50 Free LPIC-1 102-500 Practice Questions and Answers

Play from 05:12 Question 4. Which of the following commands displays all environment and shell variables? Here are the options. Option A. getargs. Option B. lsenv. Option C. ls. Option D. env. Option E. lsshell. Pause the video now if you want time to think about the answer.

The correct answer is D. env. The env command displays all environment variables currently set in the shell. When executed without arguments, it prints all exported variables and their values. Now, why are the other options incorrect? Option A is incorrect. getargs is not a standard Linux command. Option B is incorrect. lsenv is not a standard Linux command for displaying environment variables. Option C is incorrect. ls lists files and directories, not environment variables. Option E is incorrect. lsshell is not a standard Linux command. Therefore, D, env, is the correct answer.

Play from 06:25 Question 5. Which of the following commands preloads and manages existing SSH keys that are used for automatic authentication while logging in to order machines using SSH? Here are the options. Option A. sshd. Option B. ssh-keyring. Option C. ssh-keygen. Option D. ssh-pki. Option E. ssh-agent. Pause the video now if you want time to think about the answer.

The correct answer is E. ssh-agent. The ssh-agent command preloads and manages SSH private keys in memory, enabling automatic authentication for SSH connections without requiring password entry each time. When keys are loaded into ssh-agent, SSH can use them for authentication across multiple sessions. Now, why are the other options incorrect? Option A is incorrect. sshd is the SSH server daemon, not a key management tool. Option B is incorrect. ssh-keyring is not a standard SSH utility. Option C is incorrect. ssh-keygen generates SSH keys but does not manage or preload them for authentication. Option D is incorrect. ssh-pki is not a standard SSH command. Therefore, E, ssh-agent, is the correct answer.

Play from 08:02 Question 6. Which of the following protocols is designed to access the video card output of a virtual machine? Here are the options. Option A. KDE. Option B. X11. Option C. Xfce. Option D. SPICE. Option E. XDMCP. Pause the video now if you want time to think about the answer.

The correct answer is D. SPICE. SPICE (Simple Protocol for Independent Computing Environments) is a protocol specifically designed to provide remote access to the video output and input of virtual machines. It enables users to view and interact with a VM's graphical display over a network. Now, why are the other options incorrect? Option A is incorrect. KDE is a desktop environment, not a display protocol. Option B is incorrect. X11 is a display server protocol for local graphical environments, not specifically designed for virtual machine video access. Option C is incorrect. Xfce is a lightweight desktop environment, not a video access protocol. Option E is incorrect. XDMCP (X Display Manager Control Protocol) is used for remote X session management, not for accessing VM video output. Therefore, D, SPICE, is the correct answer.

Play from 09:43 Question 7. Which of the following nmcli subcommands exist? (Choose two.) Here are the options. Option A. nmcli ethernet. Option B. nmcli device. Option C. nmcli wifi. Option D. nmcli address. Option E. nmcli connection. Pause the video now if you want time to think about the answer.

The correct answers are B. nmcli device, and E. nmcli connection. B. nmcli device E. nmcli connection nmcli device and nmcli connection are valid subcommands in NetworkManager's command-line interface. device manages network devices while connection manages connection profiles. ethernet, wifi, and address are not primary nmcli subcommands at the top level. Now, why are the other options incorrect? Option A is incorrect. nmcli ethernet is not a valid subcommand; device is used to manage ethernet interfaces. Option C is incorrect. nmcli wifi is not a valid subcommand; device is used to manage wifi connections. Option D is incorrect. nmcli address is not a valid subcommand for managing IP addresses. Therefore, B and E are the correct answers.

Play from 11:20 Question 8. What is true about the Hop Limit field in the IPv6 header? Here are the options. Option A. The field is not changed during the transport of a package. Option B. The field is transmitted within a hop-by-hop extension header. Option C. Each router forwarding the packet increases the field's value. Option D. Each router forwarding the packet decreases the field's value. Option E. For multicast packages, the field's value is always 1. Pause the video now if you want time to think about the answer.

The correct answer is D. Each router forwarding the packet decreases the field's value. The Hop Limit field in the IPv6 header is decremented by one at each router that forwards the packet, similar to the TTL field in IPv4. This prevents packets from circulating indefinitely in the network. The field is a regular part of the main IPv6 header, not an extension header, and is changed during transport. Now, why are the other options incorrect? Option A is incorrect. The Hop Limit field is actively modified (decremented) during packet transport. Option B is incorrect. The Hop Limit is part of the main IPv6 header, not a hop-by-hop extension header. Option C is incorrect. Each router decreases the field, not increases it. Option E is incorrect. Multicast packets do not have special Hop Limit restrictions; the field can have various values. Therefore, D, Each router forwarding the packet decreases the field's value, is the correct answer.

Play from 13:07 Question 9. What is the purpose of TCP wrapper? Here are the options. Option A. Manage and adjust bandwidth used by TCP services. Option B. Bind a network service to a TCP port. Option C. Encapsulate TCP messages in IP packets. Option D. Add SSL support to plain text TCP services. Option E. Limit access to a network service. Pause the video now if you want time to think about the answer.

The correct answer is E. Limit access to a network service. TCP wrappers (tcpd and hosts.allow/hosts.deny files) are used to limit and control access to network services based on source IP addresses and other criteria. This provides a simple access control mechanism at the TCP level. Now, why are the other options incorrect? Option A is incorrect. TCP wrappers do not manage bandwidth; they handle access control. Option B is incorrect. Binding services to ports is handled by the service configuration, not TCP wrappers. Option C is incorrect. Encapsulating TCP in IP is a network protocol function, not the purpose of TCP wrappers. Option D is incorrect. Adding SSL support requires separate configuration; TCP wrappers do not provide encryption. Therefore, E, Limit access to a network service, is the correct answer.

Play from 14:55 Question 10. Which of the following fields are available in the standard format of both the global /etc/crontab file as well as in user-specific crontab files? (Choose two.) Here are the options. Option A. Year. Option B. Minute. Option C. Username. Option D. Effective group ID. Option E. Command. Pause the video now if you want time to think about the answer.

The correct answers are B. Minute, and E. Command. B. Minute E. Command Both global /etc/crontab and user crontab files contain minute and command fields. The global /etc/crontab includes additional fields (hour, day, month, weekday, and username) that user crontabs do not have, but minute (B) and command (E) are present in both formats as standard fields. Now, why are the other options incorrect? Option A is incorrect. Year is not a standard field in either crontab format; cron does not support year scheduling. Option C is incorrect. Username is only present in /etc/crontab, not in user-specific crontab files. Option D is incorrect. Effective group ID is not a standard field in crontab files. Therefore, B and E are the correct answers.

Play from 16:33 Question 11. What output does the command seq 10 produce? Here are the options. Option A. A continuous stream of numbers increasing in increments of 10 until the command is stopped. Option B. It creates no output because a second parameter is missing. Option C. The number 0 through 9 with one number per line. Option D. The number 10 to standard output. Option E. The numbers 1 through 10 with one number per line. Pause the video now if you want time to think about the answer.

The correct answer is E. The numbers 1 through 10 with one number per line. The seq command with a single argument produces a sequence from 1 to that number. 'seq 10' outputs the numbers 1 through 10, each on a separate line. Now, why are the other options incorrect? Option A is incorrect. seq does not produce a continuous stream; it terminates after reaching the specified endpoint. Option B is incorrect. seq works with a single parameter and generates output without requiring a second parameter. Option C is incorrect. seq starts at 1, not 0, when given a single argument. Option D is incorrect. seq outputs all numbers from 1 to 10, not just the number 10 alone. Therefore, E, The numbers 1 through 10 with one number per line, is the correct answer.

Play from 18:14 Question 12. Which of the following statements is true if the UID of a regular user is identical to the GID of a group? Here are the options. Option A. UID have precedence over GIDs, therefore the user is available while the group doesn't. Option B. The user as well as the group are not available to avoid ambiguity due to the ID conflict. Option C. UIDs and GIDs are independent of each other, therefore the user as well as the group are still available. Option D. The user is the only member of the group, even if the group configuration contains other members. Option E. GIDs have precedence over UIDs, therefore the group is available while the user isn't. Pause the video now if you want time to think about the answer.

The correct answer is C. UIDs and GIDs are independent of each other, therefore the user as well as the group are still available. UIDs and GIDs operate in separate namespaces within Linux systems. A user can have the same numeric ID as a group because the system treats them independently, the kernel uses the context (user vs. group) to determine which namespace to reference, so both can coexist without conflict. Now, why are the other options incorrect? Option A is incorrect. UIDs do not have precedence over GIDs; they operate in separate namespaces. Option B is incorrect. Neither the user nor the group is made unavailable; both remain usable. Option D is incorrect. A matching UID and GID does not imply group membership. Option E is incorrect. GIDs do not have precedence over UIDs; they are independent. Therefore, C, UIDs and GIDs are independent of each other, therefore the user as well as the group are still available, is the correct answer.

Play from 20:25 Question 13. Why is the correct configuration of a system's time zone important? Here are the options. Option A. Because the timezone is included in checksum calculations and timezone changes invalidate existing checksums. Option B. Because the time zone is saved as part of the modification times of files and cannot be changed after a file is created. Option C. Because the environment variables LANG and LC_MESSAGES are, by default, set according to the time zone. Option D. Because NTP chooses servers nearby based on the configured time zone. Option E. Because the conversion of Unix timestamps to local time relies on the time zone configuration. Pause the video now if you want time to think about the answer.

The correct answer is E. Because the conversion of Unix timestamps to local time relies on the time zone configuration. Correct timezone configuration is essential because Unix timestamps (which store absolute time as seconds since epoch) must be converted to local time for display and interpretation. Without proper timezone configuration, the conversion from Unix timestamp to local time would be incorrect. Now, why are the other options incorrect? Option A is incorrect. Timezone is not included in checksum calculations, and changing timezone does not invalidate checksums. Option B is incorrect. File modification times are typically stored as Unix timestamps (timezone-independent), not in timezone-dependent format. Option C is incorrect. LANG and LC_MESSAGES environment variables are related to locale and language, not timezone. Option D is incorrect. NTP server selection is typically based on network topology and geographic proximity, not the configured timezone. Therefore, E, Because the conversion of Unix timestamps to local time relies on the time zone configuration, is the correct answer.

Play from 22:48 Question 14. What is a purpose of an SSH host key? Here are the options. Option A. It must be sent by any SSH client in addition to a user key in order to identify the client's host. Option B. It is root key by which all user SSH keys must be signed. Option C. It provides the server's identity information to connecting SSH clients. Option D. It authenticates any user that logs into a remote machine from the key's host. Option E. It is used by system services like cron, syslog or a backup job to automatically connect to remote hosts. Pause the video now if you want time to think about the answer.

The correct answer is C. It provides the server's identity information to connecting SSH clients. An SSH host key provides the server's identity to connecting SSH clients. It allows clients to verify they are connecting to the correct server and is used to prevent man-in-the- middle attacks. Now, why are the other options incorrect? Option A is incorrect. Host keys are not sent by clients; they are provided by the server to identify itself. Option B is incorrect. Host keys are not a root certificate authority for signing user keys. Option D is incorrect. Host keys do not authenticate individual users; user authentication is separate. Option E is incorrect. Host keys are not used for automatic service authentication; that requires separate mechanisms like key pairs in authorized_keys. Therefore, C, It provides the server's identity information to connecting SSH clients, is the correct answer.

Play from 24:49 Question 15. Which standardized TCP port is used by HTTPS services? Here are the options. Option A. 25. Option B. 80. Option C. 8080. Option D. 443. Option E. 636. Pause the video now if you want time to think about the answer.

The correct answer is D. 443. Port 443 is the standardized TCP port for HTTPS (HTTP Secure) services, established by IANA. This port uses TLS/SSL encryption to provide secure communication over the web. Now, why are the other options incorrect? Option A is incorrect. Port 25 is used for SMTP (Simple Mail Transfer Protocol). Option B is incorrect. Port 80 is used for HTTP (unencrypted web traffic). Option C is incorrect. Port 8080 is a common alternative HTTP port but not the standard HTTPS port. Option E is incorrect. Port 636 is used for LDAPS (LDAP Secure). Therefore, D, 443, is the correct answer.

Play from 26:21 Question 16. Which of the following information is stored in /etc/shadow for each user? Here are the options. Option A. The timestamp of the user's last login. Option B. The user's private SSH keys. Option C. The hashed password of the user. Option D. The numerical user ID (UID). Option E. The path to the user's home directory. Pause the video now if you want time to think about the answer.

The correct answer is C. The hashed password of the user. /etc/shadow contains hashed passwords for user accounts, along with password aging information like expiration dates and change history. This file is readable only by root to protect password hashes from unauthorized access. Now, why are the other options incorrect? Option A is incorrect. Last login timestamps are stored in /var/log/lastlog or wtmp, not /etc/shadow. Option B is incorrect. Private SSH keys are stored in the user's ~/.ssh directory, not /etc/shadow. Option D is incorrect. The UID is stored in /etc/passwd, not /etc/shadow. Option E is incorrect. The home directory path is stored in /etc/passwd, not /etc/shadow. Therefore, C, The hashed password of the user, is the correct answer.

Play from 28:08 Question 17. Which of the following is true regarding the command sendmail? Here are the options. Option A. With any MTA, the sendmail command must be run periodically by the cron daemon. Option B. When using systemd, sendmail is an alias to relayctl. Option C. The sendmail command prints the MTA's queue history of which mails have been sent successfully. Option D. It is only available when the sendmail MTA is installed. Option E. All common MTAs, including Postfix and Exim, provide a sendmail command. Pause the video now if you want time to think about the answer.

The correct answer is E. All common MTAs, including Postfix and Exim, provide a sendmail command. All common MTAs including Postfix, Exim, and sendmail itself provide a sendmail command or sendmail-compatible interface. This is a compatibility layer that allows applications to submit mail using the traditional sendmail command syntax regardless of which MTA is actually running on the system. Now, why are the other options incorrect? Option A is incorrect. The sendmail command does not need to be run periodically by cron; mail queues are processed by the MTA daemon. Option B is incorrect. Under systemd, sendmail is not aliased to relayctl; sendmail remains a mail submission command. Option C is incorrect. The sendmail command is used to submit mail, not to print queue history of sent messages. Option D is incorrect. The sendmail command is available on systems with other MTAs through compatibility wrappers, not just with sendmail MTA. Therefore, E, All common MTAs, including Postfix and Exim, provide a sendmail command, is the correct answer.

Play from 30:14 Question 18. What is true regarding the file ~/.forward? Here are the options. Option A. When configured correctly ~/.forward can be used to forward each incoming mail to one or more other recipients. Option B. After editing ~/.forward the user must run newaliases to make the mail server aware of the changes. Option C. Using ~/.forward, root may configure any email address whereas all other users may configure only their own addresses. Option D. As ~/.forward is owned by the MTA and not writable by the user, it must be edited using the editaliases command. Option E. By default, only ~/.forward files of users in the group mailq are processed while all other user's ~/.forward files are ignored. Pause the video now if you want time to think about the answer.

The correct answer is A. When configured correctly ~/.forward can be used to forward each incoming mail to one or more other recipients. The ~/.forward file in a user's home directory is used to forward incoming mail to one or more other email addresses. When properly formatted with recipient addresses (one per line), the mail server will forward incoming messages to those addresses. This is a standard feature supported by most MTAs including Postfix, Exim, and sendmail. Now, why are the other options incorrect? Option B is incorrect. The newaliases command is not required after editing ~/.forward; the MTA checks this file per-delivery. Option C is incorrect. ~/.forward files are per-user configurations; root cannot use ~/.forward to configure settings for other users in this manner. Option D is incorrect. ~/.forward is created and owned by the user, not the MTA, and is directly editable without special commands. Option E is incorrect. ~/.forward files are processed for all users by default; there is no restriction based on mailq group membership. Therefore, A, When configured correctly ~/.forward can be used to forward each incoming mail to one or more other recipients, is the correct answer.

Play from 32:42 Question 19. Which of the following statements about systemd-journald are true? (Choose three.) Here are the options. Option A. It is incompatible with syslog and cannot be installed on a system using regular syslog. Option B. It only processes messages of systemd and not messages of any other tools. Option C. It can pass log messages to syslog for further processing. Option D. It maintains metadata such as _UID or _PID for each message. Option E. It supports syslog facilities such as kern, user, and auth. Pause the video now if you want time to think about the answer.

The correct answers are C. It can pass log messages to syslog for further processing, and D. It maintains metadata such as _UID or _PID for each message, and E. It supports syslog facilities such as kern, user, and auth. systemd-journald can pass log messages to syslog for further processing (C), maintains metadata like _UID and _PID for each message (D), and supports syslog facilities such as kern, user, and auth (E). These features allow it to coexist with and complement traditional syslog systems. Now, why are the other options incorrect? Option A is incorrect. systemd-journald is compatible with syslog and can coexist on the same system; they are not mutually exclusive. Option B is incorrect. systemd-journald processes messages from all tools and services, not just systemd itself. Therefore, C and D and E are the correct answers.

Play from 34:38 Question 20. What is true about the file .profile in a user's home directory? Here are the options. Option A. It must be executable. Option B. It must call the binary of the login shell. Option C. It must use a valid shell script syntax. Option D. It must start with a shebang. Option E. It must be readable for its owner only. Pause the video now if you want time to think about the answer.

The correct answer is C. It must use a valid shell script syntax. The .profile file in a user's home directory must contain valid shell script syntax because it is executed by the shell during login. The file needs to be syntactically correct so the shell can parse and execute its commands without errors. Now, why are the other options incorrect? Option A is incorrect. The .profile file does not need to be executable; it is sourced by the shell, not executed as a standalone binary. Option B is incorrect. The .profile file does not need to call the binary of the login shell; it simply contains shell commands. Option D is incorrect. A shebang is not required in .profile because it is sourced by the shell, not executed directly as a script. Option E is incorrect. There is no requirement that .profile be readable only by its owner; standard permissions typically allow it to be readable by the owner. Therefore, C, It must use a valid shell script syntax, is the correct answer.

Play from 36:20 Question 21. Which of the following is true about IPv6? Here are the options. Option A. IPv6 no longer supports broadcast addresses. Option B. With IPv6, the TCP port numbers of most services have changed. Option C. IPv4 addresses can be used without any change with IPv6. Option D. IPv6 no longer supports multicast addresses. Option E. For IPv6, UDP and TCP have been replaced by the Rapid Transmission Protocol RTP. Pause the video now if you want time to think about the answer.

The correct answer is A. IPv6 no longer supports broadcast addresses. IPv6 replaced broadcast addresses with multicast addresses to improve efficiency. The all-nodes multicast address (ff02::1) serves the purpose that broadcast had in IPv4. All other options are false: IPv6 still supports multicast (option D is wrong), TCP/UDP port numbers remain unchanged (B), IPv4 addresses require translation mechanisms like dual- stack or tunneling (C), and UDP/TCP were not replaced by RTP (E). Now, why are the other options incorrect? Option B is incorrect. TCP and UDP port numbers remain the same in IPv6; only the addressing scheme changed. Option C is incorrect. IPv4 addresses cannot be used directly with IPv6; translation or dual-stack mechanisms are required. Option D is incorrect. IPv6 actually introduced multicast as a replacement for broadcast, not removed it. Option E is incorrect. RTP is an application-layer protocol; UDP and TCP remain the core transport protocols in IPv6. Therefore, A, IPv6 no longer supports broadcast addresses, is the correct answer.

Play from 38:32 Question 22. Which of the following tasks can the date command accomplish? (Choose two.) Here are the options. Option A. Set the system's date and time. Option B. Set the system's date but not the time. Option C. Calculate the time span between two dates. Option D. Print a calendar for a month or a year. Option E. Display time in a specific format. Pause the video now if you want time to think about the answer.

The correct answers are A. Set the system's date and time, and E. Display time in a specific format. A. Set the system's date and time. E. Display time in a specific format. The date command can display the current date and time and format output using format specifiers, and with appropriate permissions it can set the system date and time using the -s option. However, it cannot calculate time spans or display calendars independently. Now, why are the other options incorrect? Option B is incorrect. The date command sets both date and time together with -s, not date alone. Option C is incorrect. Date command does not calculate time spans between dates. Option D is incorrect. Calendar display is the function of the cal command, not date. Therefore, A and E are the correct answers.

Play from 40:12 Question 23. Which of the following features are provided by SPICE? (Choose two.) Here are the options. Option A. Connecting local USB devices to remote applications. Option B. Accessing graphical applications on a remote host. Option C. Replacing Xorg as local X11 server. Option D. Downloading and locally installing applications from a remote machine. Option E. Uploading and running a binary program on a remote machine. Pause the video now if you want time to think about the answer.

The correct answers are A. Connecting local USB devices to remote applications, and B. Accessing graphical applications on a remote host. SPICE (Simple Protocol for Independent Computing Environments) provides two main features: it allows connecting local USB devices to remote applications through USB redirection (A), and it enables accessing graphical applications running on a remote host over the network (B). These capabilities make SPICE useful for remote desktop and application access scenarios. Now, why are the other options incorrect? Option C is incorrect. SPICE is a remote display protocol; it does not replace Xorg as a local X11 server. Option D is incorrect. SPICE does not handle application downloading and local installation from remote machines. Option E is incorrect. SPICE is not designed for uploading and executing binary programs on remote machines. Therefore, A and B are the correct answers.

Play from 42:01 Question 24. What can be specified with useradd? (Choose two.) Here are the options. Option A. Commands the user can run using sudo. Option B. The absolute path to the user's home directory. Option C. Which printers are available for the new user. Option D. The SSH keys used to login to the new account. Option E. The numeric user ID (UID) of the user. Pause the video now if you want time to think about the answer.

The correct answers are B. The absolute path to the user's home directory, and E. The numeric user ID (UID) of the user. useradd can specify the home directory path using -d and the numeric UID using -u. These are standard options for account creation that define fundamental user properties stored in /etc/passwd. Now, why are the other options incorrect? Option A is incorrect. sudo permissions are managed through /etc/sudoers, not via useradd. Option C is incorrect. Printer availability is not configured through useradd. Option D is incorrect. SSH keys are not configured during user creation with useradd; they are set up in ~/.ssh after account creation. Therefore, B and E are the correct answers.

Play from 43:36 Question 25. Which of the following environment variables can be defined in locale.conf? (Choose two.) Here are the options. Option A. LC_ALL. Option B. LC_USERNAME. Option C. LC_UTF8. Option D. LC_GEOGRAPHY. Option E. LC_TIME. Pause the video now if you want time to think about the answer.

The correct answers are A. LC_ALL, and E. LC_TIME. A. LC_ALL E. LC_TIME The /etc/locale.conf file supports standard locale environment variables including LC_ALL (which overrides all other LC_* settings) and LC_TIME (which controls date and time formatting). These are part of the POSIX locale specification that systemd's locale system manages. Now, why are the other options incorrect? Option B is incorrect. LC_USERNAME is not a valid locale variable; there is no standard locale category for usernames. Option C is incorrect. LC_UTF8 is not a valid variable; character encoding is handled differently in modern Linux systems. Option D is incorrect. LC_GEOGRAPHY is not a standard POSIX locale variable. Therefore, A and E are the correct answers.

Play from 45:07 Question 26. Which of the following getent invocations lists all existing users? Here are the options. Option A. getent homes. Option B. getent uids. Option C. getent passwd. Option D. getent users. Option E. getent logins. Pause the video now if you want time to think about the answer.

The correct answer is C. getent passwd. The getent command queries system databases. The passwd database contains all user account information including usernames, UIDs, home directories, and shells. The command 'getent passwd' lists all existing users from the passwd database. Now, why are the other options incorrect? Option A is incorrect. getent homes is not a valid getent database name. Option B is incorrect. getent uids is not a valid getent database name; use passwd instead. Option D is incorrect. getent users is not a valid getent database name; the correct database is passwd. Option E is incorrect. getent logins is not a valid getent database name. Therefore, C, getent passwd, is the correct answer.

Play from 46:37 Question 27. Which of the following states can NetworkManager show regarding the system's network connectivity? (Choose two.) Here are the options. Option A. up. Option B. portal. Option C. full. Option D. login-required. Option E. firewalled. Pause the video now if you want time to think about the answer.

The correct answers are B. portal, and C. full. B. portal C. full NetworkManager reports connectivity states that include 'portal' (when behind a captive portal) and 'full' (when fully connected to the internet). These are the two standard connectivity states that indicate restricted and unrestricted internet access respectively. Options 'up', 'login-required', and 'firewalled' are not valid NetworkManager connectivity state keywords. Now, why are the other options incorrect? Option A is incorrect. 'up' is not a NetworkManager connectivity state; it refers to interface status, not internet connectivity. Option D is incorrect. 'login-required' is not a standard NetworkManager connectivity state keyword. Option E is incorrect. 'firewalled' is not a standard NetworkManager connectivity state keyword. Therefore, B and C are the correct answers.

Play from 48:10 Question 28. How do shadow passwords improve the password security in comparison to standard no-shadow password? Here are the options. Option A. Regular users do not have access to the password hashes of shadow passwords. Option B. Every shadow password is valid for 45 days and must be changed afterwards. Option C. The system's host key is used to encrypt all shadow passwords. Option D. Shadow passwords are always combined with a public key that has to match the user's private key. Option E. Shadow passwords are stored in plain text and can be checked for weak passwords. Pause the video now if you want time to think about the answer.

The correct answer is A. Regular users do not have access to the password hashes of shadow passwords. Shadow passwords improve security by storing password hashes in the `/etc/shadow` file, which is readable only by root, whereas standard passwords in `/etc/passwd` are readable by all users. This prevents regular users from accessing password hashes for offline cracking attempts. The other options describe incorrect or non-existent features of shadow passwords. Now, why are the other options incorrect? Option B is incorrect. Shadow passwords do not have an automatic 45-day validity period by default Option C is incorrect. Shadow passwords are not encrypted with the system's host key; they use standard password hashing Option D is incorrect. Shadow passwords are not combined with public/private key pairs Option E is incorrect. Shadow passwords are hashed, not stored in plain text Therefore, A, Regular users do not have access to the password hashes of shadow passwords, is the correct answer.

Play from 50:15 Question 29. Which of the following commands can be used to limit the amount of memory a user may use? Here are the options. Option A. umask. Option B. usermod. Option C. passwd. Option D. ulimit. Option E. chage. Pause the video now if you want time to think about the answer.

The correct answer is D. ulimit. The ulimit command sets resource limits for shell processes and child processes, including memory usage. It can restrict the amount of memory a user may use through options like -v for virtual memory. Now, why are the other options incorrect? Option A is incorrect. umask controls file creation permissions, not memory usage. Option B is incorrect. usermod modifies user account properties but does not directly limit memory usage. Option C is incorrect. passwd manages user passwords and does not control resource limits. Option E is incorrect. chage manages password expiration settings, not memory resource limits. Therefore, D, ulimit, is the correct answer.

Play from 51:40 Question 30. Which of the following changes may occur as a consequence of using the command ip? (Choose three.) Here are the options. Option A. Network interfaces may become active or inactive. Option B. New name servers may be added to the resolver configuration. Option C. The system's host name may change. Option D. IP addresses may change. Option E. The routing table may change. Pause the video now if you want time to think about the answer.

The correct answers are A. Network interfaces may become active or inactive, and D. IP addresses may change, and E. The routing table may change. The ip command can activate or deactivate network interfaces, modify IP addresses, and change the routing table. These are its primary use cases for dynamic network configuration. The ip command does not modify the resolver configuration (nameservers in resolv.conf) or change the system hostname; these require other tools. Now, why are the other options incorrect? Option B is incorrect. The ip command does not modify resolver configuration or add nameservers to /etc/resolv.conf. Option C is incorrect. The ip command cannot change the system hostname; the hostname command or hostnamectl is used for that. Therefore, A and D and E are the correct answers.

Play from 53:25 Question 31. What information related to a user account is modified using the chage command? Here are the options. Option A. Default ownership for new files. Option B. Group membership. Option C. Set of commands available to the user. Option D. Password expiry information. Option E. Default permissions for new files. Pause the video now if you want time to think about the answer.

The correct answer is D. Password expiry information. The `chage` command is specifically designed to modify password expiry information for user accounts, including password expiration dates, grace periods, and last password change dates. It does not affect file ownership defaults, group membership, available commands, or file permissions. Now, why are the other options incorrect? Option A is incorrect. Default file ownership is controlled by umask and is not modified by chage Option B is incorrect. Group membership is managed with usermod or groupmod, not chage Option C is incorrect. Available commands are controlled by the shell assignment and PATH, not chage Option E is incorrect. Default file permissions are controlled by umask, not by chage Therefore, D, Password expiry information, is the correct answer.

Play from 55:02 Question 32. How can a specific user be prevented from scheduling tasks with at? Here are the options. Option A. By adding the specific user to the /etc/at.allow file. Option B. By adding the specific user to the [deny] section in the /etc/atd.conf file. Option C. By adding the specific user to the nojobs group. Option D. By adding the specific user to the /etc/at.deny file. Option E. By executing the atd --deny [user] command. Pause the video now if you want time to think about the answer.

The correct answer is D. By adding the specific user to the /etc/at.deny file. Users are prevented from scheduling tasks with the `at` command by adding their username to the /etc/at.deny file. This file contains a list of users explicitly denied access to the at scheduler, with one username per line. Now, why are the other options incorrect? Option A is incorrect. The /etc/at.allow file works oppositely, users listed in it are allowed to use at; if this file exists, only listed users can schedule tasks. Option B is incorrect. There is no /etc/atd.conf file with a [deny] section; at access control uses .allow and .deny files. Option C is incorrect. There is no nojobs group for controlling at access; access control is file-based, not group-based. Option E is incorrect. There is no atd --deny command; at access control is managed through configuration files, not command-line arguments. Therefore, D, By adding the specific user to the /etc/at.deny file, is the correct answer.

Play from 57:10 Question 33. What is the purpose of the iconv command? Here are the options. Option A. It converts bitmap images from one format to another such as PNG to JPEG. Option B. It verifies that the root directory tree compiles to all conventions from the Filesystem Hierarchy Standard (FHS). Option C. It converts files from one character set to an other. Option D. It changes the mode of an inode in the ext4 filesystem. Option E. It displays additional meta information from icon files ending in .ico. Pause the video now if you want time to think about the answer.

The correct answer is C. It converts files from one character set to an other. The iconv command is a character set conversion utility. It converts text files from one character encoding to another, such as from UTF-8 to ISO-8859-1 or vice versa. This is its primary and sole purpose. Now, why are the other options incorrect? Option A is incorrect. iconv does not convert image formats; that would be a tool like ImageMagick. Option B is incorrect. iconv has no involvement with FHS compliance checking; that would be a specialized filesystem tool. Option D is incorrect. iconv does not modify inode modes; the chmod command handles file permissions and inode attributes. Option E is incorrect. iconv does not process icon files or extract metadata from .ico files; that would be an icon-specific tool. Therefore, C, It converts files from one character set to an other, is the correct answer.

Play from 59:11 Question 34. Which file inside the CUPS configuration directory contains the settings of the printers? Here are the options. Option A. cups-devices.conf. Option B. snmp.conf. Option C. printers.conf. Option D. printcap.conf. Option E. cupsd.conf. Pause the video now if you want time to think about the answer.

The correct answer is C. printers.conf. The printers.conf file in the CUPS configuration directory (/etc/cups/) contains the settings and configuration for all installed printers on the system. This is the primary file where printer definitions, capabilities, and settings are stored. Now, why are the other options incorrect? Option A is incorrect. cups-devices.conf is not a standard CUPS configuration file for printer settings. Option B is incorrect. snmp.conf is used for SNMP protocol settings, not printer configuration. Option D is incorrect. printcap.conf is not a CUPS configuration file; printcap is a legacy Berkeley printing format. Option E is incorrect. cupsd.conf contains daemon settings and policies, not individual printer configurations. Therefore, C, printers.conf, is the correct answer.

Play from 1:00:51 Question 35. On a Linux workstation, the route command takes a long time before printing out the routing table. Which of the following errors does that indicate? Here are the options. Option A. The local routing information may be corrupted and must be re-validated using a routing protocol. Option B. One of the routers in the routing table is not available which causes the automatic router failure detection mechanism (ARFD) to wait for a timeout. Option C. There may accidentally be more than one default router in which case a default router election has to be done on the network in order to choose one router as the default. Option D. The Linux Kernel Routing Daemon (LKRD) is not running and should be started using its init script or systemd unit. Option E. DNS resolution may not be working as route by default tries to resolve names of routers and destinations and may run into a timeout. Pause the video now if you want time to think about the answer.

The correct answer is E. DNS resolution may not be working as route by default tries to resolve names of routers and destinations and may run into a timeout. The route command displays a delay when DNS resolution is not working properly because it attempts to resolve hostnames of routers and destinations by default, causing timeouts when DNS queries fail. The other options describe non-existent mechanisms or incorrect troubleshooting approaches for this symptom. Now, why are the other options incorrect? Option A is incorrect. Automatic route re-validation is not a standard Linux feature that would cause this delay. Option B is incorrect. ARFD (Automatic Router Failure Detection) is not a standard Linux kernel mechanism. Option C is incorrect. Default router election is not an automatic workstation-level feature in this manner. Option D is incorrect. The Linux Kernel Routing Daemon (LKRD) is not a real daemon; delay is not caused by missing routing daemons. Therefore, E, DNS resolution may not be working as route by default tries to resolve names of routers and destinations and may run into a timeout, is the correct answer.

Play from 1:03:24 Question 36. What is the purpose of a screen reader? Here are the options. Option A. It manages virtual keyboards on touch screen displays. Option B. It reads the parameters of the attached monitors and creates an appropriate X11 configuration. Option C. It displays lines and markers to help people use speed reading techniques. Option D. It manages and displays files that contain e-books. Option E. It reads displayed text to accommodate the needs of blind or visually impaired people. Pause the video now if you want time to think about the answer.

The correct answer is E. It reads displayed text to accommodate the needs of blind or visually impaired people. A screen reader is assistive technology software that reads displayed text aloud, converting visual information into audio output. This enables blind and visually impaired users to access computer systems and applications by hearing descriptions of screen content, including text, buttons, menus, and other interface elements. Now, why are the other options incorrect? Option A is incorrect. Screen readers do not manage virtual keyboards on touch screens; that is a different accessibility feature. Option B is incorrect. Screen readers do not configure X11 based on monitor parameters. Option C is incorrect. Screen readers are not tools for speed reading techniques or visual markers. Option D is incorrect. Screen readers do not specifically manage or display e-books. Therefore, E, It reads displayed text to accommodate the needs of blind or visually impaired people, is the correct answer.

Play from 1:05:25 Question 37. How many IP addresses can be used for unique hosts inside the IPv4 subnet 192.168.2.128/26? Here are the options. Option A. 6. Option B. 14. Option C. 30. Option D. 62. Option E. 126. Pause the video now if you want time to think about the answer.

The correct answer is D. 62. A /26 subnet has 26 bits for the network and 32-26=6 bits for hosts. With 6 host bits, there are 2^6=64 total addresses. Subtracting 2 addresses (network and broadcast), 64-2=62 usable host addresses remain. Now, why are the other options incorrect? Option A is incorrect. 6 is the number of host bits, not usable addresses. Option B is incorrect. 14 would result from a /28 subnet, not /26. Option C is incorrect. 30 is the usable count for a /27 subnet. Option E is incorrect. 126 is the usable count for a /25 subnet. Therefore, D, 62, is the correct answer.

Play from 1:07:02 Question 38. Which of the following are syslog facilities? (Choose two.) Here are the options. Option A. local5. Option B. accounting. Option C. mail. Option D. postmaster. Option E. remote. Pause the video now if you want time to think about the answer.

The correct answers are A. local5, and C. mail. Both 'local5' and 'mail' are valid syslog facilities. Syslog facilities are predefined categories used to classify log messages. The 'mail' facility is one of the standard facilities, and 'local0' through 'local7' are custom facilities available for user-defined purposes, making 'local5' a valid facility as well. Now, why are the other options incorrect? Option B is incorrect. accounting is not a defined syslog facility. Option D is incorrect. postmaster is not a syslog facility; it refers to an email role. Option E is incorrect. remote is not a standard syslog facility designation. Therefore, A and C are the correct answers.

Play from 1:08:22 Question 39. If neither cron.allow nor cron.deny exist in /etc/, which of the following is true? Here are the options. Option A. Without additional configuration, all users may create user specific crontabs. Option B. Without additional configuration, only root may create user specific crontabs. Option C. The cron daemon will refuse to start and report missing files in the system's logfile. Option D. When a user creates a user specific crontab the system administrator must approve it explicitly. Option E. The default settings of /etc/crond.conf define whether or not user specific crontabs are generally allowed or not. Pause the video now if you want time to think about the answer.

The correct answer is B. Without additional configuration, only root may create user specific crontabs. When neither /etc/cron.allow nor /etc/cron.deny exist, the default behavior of the cron daemon is to deny all users except root from creating user-specific crontabs. This is the safest default configuration, restricting cron access to the root user only. Now, why are the other options incorrect? Option A is incorrect. This is the opposite of the default behavior; by default, users are restricted, not allowed. Option C is incorrect. The cron daemon will still start and function normally even without these files; it applies default restrictions instead of failing. Option D is incorrect. The cron daemon does not require explicit system administrator approval for each crontab; it applies predetermined access rules. Option E is incorrect. The file /etc/crond.conf does not exist or control this behavior; the default is hardcoded into the cron daemon itself. Therefore, B, Without additional configuration, only root may create user specific crontabs, is the correct answer.

Play from 1:10:40 Question 40. Which of the following fields can be found in the /etc/group file? (Choose two.) Here are the options. Option A. The home directory of the group. Option B. The list of users that belong to the group. Option C. The name of the group. Option D. The default group ACL. Option E. The description of the group. Pause the video now if you want time to think about the answer.

The correct answers are B. The list of users that belong to the group, and C. The name of the group. B. The list of users that belong to the group. C. The name of the group. The /etc/group file contains four colon-separated fields: group name, group password (usually x), group ID (GID), and a comma-separated list of users belonging to the group. The group name (field 1) and user list (field 4) are standard fields that can be found in every /etc/group entry. Now, why are the other options incorrect? Option A is incorrect. Groups do not have home directories; home directories are a user attribute found in /etc/passwd. Option D is incorrect. There is no default group ACL field in /etc/group; ACLs are managed separately by the filesystem. Option E is incorrect. The /etc/group file does not contain group descriptions; descriptions are found in the GECOS field of /etc/passwd for users, but groups lack this field. Therefore, B and C are the correct answers.

Play from 1:12:29 Question 41. After editing the TCP wrapper configuration to grant specific hosts access to a service, when do these changes become effective? Here are the options. Option A. The new configuration becomes effective after restarting the respective service. Option B. The new configuration becomes effective at the next system reboot. Option C. The new configuration becomes effective when the last established connection to the service is closed. Option D. The new configuration becomes effective after restarting the tcpd service. Option E. The new configuration becomes effective immediately for all new connections. Pause the video now if you want time to think about the answer.

The correct answer is E. The new configuration becomes effective immediately for all new connections. TCP wrapper configuration changes in `/etc/hosts.allow` and `/etc/hosts.deny` take effect immediately for all new connections without requiring service or system restarts. The TCP wrapper checks these files for each new incoming connection, so changes are applied dynamically to new connections as they arrive. Now, why are the other options incorrect? Option A is incorrect. Restarting the service is not necessary for TCP wrapper changes Option B is incorrect. System reboot is not required for TCP wrapper configuration changes Option C is incorrect. Changes do not wait for existing connections to close Option D is incorrect. There is no separate tcpd service to restart; TCP wrappers are part of the connection handling mechanism Therefore, E, The new configuration becomes effective immediately for all new connections, is the correct answer.

Play from 1:14:29 Question 42. Which of the following connection types, as seen in nmcli connection show, may exist in NetworkManager? (Choose three.) Here are the options. Option A. tcp. Option B. ethernet. Option C. wifi. Option D. ipv6. Option E. bridge. Pause the video now if you want time to think about the answer.

The correct answers are B. ethernet, and C. wifi, and E. bridge. B. ethernet C. wifi E. bridge NetworkManager supports ethernet (wired connections), wifi (wireless connections), and bridge (virtual bridge connections) as connection types. These are all recognized connection types visible in nmcli connection show output. tcp is a transport protocol rather than a connection type in NetworkManager. ipv6 is an IP protocol version, not a connection type. Now, why are the other options incorrect? Option A is incorrect. TCP is a transport layer protocol, not a NetworkManager connection type. Option D is incorrect. IPv6 is a protocol version, not a NetworkManager connection type in the sense of connection media. Therefore, B and C and E are the correct answers.

Play from 1:16:03 Question 43. What information is shown by the echo $? command? Here are the options. Option A. The process ID of the echo command. Option B. The exit value of the command executed immediately before echo. Option C. The process ID which will be used for the next command. Option D. The exit value of the echo command. Option E. The process ID of the current shell. Pause the video now if you want time to think about the answer.

The correct answer is B. The exit value of the command executed immediately before echo. The special parameter $? contains the exit status (return code) of the last command executed. When 'echo $?' is run, it displays the exit status of the command that was executed immediately before the echo command, where 0 typically means success and non-zero values indicate various errors. Now, why are the other options incorrect? Option A is incorrect. The process ID of the echo command would be represented by $$ (current shell) or $! (last background process), not $?. Option C is incorrect. There is no special variable that shows the process ID for the next command; process IDs are assigned by the system. Option D is incorrect. While echo $? does display the exit value of echo (which is usually 0), it actually shows the exit value of the previously executed command, not echo itself. Option E is incorrect. The process ID of the current shell is represented by $$, not $?. Therefore, B, The exit value of the command executed immediately before echo, is the correct answer.

Play from 1:18:14 Question 44. Which command is used to set restrictions on the size of a core file that is created for a user when a program crashes? Here are the options. Option A. core. Option B. edquota. Option C. quota. Option D. ulimit. Option E. ktrace. Pause the video now if you want time to think about the answer.

The correct answer is D. ulimit. The `ulimit` command is used to set resource limits for users and processes, including the maximum size of core files created when a program crashes. The `core` command does not exist, `edquota` manages disk quotas, `quota` displays disk usage, and `ktrace` is used for process tracing. Now, why are the other options incorrect? Option A is incorrect. core is not a valid command for setting resource limits Option B is incorrect. edquota is used to manage disk quotas, not core file size limits Option C is incorrect. quota displays disk quota information, not core file limits Option E is incorrect. ktrace is used for kernel tracing of processes, not core file restrictions Therefore, D, ulimit, is the correct answer.

Play from 1:19:44 Question 45. What is true regarding public and private SSH keys? (Choose two.) Here are the options. Option A. For each user account, there is exactly one key pair that can be used to log into that account. Option B. The private key must never be revealed to anyone. Option C. Several different public keys may be generated for the same private key. Option D. To maintain the private key's confidentiality, the SSH key pair must be created by its owner. Option E. To allow remote logins, the user's private key must be copied to the remote server. Pause the video now if you want time to think about the answer.

The correct answers are B. The private key must never be revealed to anyone, and D. To maintain the private key's confidentiality, the SSH key pair must be created by its owner. The private key must never be revealed to anyone (B) because it is used for authentication and decryption-disclosure would compromise the account's security. Additionally, each user should create their own key pair (D) to maintain the private key's confidentiality and ensure that only the owner has access to it. Option A is wrong because multiple key pairs can be used per account. Option C is wrong because one private key corresponds to one public key. Option E is wrong because the private key stays on the local machine; only the public key is copied to remote servers. Now, why are the other options incorrect? Option A is incorrect. Multiple key pairs can be created for a single user account Option C is incorrect. Each private key corresponds to exactly one public key, not multiple Option E is incorrect. The private key must remain on the local machine; only the public key is copied to remote servers Therefore, B and D are the correct answers.

Play from 1:21:55 Question 46. Which of the following situations is observed and corrected by an NTP client? Here are the options. Option A. The skew in time between the system clock and the computer's hardware clock. Option B. The physical location and the timezone configuration. Option C. Changes in the time zone of the current computer's location. Option D. Adjustment needed to support Daylight Saving Time. Option E. The skew in time between the system clock and the reference clock. Pause the video now if you want time to think about the answer.

The correct answer is E. The skew in time between the system clock and the reference clock. An NTP client observes and corrects the skew (difference) in time between the system clock and a reference clock (the authoritative NTP server). This is the primary purpose of NTP, to synchronize local system time with accurate remote time sources. Now, why are the other options incorrect? Option A is incorrect. NTP clients synchronize system time with remote sources, not the hardware clock directly; the hardware clock is separate from NTP's function. Option B is incorrect. NTP does not determine or correct physical location or timezone configuration. Option C is incorrect. NTP does not automatically detect or correct timezone changes; this is a system administration function. Option D is incorrect. NTP does not handle Daylight Saving Time adjustments; that is managed by timezone configuration and the system. Therefore, E, The skew in time between the system clock and the reference clock, is the correct answer.

Play from 1:23:51 Question 47. Which option in the chrony configuration file changes the initial interval of polls to a NTP server in order to speed up the initial synchronization? Here are the options. Option A. iburst. Option B. quickstart. Option C. fast. Option D. fsync. Option E. flood. Pause the video now if you want time to think about the answer.

The correct answer is A. iburst. The iburst option in the chrony configuration file speeds up the initial synchronization by sending a burst of eight packets instead of the standard single packet during the initial connection phase. This allows faster convergence to the correct time. Now, why are the other options incorrect? Option B is incorrect. quickstart is not a standard chrony configuration option. Option C is incorrect. fast is not a standard chrony option for initial synchronization. Option D is incorrect. fsync is not a chrony configuration option. Option E is incorrect. flood is not a standard chrony option; iburst is the correct option for burst polling. Therefore, A, iburst, is the correct answer.

Play from 1:25:18 Question 48. Which of the following protocols is related to the term open relay? Here are the options. Option A. SMTP. Option B. POP3. Option C. NTP. Option D. IMAP. Option E. LDAP. Pause the video now if you want time to think about the answer.

The correct answer is A. SMTP. SMTP (Simple Mail Transfer Protocol) is the protocol most associated with open relay issues. An open relay is an SMTP server that allows unauthenticated users to send mail through it, which is commonly exploited for spam distribution. Now, why are the other options incorrect? Option B is incorrect. POP3 is for receiving mail, not for relaying messages. Option C is incorrect. NTP is the Network Time Protocol, unrelated to mail relay. Option D is incorrect. IMAP is for receiving and managing mail, not for relaying messages. Option E is incorrect. LDAP is a directory protocol, not related to mail relay. Therefore, A, SMTP, is the correct answer.

Play from 1:26:47 Question 49. Which of the following commands lists all queued print jobs? Here are the options. Option A. lpd. Option B. lpr. Option C. lp. Option D. lsq. Option E. lpq. Pause the video now if you want time to think about the answer.

The correct answer is E. lpq. lpq is the standard command to list all queued print jobs in Linux/Unix systems. It displays information about jobs waiting in the print queue. Now, why are the other options incorrect? Option A is incorrect. lpd is the line printer daemon (background service), not a command to list jobs. Option B is incorrect. lpr is used to submit print jobs to the queue, not to list them. Option C is incorrect. lp is an alternative print command for submitting jobs, not for listing them. Option D is incorrect. lsq is not a standard Linux command for print queue management. Therefore, E, lpq, is the correct answer.

Play from 1:28:08 Question 50. Which of the following options in the chrony configuration file define remote time sources? (Choose two.) Here are the options. Option A. source. Option B. clock. Option C. remote. Option D. pool. Option E. server. Pause the video now if you want time to think about the answer.

The correct answers are D. pool, and E. server. D. pool E. server In chrony configuration files, the 'server' and 'pool' directives are used to define remote NTP time sources. The 'server' directive specifies a single remote NTP server, while 'pool' specifies a pool of NTP servers. Both are standard directives for configuring time synchronization sources in chrony. Now, why are the other options incorrect? Option A is incorrect. The 'source' directive is not a valid chrony configuration option for defining remote time sources. Option B is incorrect. The 'clock' directive is not used in chrony configuration to define remote time sources. Option C is incorrect. The 'remote' directive does not exist in chrony configuration syntax. Therefore, D and E are the correct answers.