Free 202-450: LPIC-2 Exam 202 Part 2 of 2 version 4.5 Exam Questions and Answers

Last updated: September 19, 2026

Exam code

202-450

Provider

LPI

Questions in our bank

1000+

Free to read

First 10, with answers

Our test mode duration & pass mark

130 mins · 70%

Verified answers

Reviewed weekly

Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.

1. Question #1

   Which of the following nmap parameters scans a target for open TCP ports? (Choose two.)

   Select 2 answers.

   • A. -sO
   • B. -sZ
   • C. -sT
   • D. -sU
   • E. -sS
   Reveal Answer

2. Question #2

   Which of the statements below are correct regarding the following commands, which are executed on a Linux router? (Choose two.)

   

   Select 2 answers.

   • A. Packets with source or destination addresses from fe80::/64 will never occur in the FORWARD chain
   • B. The rules disable packet forwarding because network nodes always use addresses from fe80::/64 to identify routers in their routing tables
   • C. ip6tables returns an error for the second command because the affected network is already part of another rule
   • D. Both ip6tables commands complete without an error message or warning
   • E. The rules suppress any automatic configuration through router advertisements or DHCPv6
   Reveal Answer

3. Question #3

   When the default policy for the netfilter INPUT chain is set to DROP, why should a rule allowing traffic to localhost exist?

   • A. All traffic to localhost must always be allowed
   • B. It doesn’t matter; netfilter never affects packets addressed to localhost
   • C. Some applications use the localhost interface to communicate with other applications
   • D. syslogd receives messages on localhost
   • E. The iptables command communicates with the netfilter management daemon netfilterd on localhost to create and change packet filter rules
   Reveal Answer

4. Question #4

   What command creates a SSH key pair? (Specify ONLY the command without any path or parameters)

   Type your answer, then reveal.

   Reveal Answer

5. Question #5

   What is the name of the network security scanner project which, at the core, is a server with a set of network vulnerability tests?

   • A. NetMap
   • B. OpenVAS
   • C. Smartscan
   • D. Wireshark
   Reveal Answer

6. Question #6

   With fail2ban, what is a ‘jail’?

   • A. A netfilter rules chain blocking offending IP addresses for a particular service
   • B. A group of services on the server which should be monitored for similar attack patterns in the log files
   • C. A filter definition and a set of one or more actions to take when the filter is matched
   • D. The chroot environment in which fail2ban runs
   Reveal Answer

7. Question #7

   The program vsftpd, running in a chroot jail, gives the following error: Which of the following actions would fix the error?

   
   • A. The file /etc/ld.so.conf in the root filesystem must contain the path to the appropriate lib directory in the chroot jail
   • B. Create a symbolic link that points to the required library outside the chroot jail
   • C. Copy the required library to the appropriate lib directory in the chroot jail
   • D. Run the program using the command chroot and the option--static_libs
   Reveal Answer

8. Question #8

   In which CIFS share must printer drivers be placed to allow Point’n’Print driver deployment on Windows?

   • A. winx64drv$
   • B. print$
   • C. The name of the share is specified in the option print driver share within each printable share in smb.conf
   • D. pnpdrivers$
   • E. NETLOGON
   Reveal Answer

9. Question #9

   What option for BIND is required in the global options to disable recursive queries on the DNS server by default?

   • A. allow-recursive-query ( none; );
   • B. allow-recursive-query off;
   • C. recursion { disabled; };
   • D. recursion { none; };
   • E. recursion no;
   Reveal Answer

10. Question #10

    Which of the following DNS records could be a glue record?

    • A. ns1.labA198.51.100.53
    • B. labNS198.51.100.53
    • C. ns1.labNS198.51.100.53
    • D. ns1.A198.51.100.53
    • E. ns1.labGLUE198.51.100.53
    Reveal Answer