Question 140
During validation, this problem was found: The high-contrast theme improves color separation but does not speak control labels. The original goal was: A visually impaired user needs the graphical interface read aloud while navigating dialogs. Which targeted correction best resolves it?
- Enable Sticky Keys rather than a keypress-delay feature.
- Use the accessibility magnifier and its zoom settings.
- Record the actual desktop environment and distinguish it from transport protocols.
- Activate and configure the screen reader and appropriate speech output.
Explanation
Correct Answer
D:Activate and configure the screen reader and appropriate speech output. It directly addresses the observed symptom: The high-contrast theme improves color separation but does not speak control labels. The relevant mechanism is A screen reader provides speech or braille-accessible UI information, while contrast themes only change appearance.
Incorrect Answers
A:This fix is aimed at Slow Keys is enabled but shortcuts still require simultaneous modifier presses. and would be relevant if An operator with limited dexterity cannot hold modifier keys while typing keyboard shortcuts. The incident instead states The high-contrast theme improves color separation but does not speak control labels. and needs Activate and configure the screen reader and appropriate speech output.
B:This fix is aimed at Changing display resolution shrinks usable space and still does not provide the required per-user magnification control. and would be relevant if A low-vision operator needs text and UI elements enlarged without requiring others to increase the system-wide resolution. The incident instead states The high-contrast theme improves color separation but does not speak control labels. and needs Activate and configure the screen reader and appropriate speech output.
C:This fix is aimed at The inventory labels RDP as the installed graphical desktop environment. and would be relevant if An administrator needs to recognize the difference between GNOME and KDE Plasma on managed Linux desktops. The incident instead states The high-contrast theme improves color separation but does not speak control labels. and needs Activate and configure the screen reader and appropriate speech output.
Question 141
A Linux administrator faces this requirement: A new employee needs a local Linux login, a home directory and the configured default shell. Which specific action is the best direct solution?
- Create the account with useradd -m -s /bin/bash employee and set its password.
- Run getent passwd username.
- Inspect the protected /etc/shadow database under appropriate privileges.
- Use usermod -s /bin/bash username for an installed permitted shell.
Explanation
Correct Answer
A:Create the account with useradd -m -s /bin/bash employee and set its password. The mechanism is: useradd creates the account database entry, -m creates the initial home and -s selects the login shell.
Incorrect Answers
B:Run getent passwd username. That operation is designed for the different case: An administrator needs to look up a user's account record using the configured NSS sources, not just local /etc/passwd. It does not perform the specific action required here: Create the account with useradd -m -s /bin/bash employee and set its password.
C:Inspect the protected /etc/shadow database under appropriate privileges. That operation is designed for the different case: An administrator needs to identify which file stores local password hashes rather than account names and shell paths. It does not perform the specific action required here: Create the account with useradd -m -s /bin/bash employee and set its password.
D:Use usermod -s /bin/bash username for an installed permitted shell. That operation is designed for the different case: An account's interactive default shell must be changed without deleting or recreating the account. It does not perform the specific action required here: Create the account with useradd -m -s /bin/bash employee and set its password.
Question 142
The engineer proposes this implementation: Create the account with useradd -m -s /bin/bash employee and set its password. The requirement is: A new employee needs a local Linux login, a home directory and the configured default shell. Which technical explanation best supports the proposed action?
- passwd -l prefixes the stored password hash with an invalid marker; it does not by itself disable SSH public-key or other authentication.
- useradd creates the account database entry, -m creates the initial home and -s selects the login shell.
- getent queries the name service switch databases, including configured directory sources where available.
- The -a append modifier preserves the user's existing supplementary groups when -G changes membership.
Explanation
Correct Answer
B:useradd creates the account database entry, -m creates the initial home and -s selects the login shell. It specifically supports the proposed action of Create the account with useradd -m -s /bin/bash employee and set its password. for the requirement described.
Incorrect Answers
A:This explains another Linux operation, namely Lock the account password with passwd -l employee and separately assess other authentication paths., where passwd -l prefixes the stored password hash with an invalid marker; it does not by itself disable SSH public-key or other authentication. It does not explain why Create the account with useradd -m -s /bin/bash employee and set its password. satisfies the stated condition.
C:This explains another Linux operation, namely Run getent passwd username., where getent queries the name service switch databases, including configured directory sources where available. It does not explain why Create the account with useradd -m -s /bin/bash employee and set its password. satisfies the stated condition.
D:This explains another Linux operation, namely Use usermod -aG docker developer., where The -a append modifier preserves the user's existing supplementary groups when -G changes membership. It does not explain why Create the account with useradd -m -s /bin/bash employee and set its password. satisfies the stated condition.
Question 143
The action Create the account with useradd -m -s /bin/bash employee and set its password. was applied for this goal: A new employee needs a local Linux login, a home directory and the configured default shell. Which observation provides the most direct acceptance evidence?
- Password authentication fails while the account and home directory remain for review.
- getent group newgroup reports the original GID and the old name is no longer found.
- getent passwd employee shows the home and /bin/bash, and the home contains approved skeleton files.
- getent passwd username reports /bin/bash and a fresh login opens the selected shell.
Explanation
Correct Answer
C:getent passwd employee shows the home and /bin/bash, and the home contains approved skeleton files. This checks the effect of Create the account with useradd -m -s /bin/bash employee and set its password. against the stated operational goal.
Incorrect Answers
A:That observation checks A departing employee's interactive password login must be locked immediately while preserving account files for investigation. In this scenario it does not demonstrate Create the account with useradd -m -s /bin/bash employee and set its password.; the relevant evidence must establish getent passwd employee shows the home and /bin/bash, and the home contains approved skeleton files.
B:That observation checks The operations team renamed a local Unix group without changing its existing numeric GID. In this scenario it does not demonstrate Create the account with useradd -m -s /bin/bash employee and set its password.; the relevant evidence must establish getent passwd employee shows the home and /bin/bash, and the home contains approved skeleton files.
D:That observation checks An account's interactive default shell must be changed without deleting or recreating the account. In this scenario it does not demonstrate Create the account with useradd -m -s /bin/bash employee and set its password.; the relevant evidence must establish getent passwd employee shows the home and /bin/bash, and the home contains approved skeleton files.
Question 144
During validation, this problem was found: The account exists in passwd but has no home directory because -m was omitted. The original goal was: A new employee needs a local Linux login, a home directory and the configured default shell. Which targeted correction best resolves it?
- Use /etc/shadow and appropriate account management tools rather than hand-editing password fields.
- Create the correct group first, then assign ownership and intended membership.
- Apply chage to the target account and confirm the shadow aging fields.
- Create the home with correct ownership or recreate the account through a home-creating workflow.
Explanation
Correct Answer
D:Create the home with correct ownership or recreate the account through a home-creating workflow. It directly addresses the observed symptom: The account exists in passwd but has no home directory because -m was omitted. The relevant mechanism is useradd creates the account database entry, -m creates the initial home and -s selects the login shell.
Incorrect Answers
A:This fix is aimed at Passwords were treated as hashes in /etc/passwd even though its password field is a placeholder. and would be relevant if An administrator needs to identify which file stores local password hashes rather than account names and shell paths. The incident instead states The account exists in passwd but has no home directory because -m was omitted. and needs Create the home with correct ownership or recreate the account through a home-creating workflow.
B:This fix is aimed at The directory has group ownership set to a non-existent group name. and would be relevant if A local application needs a dedicated group before administrators can assign its log readers. The incident instead states The account exists in passwd but has no home directory because -m was omitted. and needs Create the home with correct ownership or recreate the account through a home-creating workflow.
C:This fix is aimed at The policy was edited in an unrelated global file but the existing user's aging values did not change. and would be relevant if A password policy requires local user passwords to expire after 90 days. The incident instead states The account exists in passwd but has no home directory because -m was omitted. and needs Create the home with correct ownership or recreate the account through a home-creating workflow.
Question 145
A Linux administrator faces this requirement: A developer must be added to the supplementary docker group without losing current secondary groups. Which specific action is the best direct solution?
- Use usermod -aG docker developer.
- Use groupmod -n newgroup oldgroup.
- Set the maximum password age with chage -M 90 username.
- Run getent passwd username.
Explanation
Correct Answer
A:Use usermod -aG docker developer. The mechanism is: The -a append modifier preserves the user's existing supplementary groups when -G changes membership.
Incorrect Answers
B:Use groupmod -n newgroup oldgroup. That operation is designed for the different case: The operations team renamed a local Unix group without changing its existing numeric GID. It does not perform the specific action required here: Use usermod -aG docker developer.
C:Set the maximum password age with chage -M 90 username. That operation is designed for the different case: A password policy requires local user passwords to expire after 90 days. It does not perform the specific action required here: Use usermod -aG docker developer.
D:Run getent passwd username. That operation is designed for the different case: An administrator needs to look up a user's account record using the configured NSS sources, not just local /etc/passwd. It does not perform the specific action required here: Use usermod -aG docker developer.
Question 146
The engineer proposes this implementation: Use usermod -aG docker developer. The requirement is: A developer must be added to the supplementary docker group without losing current secondary groups. Which technical explanation best supports the proposed action?
- getent queries the name service switch databases, including configured directory sources where available.
- The -a append modifier preserves the user's existing supplementary groups when -G changes membership.
- /etc/shadow stores password hash and aging fields, separate from the world-readable account metadata in /etc/passwd.
- chage modifies password-aging policy stored with the account in the shadow database.
Explanation
Correct Answer
B:The -a append modifier preserves the user's existing supplementary groups when -G changes membership. It specifically supports the proposed action of Use usermod -aG docker developer. for the requirement described.
Incorrect Answers
A:This explains another Linux operation, namely Run getent passwd username., where getent queries the name service switch databases, including configured directory sources where available. It does not explain why Use usermod -aG docker developer. satisfies the stated condition.
C:This explains another Linux operation, namely Inspect the protected /etc/shadow database under appropriate privileges., where /etc/shadow stores password hash and aging fields, separate from the world-readable account metadata in /etc/passwd. It does not explain why Use usermod -aG docker developer. satisfies the stated condition.
D:This explains another Linux operation, namely Set the maximum password age with chage -M 90 username., where chage modifies password-aging policy stored with the account in the shadow database. It does not explain why Use usermod -aG docker developer. satisfies the stated condition.
Question 147
The action Use usermod -aG docker developer. was applied for this goal: A developer must be added to the supplementary docker group without losing current secondary groups. Which observation provides the most direct acceptance evidence?
- Password authentication fails while the account and home directory remain for review.
- The reported primary group corresponds to the GID in getent passwd for that account.
- id developer shows docker and the user's previous supplementary group memberships.
- chage -l username shows the maximum password age set to 90 days.
Explanation
Correct Answer
C:id developer shows docker and the user's previous supplementary group memberships. This checks the effect of Use usermod -aG docker developer. against the stated operational goal.
Incorrect Answers
A:That observation checks A departing employee's interactive password login must be locked immediately while preserving account files for investigation. In this scenario it does not demonstrate Use usermod -aG docker developer.; the relevant evidence must establish id developer shows docker and the user's previous supplementary group memberships.
B:That observation checks A technician wants to inspect which group is the primary group for a named account. In this scenario it does not demonstrate Use usermod -aG docker developer.; the relevant evidence must establish id developer shows docker and the user's previous supplementary group memberships.
D:That observation checks A password policy requires local user passwords to expire after 90 days. In this scenario it does not demonstrate Use usermod -aG docker developer.; the relevant evidence must establish id developer shows docker and the user's previous supplementary group memberships.
Question 148
During validation, this problem was found: A plain usermod -G docker developer replaced the entire supplementary group list. The original goal was: A developer must be added to the supplementary docker group without losing current secondary groups. Which targeted correction best resolves it?
- Rename the existing group with groupmod rather than creating an unrelated GID.
- Create the correct group first, then assign ownership and intended membership.
- Set a valid nologin shell and tighten the service account's privileges.
- Use usermod -aG and confirm all intended memberships with id or groups.
Explanation
Correct Answer
D:Use usermod -aG and confirm all intended memberships with id or groups. It directly addresses the observed symptom: A plain usermod -G docker developer replaced the entire supplementary group list. The relevant mechanism is The -a append modifier preserves the user's existing supplementary groups when -G changes membership.
Incorrect Answers
A:This fix is aimed at A new group was created with a different GID, leaving files owned by the original group ID. and would be relevant if The operations team renamed a local Unix group without changing its existing numeric GID. The incident instead states A plain usermod -G docker developer replaced the entire supplementary group list. and needs Use usermod -aG and confirm all intended memberships with id or groups.
B:This fix is aimed at The directory has group ownership set to a non-existent group name. and would be relevant if A local application needs a dedicated group before administrators can assign its log readers. The incident instead states A plain usermod -G docker developer replaced the entire supplementary group list. and needs Use usermod -aG and confirm all intended memberships with id or groups.
C:This fix is aimed at A privileged interactive shell was assigned to the daemon account unnecessarily. and would be relevant if A daemon needs a low-privilege local system identity that normally should not be used for interactive login. The incident instead states A plain usermod -G docker developer replaced the entire supplementary group list. and needs Use usermod -aG and confirm all intended memberships with id or groups.
Question 149
A Linux administrator faces this requirement: A departing employee's interactive password login must be locked immediately while preserving account files for investigation. Which specific action is the best direct solution?
- Lock the account password with passwd -l employee and separately assess other authentication paths.
- Inspect the protected /etc/shadow database under appropriate privileges.
- Run id -gn username to display the account's primary group name.
- Use usermod -s /bin/bash username for an installed permitted shell.
Explanation
Correct Answer
A:Lock the account password with passwd -l employee and separately assess other authentication paths. The mechanism is: passwd -l prefixes the stored password hash with an invalid marker; it does not by itself disable SSH public-key or other authentication.
Incorrect Answers
B:Inspect the protected /etc/shadow database under appropriate privileges. That operation is designed for the different case: An administrator needs to identify which file stores local password hashes rather than account names and shell paths. It does not perform the specific action required here: Lock the account password with passwd -l employee and separately assess other authentication paths.
C:Run id -gn username to display the account's primary group name. That operation is designed for the different case: A technician wants to inspect which group is the primary group for a named account. It does not perform the specific action required here: Lock the account password with passwd -l employee and separately assess other authentication paths.
D:Use usermod -s /bin/bash username for an installed permitted shell. That operation is designed for the different case: An account's interactive default shell must be changed without deleting or recreating the account. It does not perform the specific action required here: Lock the account password with passwd -l employee and separately assess other authentication paths.
Question 150
The engineer proposes this implementation: Lock the account password with passwd -l employee and separately assess other authentication paths. The requirement is: A departing employee's interactive password login must be locked immediately while preserving account files for investigation. Which technical explanation best supports the proposed action?
- userdel removes the account records and -r also removes its home and mail spool where supported.
- passwd -l prefixes the stored password hash with an invalid marker; it does not by itself disable SSH public-key or other authentication.
- A system-account UID allocation and non-login shell reduce interactive access when no shell is needed.
- getent queries the name service switch databases, including configured directory sources where available.
Explanation
Correct Answer
B:passwd -l prefixes the stored password hash with an invalid marker; it does not by itself disable SSH public-key or other authentication. It specifically supports the proposed action of Lock the account password with passwd -l employee and separately assess other authentication paths. for the requirement described.
Incorrect Answers
A:This explains another Linux operation, namely Run userdel -r oldsvc with the required permissions and backups., where userdel removes the account records and -r also removes its home and mail spool where supported. It does not explain why Lock the account password with passwd -l employee and separately assess other authentication paths. satisfies the stated condition.
C:This explains another Linux operation, namely Create an appropriate system account with useradd -r -s /usr/sbin/nologin svcname (path distro dependent)., where A system-account UID allocation and non-login shell reduce interactive access when no shell is needed. It does not explain why Lock the account password with passwd -l employee and separately assess other authentication paths. satisfies the stated condition.
D:This explains another Linux operation, namely Run getent passwd username., where getent queries the name service switch databases, including configured directory sources where available. It does not explain why Lock the account password with passwd -l employee and separately assess other authentication paths. satisfies the stated condition.
LPI Level 1 (102-500) Practice Tests