undefined

Answer: b) top

Explanation: top provides a real-time, refreshing view of system processes and CPU utilization, including load average, CPU time breakdown (user, system, idle, iowait), and memory usage. uptime shows load averages as a snapshot, and ps shows a static process list.

Answer: d) Both a) and b)

Explanation: iostat reports CPU statistics and I/O statistics for devices and partitions (transactions per second, bytes read/written, average I/O times). iotop provides a live, top-like view of I/O usage per process. The LPIC-2 exam expects familiarity with both.

Answer: b) Average number of processes in the run queue over 1, 5, and 15 minutes

Explanation: Load average represents the average number of processes in the run queue (running or waiting for CPU) and processes waiting for I/O. A load average of 3 on a 4-core system is fine; a load average of 6 on a 4-core system means processes are waiting for CPU time.

Answer: a) /lib/modules/$(uname -r)/

Explanation: Kernel modules for the currently running kernel are stored in /lib/modules/$(uname -r)/. The command uname -r returns the kernel release version (e.g., 6.1.0-17-amd64). Each installed kernel version has its own subdirectory.

Answer: b) Builds the module dependency file (modules.dep)

Explanation: depmod scans the kernel modules directory and creates /lib/modules/$(uname -r)/modules.dep, which lists module dependencies. The modprobe command uses this file to automatically resolve dependencies when loading modules.

Answer: b) /etc/default/grub

Explanation: /etc/default/grub is the main GRUB 2 configuration file. Kernel parameters are added to the GRUB_CMDLINE_LINUX or GRUB_CMDLINE_LINUX_DEFAULT lines. After editing, run update-grub (Debian/Ubuntu) or grub2-mkconfig -o /boot/grub2/grub.cfg (RHEL) to regenerate /boot/grub/grub.cfg.

Answer: a) Provides initial RAM disk with drivers needed to mount the root filesystem

Explanation: The initramfs (initial RAM filesystem) is a temporary root filesystem loaded into memory during boot. It contains kernel modules (storage drivers, filesystem drivers, LVM tools) needed to access the real root filesystem. Without it, the kernel couldn't boot from complex storage.

Answer: d) GRUB_TIMEOUT=0 in /etc/default/grub

Explanation: Setting GRUB_TIMEOUT=0 in /etc/default/grub (then running update-grub) makes GRUB boot immediately without waiting. Setting GRUB_HIDDEN_TIMEOUT can also suppress the menu entirely on single-boot systems.

Answer: d) Both a) and b)

Explanation: update-initramfs -u rebuilds the initramfs for the current kernel. mkinitramfs is the lower-level command that update-initramfs calls internally. On RHEL-based systems, the equivalent is dracut --force.

Answer: b) /proc/sys/net/ipv4/ip_forward

Explanation: Writing 1 to /proc/sys/net/ipv4/ip_forward enables IP forwarding until the next reboot. To make it permanent, add net.ipv4.ip_forward = 1 to /etc/sysctl.conf or a file in /etc/sysctl.d/.

Answer: c) systemd-analyze critical-chain

Explanation: systemd-analyze has several subcommands: systemd-analyze time shows total boot time, systemd-analyze blame shows each unit's startup time, and systemd-analyze critical-chain shows the boot performance timeline highlighting the bottleneck chain.

Answer: b) Creates symlinks to start the service automatically at boot

Explanation: systemctl enable creates symlinks in /etc/systemd/system/ (multi-user.target.wants/) so the service starts at boot. systemctl start starts it immediately. systemctl enable --now does both. systemctl disable removes the symlinks.

Answer: b) Runlevel 1

Explanation: In SysV init, runlevel 1 is single-user mode (maintenance, root shell only). Runlevel 0 is halt/poweroff, runlevel 3 is multi-user text mode, and runlevel 5 is multi-user graphical mode. On systemd systems, these map to targets (e.g., runlevel1.target → rescue.target).

Answer: a) systemctl isolate multi-user.target

Explanation: systemctl isolate switches to a specific target immediately, similar to how init changed runlevels. multi-user.target corresponds to runlevel 3 (multi-user text mode). set-default changes the default target for future boots.

Answer: b) /etc/systemd/system/

Explanation: /etc/systemd/system/ is the system administrator's directory for custom unit files and overrides. /lib/systemd/system/ and /usr/lib/systemd/system/ contain vendor-provided units. Files in /etc/ override those in /lib/ and /usr/lib/. /run/systemd/system/ is for runtime units created at boot.

Answer: d) Both a) and b)

Explanation: Both mkfs.xfs and mkfs -t xfs create an XFS filesystem. XFS is the default filesystem for RHEL/CentOS 7+ and is commonly used for large-scale data storage due to its scalability (up to 8 EB filesystem size).

Answer: a) chattr +i file

Explanation: The immutable attribute (+i) prevents any modifications to the file (including deletion, renaming, and content changes) regardless of permissions. Only root can set or remove this attribute. The +a attribute (append-only) allows appending but not overwriting or deleting.

Answer: d) Both a) and b)

Explanation: edquota -u username opens an interactive editor to set quotas. setquota sets quotas non-interactively. Both require quotas to be enabled on the filesystem (via quotaon) and the usrquota/grpquota mount options in /etc/fstab.

Answer: a) find / -perm 644

Explanation: -perm searches for files with specific permissions. find / -perm 644 finds files with exactly 644 permissions. find / -perm -u=r finds files where the owner has read permission. find / -perm /222 finds files writable by anyone.

Answer: a) du -c

Explanation: du -c shows the disk usage for each directory and prints a grand total line at the end. du -s shows only the total (one line). df --total shows filesystem usage with a total but is less granular.

Answer: b) aquota.user at the filesystem root

Explanation: The quota database files (aquota.user for users, aquota.group for groups) are stored at the root of the filesystem that has quotas enabled. Modern systems may use quota.user and quota.group instead.

Answer: a) mdadm --create /dev/md0 --level=1 --raid-devices=2 /dev/sdb1 /dev/sdc1

Explanation: mdadm is the Linux software RAID management tool. RAID 1 mirrors data across disks for redundancy. With 2 devices, usable capacity is that of 1 device (the smaller one). RAID 5 requires at least 3 devices, RAID 6 at least 4.

Answer: a) Creates a new physical volume on a disk or partition

Explanation: pvcreate initializes a disk or partition for use with LVM by writing LVM metadata to it. After creating PVs, you add them to a VG with vgcreate, then create LVs with lvcreate. pvdisplay lists PV information.

Answer: d) Both a) and b)

Explanation: Both lvextend -L +10G and lvresize -L +10G extend a logical volume. After extending, you must resize the filesystem with resize2fs (ext4) or xfs_growfs (XFS). lvresize can both extend and reduce LVs.

Answer: b) Allows over-allocation of storage (virtual size > physical size)

Explanation: Thin provisioning allows creating LVs with a virtual size larger than the available physical storage. Space is allocated on demand as data is written. This is useful for environments where not all allocated space is used immediately, but requires monitoring to avoid running out of physical space.

Answer: b) cat /proc/mdstat

Explanation: /proc/mdstat shows the status of all active MD (RAID) devices, including sync progress for degraded arrays. mdadm --detail --scan shows configuration details. mdadm --monitor sends alerts on RAID events.

Answer: b) XFS

Explanation: While LVM snapshots work with any filesystem, XFS is well-suited because xfs_freeze ensures consistent snapshots. However, Btrfs and ZFS have built-in snapshot capabilities that are more efficient than LVM snapshots. ext4 also works fine with LVM snapshots.

Answer: c) Network configuration is distribution-specific; ip commands are runtime-only

Explanation: The ip command configures network settings at runtime only — changes are lost on reboot. Persistent network configuration is distribution-specific: Netplan (Ubuntu), ifcfg files (RHEL/CentOS), or /etc/network/interfaces (Debian).

Answer: a) ss -tln

Explanation: ss -tln shows all TCP (-t) listening (-l) sockets with numeric addresses (-n). ss -tuln adds UDP (-u). The -p flag adds process information. ss has replaced netstat in modern Linux distributions.

Answer: d) All of the above

Explanation: All three commands trace network paths: traceroute (most feature-rich, requires root for some options), tracepath (simpler, no root needed), and mtr (combines traceroute with ping, displays live statistics). LPIC-2 expects familiarity with these diagnostic tools.

Answer: a) /etc/hosts

Explanation: /etc/hosts provides static IP-to-hostname mappings. The Name Service Switch file (/etc/nsswitch.conf) controls the order of resolution (usually files dns, meaning /etc/hosts is checked before DNS). /etc/resolv.conf defines DNS servers.

Answer: a) The list of current iptables rules

Explanation: iptables -L lists the current rules in each chain (INPUT, FORWARD, OUTPUT) of the selected table (default: filter). iptables -L -n -v adds numeric addresses and packet/byte counts. On systems using nftables, nft list ruleset is the equivalent.

Answer: d) All of the above

Explanation: All three provide real-time network monitoring: nethogs groups by process, iftop shows bandwidth per connection, and nload shows total in/out traffic. LPIC-2 covers network troubleshooting tools broadly.

Answer: b) AAAA record

Explanation: AAAA (quad-A) records map hostnames to IPv6 addresses. A records map to IPv4 addresses. PTR records provide reverse DNS (IP → hostname), and CNAME records provide canonical name aliases.

Answer: a) allow-transfer { 192.168.1.10; };

Explanation: allow-transfer restricts which servers can request zone transfers (AXFR/IXFR). It should be limited to authorized slave/secondary DNS servers only. allow-query controls who can query the server, and allow-update controls dynamic DNS updates.

Answer: d) Both a) and b)

Explanation: dig -x 192.168.1.10 automatically converts the IP to the reverse lookup format. dig 10.1.168.192.in-addr.arpa PTR does the same thing manually. Both query the PTR record. For IPv6, dig -x 2001:db8::1 uses ip6.arpa.

Answer: d) options directory

Explanation: The directory option within the options block specifies the working directory for the named daemon. Zone file paths relative to this directory are used in the file option within zone statements. Example: options { directory "/var/named"; };

Answer: a) named-checkconf

Explanation: named-checkconf validates the syntax of named.conf and included files. named-checkzone validates individual zone files. Both should be run before restarting named to avoid configuration errors.

Answer: a) SSLEngine on

Explanation: SSLEngine on enables SSL/TLS for the virtual host. SSLCertificateFile and SSLCertificateKeyFile specify the certificate and private key. Apache requires the mod_ssl module to be loaded for SSL functionality.

Answer: a) smbd

Explanation: smbd handles SMB/CIFS file sharing, print sharing, and user authentication. nmbd handles NetBIOS name resolution and browsing. winbindd integrates with Windows domain authentication.

Answer: a) /etc/exports

Explanation: /etc/exports defines directories exported via NFS, along with access permissions and options (e.g., rw, sync, no_root_squash). After editing, run exportfs -ra to apply changes. showmount -e localhost lists exported directories.

Answer: b) Allows root on the NFS client to have root privileges on the exported filesystem

Explanation: By default, NFS squashes root access (maps UID 0 to nobody/nfsnobody). no_root_squash disables this, giving root on the client root privileges on the export. This is a security risk and should be used carefully.

Answer: a) Postfix

Explanation: MTAs route and deliver email between servers. Postfix, Sendmail, Exim, and Qmail are MTAs. Dovecot and Cyrus IMAP are delivery/submission agents (MDAs/Message Stores). Roundcube is a webmail client (MUA).

Answer: a) /etc/postfix/main.cf

Explanation: main.cf contains Postfix's primary configuration (parameters like myhostname, mydomain, mynetworks, inet_interfaces). master.cf defines Postfix service daemon configurations. After editing main.cf, run postfix reload to apply changes.

Answer: a) mynetworks

Explanation: mynetworks specifies trusted networks (in CIDR notation) allowed to relay email through the server. relay_domains defines domains the server will relay mail for. Misconfiguring mynetworks can turn your server into an open relay, a common security issue.

Answer: b) Offers TLS if the client supports it, but doesn't require it

Explanation: smtpd_tls_security_level = may (or opportunistic) enables STARTTLS if the client supports it but doesn't reject unencrypted connections. = encrypt enforces TLS. = none disables TLS for the server's SMTP reception.

Answer: d) Both a) and c)

Explanation: openssl genrsa -out key.pem 2048 generates an RSA private key. openssl req -newkey rsa:2048 -keyout key.pem generates a key and simultaneously creates a CSR. The req approach is more common in practice since you typically need both the key and a CSR for certificate signing.

Answer: a) ssh-keygen

Explanation: ssh-keygen generates, manages, and converts SSH authentication keys. It's used to create host keys (ssh-keygen -A for all host key types) and user keys for public key authentication. ssh-add loads keys into ssh-agent, and ssh-keyscan gathers remote host keys.

Answer: a) /etc/pam.d/passwd

Explanation: /etc/pam.d/passwd controls PAM behavior for the passwd command. On Debian/Ubuntu, it typically includes common-password. On RHEL, the equivalent is password-auth or system-auth. pwquality.conf configures password quality requirements used by pam_pwquality.so.

Answer: a) iptables -A INPUT -s 10.0.0.5 -j DROP

Explanation: -A INPUT appends to the INPUT chain (incoming traffic to the local system). -s 10.0.0.5 matches the source address. -j DROP silently drops packets (no response). -j REJECT sends back an ICMP unreachable message. OUTPUT controls outgoing traffic, and FORWARD controls routed traffic.