LPI 102-500 Bundle

The required verification is The mismatch is explained by the local hosts entry and lookup ordering, not a result meant for A security reviewer needs to query a specific DNS server rather than whichever resolver the host currently uses.

This would test another scenario: A test host uses 255.255.255.0 but another host in the same VLAN uses 255.255.0.0. Here the acceptance evidence is The mismatch is explained by the local hosts entry and lookup ordering.

That observation may validate A system using systemd-resolved shows generated /etc/resolv.conf and an administrator edits it persistently, but it does not establish that The mismatch is explained by the local hosts entry and lookup ordering for the current case.

This alternative addresses the separate case “A service listens on all network interfaces though only local clients should use it”. The best evidence is ss shows the restricted local bind and remote probes no longer connect. For the stated problem, “Connecting to the local forwarded port reaches the intended remote service securely” addresses the central condition.

The related but distinct situation is “A user wants to decrypt a GnuPG file received for a different person's key”. Verify that The intended recipient decrypts successfully while the unqualified user cannot. The deciding requirement here is “Connecting to the local forwarded port reaches the intended remote service securely”.

The required verification is Connecting to the local forwarded port reaches the intended remote service securely, not a result meant for A team wants to restrict which private key SSH tries for one sensitive repository host.

That danger is associated more closely with An operator needs to identify which process owns an unexpected listening socket. Here the primary exposure is Using the wrong directory port may defeat an encrypted authentication requirement.

The case is most directly exposed to Using the wrong directory port may defeat an encrypted authentication requirement; the alternative describes a different operational risk.

The stated concern is possible elsewhere, but the facts here specifically imply Using the wrong directory port may defeat an encrypted authentication requirement.

The related but distinct situation is “A team must encrypt a confidential file for one specific recipient using GnuPG”. The safest fitting response is Import or validate the recipient public key and use gpg --encrypt --recipient. The deciding requirement here is “Use visudo to validate edits before the new sudoers configuration takes effect”.

This option serves the scenario “An administrator sees a suspicious process holding an apparently deleted log file open”. The safest fitting response is Use lsof or fuser to identify the process retaining the file handle. This question instead requires “Use visudo to validate edits before the new sudoers configuration takes effect”.

Although that change may be valid elsewhere, it responds to A user account must force a password reset on next login after credential rotation, not to this system state. The relevant fix is Use visudo to validate edits before the new sudoers configuration takes effect.

The required verification is The pilot launches the chosen desktop after authentication with the intended window system, not a result meant for A technician assumes the window manager is responsible for authenticating users at the graphical login screen.

This would test another scenario: A support engineer expects RDP to be identical to VNC when accessing a Linux desktop remotely. Here the acceptance evidence is The pilot launches the chosen desktop after authentication with the intended window system.

That observation may validate A Linux workstation has a working X server but users cannot get a desktop because the session manager is absent, but it does not establish that The pilot launches the chosen desktop after authentication with the intended window system for the current case.

The proposed check does not prove the intended behavior. A directly relevant test must show The operator completes a representative task using speech output and keyboard focus.

The option would apply to “A user who cannot operate a physical keyboard needs to enter login data with a pointing device”. The best evidence is The user signs in using the supported virtual keyboard with their pointing device. The present scenario is distinguished by “The operator completes a representative task using speech output and keyboard focus”.

The required verification is The operator completes a representative task using speech output and keyboard focus, not a result meant for An employee with low vision cannot read a desktop's default tiny text and icons.

Although that change may be valid elsewhere, it responds to A blind operator needs to navigate desktop controls and receive spoken feedback, not to this system state. The relevant fix is Inspect the user's Xauthority cookie and transfer authorization through a supported secure method.

This option serves the scenario “A graphical login service can authenticate users but the desktop session never starts after an Xorg keyboard edit”. The appropriate operation is Validate only the relevant settings under /etc/X11/xorg.conf.d/ and inspect session logs. The present scenario is distinguished by “Inspect the user's Xauthority cookie and transfer authorization through a supported secure method”.

It fails to address the actual requirement, A remote X11 client fails with an authorization error despite a reachable display address. The needed change is Inspect the user's Xauthority cookie and transfer authorization through a supported secure method; verify An authorized client launches after correct cookie handling without using xhost +.

This command or configuration addresses a different case: A script expects a simple command-line message to be delivered but its subject line is missing. Here, Several MTAs implement compatible submission interfaces with different service backends, so the targeted action is Inspect active MTA service and package metadata rather than assuming the sendmail command names it.

It fails to address the actual requirement, An administrator is asked to identify whether Exim, Sendmail or Postfix is responsible for local mail. The needed change is Inspect active MTA service and package metadata rather than assuming the sendmail command names it; verify The active unit and package inventory agree on the selected transport program.

The option would apply to “Printing stops after an operator disables a CUPS queue during maintenance”. The safest fitting response is Reenable the approved printer destination and verify it accepts jobs. The present scenario is distinguished by “Inspect active MTA service and package metadata rather than assuming the sendmail command names it”.

That danger is associated more closely with A nightly cleanup loop processes filenames containing spaces by iterating over unquoted command substitution. Here the primary exposure is Plain read may alter literal input used as a file path or regex.

The stated concern is possible elsewhere, but the facts here specifically imply Plain read may alter literal input used as a file path or regex.

The case is most directly exposed to Plain read may alter literal input used as a file path or regex; the alternative describes a different operational risk.

This would test another scenario: An administrator needs to see current CUPS printer status, destinations and pending jobs. Here the acceptance evidence is The responder extracts the old boot events from the offline disk safely.

That observation may validate An operator searches for service failures but the journal shows previous boots mixed with today's records, but it does not establish that The responder extracts the old boot events from the offline disk safely for the current case.

This would test another scenario: A systemd service fails intermittently and an engineer needs logs only for that unit in the current boot. Here the acceptance evidence is The responder extracts the old boot events from the offline disk safely.

The option would apply to “A responder mounts a failed server's disk and needs its saved journal without booting it”. Acceptance requires The responder extracts the old boot events from the offline disk safely. This question instead requires “The report contains matching error entries from the requested interval only”.

The required verification is The report contains matching error entries from the requested interval only, not a result meant for A systemd service fails intermittently and an engineer needs logs only for that unit in the current boot.

This option serves the scenario “An administrator needs to verify a server's NTP synchronization status under chrony”. Acceptance requires The tracking report shows an accepted synchronized source with bounded offset. The present scenario is distinguished by “The report contains matching error entries from the requested interval only”.