteRule<\/span> and <\/span>RewriteCond<\/span> to transform or redirect requests according to defined patterns and conditions. It is widely used for clean URLs, application routing, redirects, and conditional request processing. <\/span>mod_ssl<\/span> provides TLS support, <\/span>mod_proxy<\/span> supports proxy functionality, and <\/span>mod_status<\/span> provides server-status information. When troubleshooting rewrite behavior, administrators should verify that the module is enabled and that the relevant rewrite directives are correctly placed in the applicable configuration context.<\/span><\/p>\n

                            Question 394. Which NFS utility reports statistics about NFS client and server operations?<\/b><\/p>\n

                              \n
                            1. <\/b> showmount<\/span><\/li>\n
                            2. <\/b> nfsstat<\/span><\/li>\n
                            3. <\/b> exportfs<\/span><\/li>\n
                            4. <\/b> rpcinfo<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 2. nfsstat<\/b><\/p>\n

                              Explanation :-<\/b><\/p>\n

                              The <\/span>nfsstat<\/span> utility reports statistics related to NFS operations. It can provide information about client and server activity, including procedure calls and various protocol-related counters. These statistics can help administrators investigate performance or communication problems involving NFS. <\/span>showmount<\/span> displays exported filesystems and client information, <\/span>exportfs<\/span> manages NFS exports, and <\/span>rpcinfo<\/span> reports RPC service information. When an NFS environment experiences unusual delays or failures, examining <\/span>nfsstat<\/span> output can provide additional evidence about the behavior of the NFS subsystem.<\/span><\/p>\n

                              Question 395. Which Postfix file commonly contains mail aliases such as mapping an administrative address to a local user?<\/b><\/p>\n

                                \n
                              1. <\/b> \/etc\/postfix\/main.cf<\/span><\/li>\n
                              2. <\/b> \/etc\/aliases<\/span><\/li>\n
                              3. <\/b> \/etc\/postfix\/master.cf<\/span><\/li>\n
                              4. <\/b> \/etc\/resolv.conf<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 2. \/etc\/aliases<\/b><\/p>\n

                                Explanation :-<\/b><\/p>\n

                                The <\/span>\/etc\/aliases<\/span> file commonly contains local mail aliases that map addresses to other local recipients, programs, or destinations. A typical example is mapping an administrative address such as <\/span>postmaster<\/span> to a specific local account. After modifying aliases, administrators commonly run <\/span>newaliases<\/span> so that Postfix can use the updated alias database. <\/span>main.cf<\/span> contains major Postfix configuration parameters, while <\/span>master.cf<\/span> defines service processes and their behavior. <\/span>\/etc\/resolv.conf<\/span> is related to DNS resolver configuration and has no role in defining Postfix mail aliases.<\/span><\/p>\n

                                Question 396. Which Linux command can display listening TCP and UDP sockets together with associated processes?<\/b><\/p>\n

                                  \n
                                1. <\/b> ip route<\/span><\/li>\n
                                2. <\/b> ss -lntup<\/span><\/li>\n
                                3. <\/b> ip addr<\/span><\/li>\n
                                4. <\/b> dig<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 2. ss -lntup<\/b><\/p>\n

                                  Explanation :-<\/b><\/p>\n

                                  The <\/span>ss -lntup<\/span> command provides information about listening sockets and can include the associated processes. The options request listening sockets, numeric addresses and ports, TCP and UDP sockets, and process information. This makes the command useful when determining which services are listening on particular ports. <\/span>ip route<\/span> displays routing information, <\/span>ip addr<\/span> displays interface addresses, and <\/span>dig<\/span> performs DNS queries. When troubleshooting unexpected network exposure, checking listening sockets can help identify services that are accepting connections and may require additional firewall or service configuration.<\/span><\/p>\n

                                  Question 397. Which OpenSSH directive specifies whether public-key authentication is enabled?<\/b><\/p>\n

                                    \n
                                  1. <\/b> PubkeyAuthentication<\/span><\/li>\n
                                  2. <\/b> PasswordAuthentication<\/span><\/li>\n
                                  3. <\/b> AuthorizedKeysFile<\/span><\/li>\n
                                  4. <\/b> AllowGroups<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 1. PubkeyAuthentication<\/b><\/p>\n

                                    Explanation :-<\/b><\/p>\n

                                    The OpenSSH <\/span>PubkeyAuthentication<\/span> directive controls whether public-key authentication is permitted by the SSH server. When enabled, users can authenticate using an appropriate private key corresponding to a public key accepted by the server. <\/span>PasswordAuthentication<\/span> controls password authentication, <\/span>AuthorizedKeysFile<\/span> identifies the file containing accepted public keys, and <\/span>AllowGroups<\/span> restricts access to members of specified groups. Public-key authentication is widely used for administrative access because it can avoid transmitting reusable passwords during authentication and can be integrated with automated management systems.<\/span><\/p>\n

                                    Question 398. Which SELinux command searches audit records for messages related to access denials?<\/b><\/p>\n

                                      \n
                                    1. <\/b> restorecon<\/span><\/li>\n
                                    2. <\/b> getenforce<\/span><\/li>\n
                                    3. <\/b> ausearch<\/span><\/li>\n
                                    4. <\/b> semanage<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 3. ausearch<\/b><\/p>\n

                                      Explanation :-<\/b><\/p>\n

                                      The <\/span>ausearch<\/span> utility searches Linux audit logs for selected events and is commonly used to investigate SELinux access denials. Administrators can filter audit records to locate relevant messages and then use the information to determine which process, file, or policy rule was involved. <\/span>restorecon<\/span> restores file security contexts, <\/span>getenforce<\/span> reports SELinux enforcement mode, and <\/span>semanage<\/span> manages persistent SELinux configuration. When an application is blocked by SELinux, examining audit records with tools such as <\/span>ausearch<\/span> can provide evidence needed to diagnose the policy interaction.<\/span><\/p>\n

                                      Question 399. Which command can test whether a remote TCP port is reachable without establishing a full application-level session?<\/b><\/p>\n

                                        \n
                                      1. <\/b> nc -z<\/span><\/li>\n
                                      2. <\/b> dig -x<\/span><\/li>\n
                                      3. <\/b> host -t<\/span><\/li>\n
                                      4. <\/b> rndc status<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 1. nc -z<\/b><\/p>\n

                                        Explanation :-<\/b><\/p>\n

                                        The <\/span>nc -z<\/span> option allows netcat to scan for listening TCP or UDP ports without sending application data in the normal interactive manner. For example, <\/span>nc -zv server.example.com 443<\/span> can test whether TCP port 443 is reachable and accepting connections. This makes netcat useful for basic connectivity and firewall troubleshooting. <\/span>dig -x<\/span> performs reverse DNS queries, <\/span>host -t<\/span> performs DNS lookups for a specified record type, and <\/span>rndc status<\/span> reports BIND server status. Port testing should be performed only against systems where such testing is authorized.<\/span><\/p>\n

                                        Question 400. Which OpenVPN configuration directive identifies the remote VPN server to which a client should connect?<\/b><\/p>\n

                                          \n
                                        1. <\/b> cipher<\/span><\/li>\n
                                        2. <\/b> dev<\/span><\/li>\n
                                        3. <\/b> proto<\/span><\/li>\n
                                        4. <\/b> remote<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 4. remote<\/b><\/p>\n

                                          Explanation :-<\/b><\/p>\n

                                          In an OpenVPN client configuration, the <\/span>remote<\/span> directive specifies the hostname or IP address of the remote VPN server and can also include the destination port. For example, a client configuration may identify a VPN gateway by hostname and port using the <\/span>remote<\/span> directive. <\/span>dev<\/span> specifies the virtual network device type, <\/span>proto<\/span> specifies the transport protocol, and <\/span>cipher<\/span> relates to encryption configuration depending on the OpenVPN version and setup. Correctly configuring the remote endpoint is essential because the client needs to know where to establish the VPN connection.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full LPI 202-450\u00a0 Exam Dumps and Practice Test Dumps   Question 381. Which BIND command can be used to reload zone data without fully restarting the named service? named-checkzone rndc reload dig reload host -r Correct Answer: 2. rndc reload Explanation :- The rndc reload command instructs a running BIND server to reload its […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23078"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=23078"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23078\/revisions"}],"predecessor-version":[{"id":23079,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23078\/revisions\/23079"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=23078"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=23078"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=23078"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}