LPI 102-500 Practice Test 58
Question 570
A helpdesk escalation describes this Linux behavior: A path crosses several routers and packet loss occurs, yet staff uses only a single local ping to decide which intermediate hop failed. Which TWO complementary steps provide the best corrective action and its most direct diagnostic verification? Select TWO answers.
- Compare ping to gateway and destination, traceroute hop responses, DNS resolution and service-port connectivity.
- Test local interface, gateway, remote address and transport in stages using ping, traceroute or tracepath, interpreting filtering limits accurately.
- Inspect `ip -6 addr`, `ip -6 route`, router advertisements and a scoped ping6 to the link-local destination.
- Inspect and configure the appropriate `nmcli device wifi` and connection profile settings with approved authentication, secrets and autoconnect preferences.
- Treat the first traceroute asterisk as conclusive proof that the corresponding router is physically down and every higher-layer service is broken.
Explanation
Correct Answers
A:Most direct verification evidence: Compare ping to gateway and destination, traceroute hop responses, DNS resolution and service-port connectivity. Linux principle: IP-layer echo reachability and hop-by-hop TTL diagnostics can locate routing failures but may be affected by ICMP filtering and do not guarantee application success.
B:Recommended administrative action: Test local interface, gateway, remote address and transport in stages using ping, traceroute or tracepath, interpreting filtering limits accurately. Linux principle: IP-layer echo reachability and hop-by-hop TTL diagnostics can locate routing failures but may be affected by ICMP filtering and do not guarantee application success.
Incorrect Answers
C:This alternative addresses IPv6 addressing link-local scope and prefix rules, not the specific issue of Ping, traceroute and staged path isolation: Inspect `ip -6 addr`, `ip -6 route`, router advertisements and a scoped ping6 to the link-local destination.
D:That option would inspect and configure the appropriate `nmcli device wifi` and connection profile settings with approved authentication, secrets and autoconnect preferences, but it addresses a different concern. IP-layer echo reachability and hop-by-hop TTL diagnostics can locate routing failures but may be affected by ICMP filtering and do not guarantee application success.
E:This shortcut is unsafe for the present Linux issue: Treat the first traceroute asterisk as conclusive proof that the corresponding router is physically down and every higher-layer service is broken. IP-layer echo reachability and hop-by-hop TTL diagnostics can locate routing failures but may be affected by ICMP filtering and do not guarantee application success.
Question 571
An operations handoff identifies this problem: An administrator sees a valid DNS answer through `dig @server` but a normal application still fails due to its own host resolver configuration. Which administrative step is the MOST appropriate way to resolve this issue? Select ONE best answer.
- Calculate network and host ranges from the prefix length and configure correct address, subnet prefix and route or gateway for remote destinations.
- Use `ip link` and `ip addr` to examine and adjust temporary interface state and repair the persistent manager configuration where required.
- Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer.
- Use dig or host to test chosen DNS servers explicitly and separately verify normal resolver lookup through getent and local client settings.
Explanation
Correct Answer
D:Recommended administrative action: Use dig or host to test chosen DNS servers explicitly and separately verify normal resolver lookup through getent and local client settings.
Incorrect Answers
A:This alternative addresses IPv4 CIDR network masks and subnet reachability, not the specific issue of DNS query tools and authoritative versus recursive answers: Calculate network and host ranges from the prefix length and configure correct address, subnet prefix and route or gateway for remote destinations. Linux principle: A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration. Appropriate response: Use dig or host to test chosen DNS servers explicitly and separately verify normal resolver lookup through getent and local client settings. Root-cause evidence: Compare `dig name`, `dig @server name`, `host name`, `getent ahosts name` and the resolver settings. Independent acceptance: The application's normal lookup resolves the intended name from the approved resolver with no split-horizon mismatch.
B:That option would use `ip link` and `ip addr` to examine and adjust temporary interface state and repair the persistent manager configuration where required, but it addresses a different concern. A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
C:That option would assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer, but it addresses a different concern. A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
Question 572
A team maintaining a Linux host reports: An administrator sees a valid DNS answer through `dig @server` but a normal application still fails due to its own host resolver configuration. Which Linux behavior or technical principle BEST explains why the issue occurs? Select ONE best answer.
- TCP, UDP and ICMP have different roles; UDP does not inherently acknowledge or reorder delivery and ICMP ping behavior does not establish application TCP availability.
- A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
- Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer.
- A transient hostname change is not necessarily persisted; hostname resolution and the configured system hostname are related but distinct functions.
Explanation
Correct Answer
B:Relevant Linux operating principle: A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
Incorrect Answers
A:This alternative addresses TCP versus UDP versus ICMP diagnostics, not the specific issue of DNS query tools and authoritative versus recursive answers: TCP, UDP and ICMP have different roles; UDP does not inherently acknowledge or reorder delivery and ICMP ping behavior does not establish application TCP availability. Linux principle: A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration. Appropriate response: Use dig or host to test chosen DNS servers explicitly and separately verify normal resolver lookup through getent and local client settings. Root-cause evidence: Compare `dig name`, `dig @server name`, `host name`, `getent ahosts name` and the resolver settings. Independent acceptance: The application's normal lookup resolves the intended name from the approved resolver with no split-horizon mismatch.
C:That option would assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer, but it addresses a different concern. Independent acceptance: The application's normal lookup resolves the intended name from the approved resolver with no split-horizon mismatch.
D:This alternative addresses Hostnamectl and durable host identification, not the specific issue of DNS query tools and authoritative versus recursive answers: A transient hostname change is not necessarily persisted; hostname resolution and the configured system hostname are related but distinct functions. Linux principle: A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration. Appropriate response: Use dig or host to test chosen DNS servers explicitly and separately verify normal resolver lookup through getent and local client settings. Root-cause evidence: Compare `dig name`, `dig @server name`, `host name`, `getent ahosts name` and the resolver settings. Independent acceptance: The application's normal lookup resolves the intended name from the approved resolver with no split-horizon mismatch.
Question 573
While verifying a Linux change request, an engineer finds: An administrator sees a valid DNS answer through `dig @server` but a normal application still fails due to its own host resolver configuration. Which evidence or command result MOST directly tests the suspected root cause? Select ONE best answer.
- Compare `dig name`, `dig @server name`, `host name`, `getent ahosts name` and the resolver settings.
- Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer.
- Inspect `ip -br link`, `ip address show`, carrier state and manager logs before and after a controlled interface activation.
- Inspect interface addresses and routing, compare to the exact RFC1918 CIDR ranges, and test external source visibility where permitted.
Explanation
Correct Answer
A:Most direct verification evidence: Compare `dig name`, `dig @server name`, `host name`, `getent ahosts name` and the resolver settings.
Incorrect Answers
B:This shortcut is unsafe for the present Linux issue: Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer. It cannot establish a safe correction.
C:That option would inspect `ip -br link`, `ip address show`, carrier state and manager logs before and after a controlled interface activation, but it addresses a different concern. A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
D:That option would inspect interface addresses and routing, compare to the exact RFC1918 CIDR ranges, and test external source visibility where permitted, but it addresses a different concern. A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
Question 574
A Linux administrator investigates the following system incident: An administrator sees a valid DNS answer through `dig @server` but a normal application still fails due to its own host resolver configuration. Which observed outcome BEST confirms a successful and properly scoped correction? Select ONE best answer.
- The selected transport matches reliability requirements and diagnostics distinguish blocked ICMP from a reachable TCP service.
- The application's normal lookup resolves the intended name from the approved resolver with no split-horizon mismatch.
- The intended profile reconnects after a restart with the correct address, gateway and DNS while unrelated devices remain intact.
- Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer.
Explanation
Correct Answer
B:Observable acceptance criterion: The application's normal lookup resolves the intended name from the approved resolver with no split-horizon mismatch.
Incorrect Answers
A:This alternative addresses TCP versus UDP versus ICMP diagnostics, not the specific issue of DNS query tools and authoritative versus recursive answers: The selected transport matches reliability requirements and diagnostics distinguish blocked ICMP from a reachable TCP service. Linux principle: A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration. Appropriate response: Use dig or host to test chosen DNS servers explicitly and separately verify normal resolver lookup through getent and local client settings. Root-cause evidence: Compare `dig name`, `dig @server name`, `host name`, `getent ahosts name` and the resolver settings. Independent acceptance: The application's normal lookup resolves the intended name from the approved resolver with no split-horizon mismatch.
C:This alternative addresses NetworkManager persistent wired connection profiles, not the specific issue of DNS query tools and authoritative versus recursive answers: The intended profile reconnects after a restart with the correct address, gateway and DNS while unrelated devices remain intact. Linux principle: A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration. Appropriate response: Use dig or host to test chosen DNS servers explicitly and separately verify normal resolver lookup through getent and local client settings. Root-cause evidence: Compare `dig name`, `dig @server name`, `host name`, `getent ahosts name` and the resolver settings. Independent acceptance: The application's normal lookup resolves the intended name from the approved resolver with no split-horizon mismatch.
D:This shortcut is unsafe for the present Linux issue: Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer. A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
Question 575
On a production Linux workstation or server, a technician observes: An administrator sees a valid DNS answer through `dig @server` but a normal application still fails due to its own host resolver configuration. Which misleading assumption MOST directly contributes to this failure and should be rejected? Select ONE best answer.
- Assume UDP automatically retries dropped packets and that failure of ping always means every TCP application on the destination is unreachable.
- Assume /26 means the first 26 hosts belong to one network and that all addresses with the same first three dotted-quad octets are local.
- Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer.
- Use only a transient `ip addr add` command and expect NetworkManager to persist it automatically after every reboot.
Explanation
Correct Answer
C:Reject this specific misconception: Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer. It incorrectly assumes behavior that conflicts with the observed Linux conditions.
Incorrect Answers
A:That option would assume UDP automatically retries dropped packets and that failure of ping always means every TCP application on the destination is unreachable, but it addresses a different concern. A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
B:That option would assume /26 means the first 26 hosts belong to one network and that all addresses with the same first three dotted-quad octets are local, but it addresses a different concern. A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
D:That option would use only a transient `ip addr add` command and expect NetworkManager to persist it automatically after every reboot, but it addresses a different concern. A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
Question 576
During an LPIC-1 practice lab, the operator encounters this condition: A domain returns NXDOMAIN from a corporate resolver while an engineer claims that using `host` against a public resolver proves the local client is correctly configured. Which administrative step is the MOST appropriate way to resolve this issue? Select ONE best answer.
- Use dig or host to test chosen DNS servers explicitly and separately verify normal resolver lookup through getent and local client settings.
- Inspect and configure the appropriate `nmcli device wifi` and connection profile settings with approved authentication, secrets and autoconnect preferences.
- Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer.
- Use `ip link` and `ip addr` to examine and adjust temporary interface state and repair the persistent manager configuration where required.
Explanation
Correct Answer
A:Recommended administrative action: Use dig or host to test chosen DNS servers explicitly and separately verify normal resolver lookup through getent and local client settings. A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
Incorrect Answers
B:That option would inspect and configure the appropriate `nmcli device wifi` and connection profile settings with approved authentication, secrets and autoconnect preferences, but it addresses a different concern. A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
C:This shortcut is unsafe for the present Linux issue: Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer. A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
D:This alternative addresses Ip command address and link troubleshooting, not the specific issue of DNS query tools and authoritative versus recursive answers: Use `ip link` and `ip addr` to examine and adjust temporary interface state and repair the persistent manager configuration where required.
Question 577
A helpdesk escalation describes this Linux behavior: A domain returns NXDOMAIN from a corporate resolver while an engineer claims that using `host` against a public resolver proves the local client is correctly configured. Which Linux behavior or technical principle BEST explains why the issue occurs? Select ONE best answer.
- Routing chooses destination paths from installed route prefixes and metrics; a correct local interface address alone does not establish off-link connectivity.
- A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
- The iproute2 command changes and reports kernel interface state, while durable settings are managed by the host's networking service.
- Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer.
Explanation
Correct Answer
B:Relevant Linux operating principle: A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
Incorrect Answers
A:This alternative addresses Linux routing tables and default gateway selection, not the specific issue of DNS query tools and authoritative versus recursive answers: Routing chooses destination paths from installed route prefixes and metrics; a correct local interface address alone does not establish off-link connectivity. Linux principle: A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration. Appropriate response: Use dig or host to test chosen DNS servers explicitly and separately verify normal resolver lookup through getent and local client settings. Root-cause evidence: Compare `dig name`, `dig @server name`, `host name`, `getent ahosts name` and the resolver settings. Independent acceptance: The application's normal lookup resolves the intended name from the approved resolver with no split-horizon mismatch.
C:This alternative addresses Ip command address and link troubleshooting, not the specific issue of DNS query tools and authoritative versus recursive answers: The iproute2 command changes and reports kernel interface state, while durable settings are managed by the host's networking service. Linux principle: A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration. Appropriate response: Use dig or host to test chosen DNS servers explicitly and separately verify normal resolver lookup through getent and local client settings. Root-cause evidence: Compare `dig name`, `dig @server name`, `host name`, `getent ahosts name` and the resolver settings. Independent acceptance: The application's normal lookup resolves the intended name from the approved resolver with no split-horizon mismatch.
D:This shortcut is unsafe for the present Linux issue: Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer. It cannot establish a safe correction. Linux principle: A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
Question 578
An operations handoff identifies this problem: A domain returns NXDOMAIN from a corporate resolver while an engineer claims that using `host` against a public resolver proves the local client is correctly configured. Which evidence or command result MOST directly tests the suspected root cause? Select ONE best answer.
- Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer.
- Compare `dig name`, `dig @server name`, `host name`, `getent ahosts name` and the resolver settings.
- Inspect `hostnamectl status`, /etc/hostname, /etc/hosts and `getent hosts` output before and after reboot.
- Inspect available SSIDs, connection authentication settings, device state, connection activation logs and effective routes.
Explanation
Correct Answer
B:Most direct verification evidence: Compare `dig name`, `dig @server name`, `host name`, `getent ahosts name` and the resolver settings. A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
Incorrect Answers
A:This shortcut is unsafe for the present Linux issue: Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer. It cannot establish a safe correction. Linux principle: A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration. Appropriate response: Use dig or host to test chosen DNS servers explicitly and separately verify normal resolver lookup through getent and local client settings. Root-cause evidence: Compare `dig name`, `dig @server name`, `host name`, `getent ahosts name` and the resolver settings. Independent acceptance: The application's normal lookup resolves the intended name from the approved resolver with no split-horizon mismatch.
C:This alternative addresses Hostnamectl and durable host identification, not the specific issue of DNS query tools and authoritative versus recursive answers: Inspect `hostnamectl status`, /etc/hostname, /etc/hosts and `getent hosts` output before and after reboot.
D:That option would inspect available SSIDs, connection authentication settings, device state, connection activation logs and effective routes, but it addresses a different concern. A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
Question 579
A team maintaining a Linux host reports: A domain returns NXDOMAIN from a corporate resolver while an engineer claims that using `host` against a public resolver proves the local client is correctly configured. Which observed outcome BEST confirms a successful and properly scoped correction? Select ONE best answer.
- Required traffic uses only documented service ports and protocols while irrelevant exposure stays blocked.
- Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer.
- The application's normal lookup resolves the intended name from the approved resolver with no split-horizon mismatch.
- On-link hosts are identified correctly and off-link traffic follows the planned gateway without spurious local ARP attempts.
Explanation
Correct Answer
C:Observable acceptance criterion: The application's normal lookup resolves the intended name from the approved resolver with no split-horizon mismatch. A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
Incorrect Answers
A:This alternative addresses Well-known TCP UDP port mapping, not the specific issue of DNS query tools and authoritative versus recursive answers: Required traffic uses only documented service ports and protocols while irrelevant exposure stays blocked. Linux principle: A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration. Appropriate response: Use dig or host to test chosen DNS servers explicitly and separately verify normal resolver lookup through getent and local client settings. Root-cause evidence: Compare `dig name`, `dig @server name`, `host name`, `getent ahosts name` and the resolver settings. Independent acceptance: The application's normal lookup resolves the intended name from the approved resolver with no split-horizon mismatch.
B:This shortcut is unsafe for the present Linux issue: Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer. A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
D:This alternative addresses IPv4 CIDR network masks and subnet reachability, not the specific issue of DNS query tools and authoritative versus recursive answers: On-link hosts are identified correctly and off-link traffic follows the planned gateway without spurious local ARP attempts. Linux principle: A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration. Appropriate response: Use dig or host to test chosen DNS servers explicitly and separately verify normal resolver lookup through getent and local client settings. Root-cause evidence: Compare `dig name`, `dig @server name`, `host name`, `getent ahosts name` and the resolver settings. Independent acceptance: The application's normal lookup resolves the intended name from the approved resolver with no split-horizon mismatch.
Question 580
While verifying a Linux change request, an engineer finds: A domain returns NXDOMAIN from a corporate resolver while an engineer claims that using `host` against a public resolver proves the local client is correctly configured. Which TWO complementary steps provide the best corrective action and its most direct diagnostic verification? Select TWO answers.
- Compare `dig name`, `dig @server name`, `host name`, `getent ahosts name` and the resolver settings.
- Use dig or host to test chosen DNS servers explicitly and separately verify normal resolver lookup through getent and local client settings.
- Inspect `ip route` and selected `ip route get`, then set or repair the appropriate default route in the active manager or with `ip route` for a controlled temporary change.
- Inspect `hostnamectl status`, /etc/hostname, /etc/hosts and `getent hosts` output before and after reboot.
- Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer.
Explanation
Correct Answers
A:Most direct verification evidence: Compare `dig name`, `dig @server name`, `host name`, `getent ahosts name` and the resolver settings. Linux principle: A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
B:Recommended administrative action: Use dig or host to test chosen DNS servers explicitly and separately verify normal resolver lookup through getent and local client settings. Linux principle: A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
Incorrect Answers
C:This alternative addresses Linux routing tables and default gateway selection, not the specific issue of DNS query tools and authoritative versus recursive answers: Inspect `ip route` and selected `ip route get`, then set or repair the appropriate default route in the active manager or with `ip route` for a controlled temporary change. Linux principle: A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration. Appropriate response: Use dig or host to test chosen DNS servers explicitly and separately verify normal resolver lookup through getent and local client settings. Root-cause evidence: Compare `dig name`, `dig @server name`, `host name`, `getent ahosts name` and the resolver settings. Independent acceptance: The application's normal lookup resolves the intended name from the approved resolver with no split-horizon mismatch.
D:This alternative addresses Hostnamectl and durable host identification, not the specific issue of DNS query tools and authoritative versus recursive answers: Inspect `hostnamectl status`, /etc/hostname, /etc/hosts and `getent hosts` output before and after reboot. Linux principle: A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.
E:This shortcut is unsafe for the present Linux issue: Assume success from `dig @8.8.8.8` guarantees every local application uses that same server and returns the same answer. A direct DNS query to a named server tests that server, while application resolution follows local NSS, caching and resolver configuration.