LPI LPIC-2 202-450 Exam Practice Questions, practice question pack
LPI · LPIC-2

LPI LPIC-2 202-450 Exam Practice Questions

120 questionsInstant PDF downloadUpdated September 2026

US$39

Try 10 questions free

Card, Apple Pay or Google Pay. Your PDF is sent by email as soon as you check out.

Pass or your money backFail the exam after using this pack and we refund it. How the guarantee works
Category:
TRY BEFORE YOU BUY

Three of the 120 questions in this pack

Question 1

On a Linux router, packet forwarding for IPv4 has been enabled. After a reboot, the machine no longer forwards IP packets from other hosts. The command: echo 1 > /proc/sys/net/ipv4/ip_forward temporarily resolves this issue. Which one of the following options is the best way to ensure this setting is saved across system restarts?

  1. Add echo 1 > /proc/sys/net/ipv4/ip_forward to the root user login script
  2. Add echo 1 > /proc/sys/net/ipv4/ip_forward to any user login script
  3. In /etc/sysct1.conf change net.ipv4.ip_forward to 1
  4. In /etc/rc.local add net.ipv4.ip_forward = 1
  5. In /etc/sysconfig/iptables-config add ipv4.ip_forward = 1
Show answer and explanation

Correct answer: C. In /etc/sysct1.conf change net.ipv4.ip_forward to 1

The /etc/sysctl.conf file is the standard configuration file for persistent sysctl settings on Linux systems. Setting net.ipv4.ip_forward = 1 in this file ensures the kernel parameter is applied at boot time through the sysctl service. This is the proper, persistent method endorsed by Linux distributions for maintaining kernel parameters across reboots.

Why the other options are wrong

  • A. Login scripts only execute when a user logs in, not at system boot, and root may not always log in.
  • B. Relying on user login scripts is unreliable and won't execute if no user logs in after boot.
  • D. /etc/rc.local is a shell script, so it needs a command such as sysctl -w net.ipv4.ip_forward=1, not a key = value line.
  • E. The iptables-config file is for iptables-specific settings, not general kernel parameters, and the syntax is wrong.

Question 2

What information can be found in the file specified by the status parameter in an OpenVPN server configuration file? (Choose two.)

  1. Errors and warnings generated by the openvpn daemon
  2. Routing information
  3. Statistical information regarding the currently running openvpn daemon
  4. A list of currently connected clients
  5. A history of all clients who have connected at some point
Show answer and explanation

Correct answer: C, D

C. Statistical information regarding the currently running openvpn daemon D. A list of currently connected clients The OpenVPN status file (specified by the 'status' parameter) contains real-time statistical information about the running OpenVPN daemon, including current connection statistics and performance metrics (option C), and a list of clients currently connected to the server with their connection details (option D). These are the standard contents of the OpenVPN status log.

Why the other options are wrong

  • A. Errors and warnings are logged to the main OpenVPN log file, not the status file.
  • B. Routing information is not included in the status file; it's maintained by the kernel's routing table.
  • E. Historical data about all past connections is not stored in the status file; only current connections are listed.

Question 3

Which of the following lines in the sshd configuration file should, if present, be changed in order to increase the security of the server? (Choose two.)

  1. Protocol 2, 1
  2. PermitEmptyPasswords no
  3. Port 22
  4. PermitRootLogin yes
  5. IgnoreRhosts yes
Show answer and explanation

Correct answer: A, D

A. Protocol 2, 1 D. PermitRootLogin yes Option A (Protocol 2, 1) should be changed because it enables the insecure SSH protocol version 1; only Protocol 2 should be allowed. Option D (PermitRootLogin yes) should be changed because directly permitting root login via SSH is a significant security risk; it should be set to 'no' to prevent brute-force attacks and direct root compromise. Both represent common security hardening requirements.

Why the other options are wrong

  • B. PermitEmptyPasswords no is already the secure setting and requires no change.
  • C. While port 22 is the default, changing it is obscurity rather than security and is not required for baseline hardening.
  • E. IgnoreRhosts yes is already the secure default setting that should be present.

See all 10 free questions Get the full pack, US$39

120 practice questions for LPI LPIC-2 (202-450), with full explanations.

Every question comes with the correct answer, the reasoning behind it, and a note on why each wrong option is wrong, including the fill-in-the-blank items. Work through it once with the answers, then again with the questions-only copy under exam conditions.

  • 120 questions mapped to the 202-450 exam objectives
  • Answers and explanations for every question, including the wrong options
  • A questions-only PDF for timed practice runs
  • Instant delivery by email the moment you check out
  • Free monthly updates for as long as the exam is live
  • Pass or your money back

Fail the 202-450 and it costs another US$200. This pack is US$39, paid once, and refunded if you fail.

Try 10 questions free before you buy.

Last updated September 2026 · 120 questions

What makes the 202-450 hard

The 202-450 is the second of two exams required for the full LPIC-2 certification. Where 201-450 covers the kernel, storage and network configuration layer, 202-450 covers the services layer: DNS, web servers, file sharing, email delivery, network client management and system security.

Like all LPI exams, it includes fill-in-the-blank questions where exact commands, file paths and configuration syntax have to be typed with no options to choose from. System security is the heaviest topic at weight 14 of 60, more than any single service, which surprises candidates who assume this is purely a services exam.

This pack has 120 practice questions for the 202-450, including every fill-in-the-blank style question, so the exact syntax questions are familiar in advance.

About the exam

LPIC-2 validates advanced Linux system administration across any distribution. Together, 201-450 and 202-450 cover the full LPIC-2 syllabus. The current version is 4.5, and an active LPIC-1 is required to certify. Valid for 5 years. LPI exams include fill-in-the-blank questions requiring exact command syntax.

Exam domains

LPI publishes topic weights rather than percentages. The weights add up to 60 and map one to one onto the 60 exam questions, so a weight of 14 means roughly 14 questions.

  • Domain name server: weight 8
  • HTTP services: weight 11
  • File sharing: weight 8
  • Network client management: weight 11
  • E-mail services: weight 8
  • System security: weight 14

60 questions, 90 minutes, US$200 per attempt, Pearson VUE testing centres and online proctored, valid 5 years.

Reviews

There are no reviews yet.

Only logged in customers who have purchased this product may leave a review.

Questions before you buy

What do I get when I buy the LPI LPIC-2 202-450 pack?

120 practice questions as a PDF, each with the correct answer, a full explanation and a note on why the other options are wrong, plus a separate questions-only PDF for timed practice.

How quickly do I receive it?

Straight away. The full PDF and a questions-only copy are emailed to you the moment your payment goes through, and the same links are on your order page.

Is there a free sample?

Yes. Ten questions from this pack, with answers and explanations, are free on this page and as a PDF, so you can judge the quality before you pay.

Are updates included?

Yes. The pack is updated every month for as long as the exam is live, and updates are free for everyone who has bought it.

What if I fail the exam?

We refund the pack. Sit the exam 7 to 30 days after buying, then send your official score report within 7 days of the exam date, as set out in the refund policy.

Can I share it with colleagues?

Each purchase is licensed to one person. For a team, school or training organisation, email support@certstash.com for a licence that fits.

Related products