Lpi 701-100 Practice Exams
Last updated on Oct 22,2026- Exam Code: 701-100
- Exam Name: Linux Professional Institute DevOps Tools Engineer Exam 701
- Certification Provider: Lpi
- Latest update: Oct 22,2026
Which command lists all currently running virtual machines in KVM?
- A . virsh list –all
- B . kvm list
- C . vmware list
- D . qemu status
A
Explanation:
– virsh list –all shows all active and inactive VMs managed by KVM.
– kvm list and qemu status are incorrect because they are not valid KVM commands.
– VMware uses different commands for listing VMs.
A DevOps team wants to restrict access to an AWS EC2 instance so that only their office IP (203.0.113.5) can connect via SSH.
Which configuration should they use?
- A . Allow all inbound traffic to the instance
- B . Use an IAM policy to restrict SSH access
- C . Configure a Security Group rule to allow SSH from 203.0.113.5/32
- D . Enable public key authentication only
C
Explanation:
– AWS Security Groups act as firewalls that restrict access to instances.
– The best practice is to allow SSH only from trusted IPs.
Example Rule:
aws ec2 authorize-security-group-ingress
–group-name my-sec-group –protocol tcp
–port 22 –cidr 203.0.113.5/32
– IAM policies do not control network traffic.
– Enabling public key authentication helps but does not restrict access to specific IPs.
A DevOps engineer wants to run Docker containers without requiring root privileges.
Which of the following container runtimes should they use?
- A . Docker
- B . Podman
- C . VirtualBox
- D . Kubernetes
B
Explanation:
Podman is a daemonless container engine that allows users to run containers without root privileges, making it a more secure alternative to Docker. Docker requires root access to manage the daemon (dockerd).
A company is using Chef to manage server configurations.
What is the purpose of a Chef "Recipe"?
- A . It is a YAML file containing server configurations
- B . It is a script that manually installs software on a server
- C . It is a Ruby-based configuration file defining how a server should be set up
- D . It is a centralized database of configurations
C
Explanation:
– In Chef, a Recipe is a Ruby script that defines how to configure a server (installing packages, managing services, etc.).
– Option A is incorrect because Chef uses Ruby, not YAML.
– Option B is incorrect because Chef automates configurations, not manual scripts.
– Option D is incorrect because Recipes are not databases.
A system administrator is setting up SSH access to an AWS EC2 instance.
What is the recommended method for secure authentication?
- A . Using a username and password
- B . Using an SSH key pair
- C . Allowing root login with password
- D . Opening port 22 to all IP addresses
B
Explanation:
– SSH key pairs provide secure authentication without exposing passwords.
– Allowing password authentication and root login increases security risks.
– Opening port 22 to all IPs (0.0.0.0/0) exposes the server to brute-force attacks.
A system administrator needs to analyze real-time logs for security incidents across multiple servers.
Which tool should they use?
- A . Prometheus
- B . ELK Stack (Elasticsearch, Logstash, Kibana)
- C . Nagios
- D . AWS CloudWatch Metrics
B
Explanation:
– ELK Stack is used for log collection, analysis, and visualization, making it ideal for real-time security monitoring.
– Option A is incorrect because Prometheus collects metrics, not logs.
– Option C is incorrect because Nagios is for monitoring system health, not log analysis.
– Option D is incorrect because AWS CloudWatch Metrics tracks cloud-based performance, not logs.
An administrator wants to test an Ansible playbook without making changes to the target servers.
Which option should they use?
- A . ansible-playbook –simulate
- B . ansible-playbook –dry-run
- C . ansible-playbook –check
- D . ansible-playbook –noop
C
Explanation:
– The –check flag runs Ansible in dry-run mode, simulating changes without applying them.
– Options A and B are incorrect because –simulate and –dry-run are not valid Ansible options.
– Option D is incorrect because –noop is used in Puppet, not Ansible.
Your organization wants to automate infrastructure provisioning and configuration using Infrastructure as Code (IaC). The team is already using Terraform for provisioning cloud resources.
What is the BEST tool to use for configuring the deployed servers?
- A . Terraform
- B . Ansible
- C . AWS CloudFormation
- D . Kubernetes
B
Explanation:
– Terraform is used for provisioning infrastructure, but Ansible is better suited for configuration management after resources are deployed.
– Option A is incorrect because Terraform does not handle detailed server configuration efficiently.
– Option C is incorrect because AWS CloudFormation is specific to AWS and does not configure servers.
– Option D is incorrect because Kubernetes is for container orchestration, not server configuration.
Your team uses Puppet to manage server configurations. A recent update to a Puppet module has broken multiple servers. You need to quickly revert to the previous working configuration.
What is the BEST way to do this?
- A . Manually edit the affected servers and fix the issue
- B . Use puppet agent –test to apply changes again
- C . Roll back to the previous version of the Puppet module
- D . Reinstall Puppet on all affected servers
C
Explanation:
– The best practice in Puppet is to roll back to a known stable module version to quickly restore working configurations.
– Option A is incorrect because manual fixes are not scalable.
– Option B is incorrect because reapplying a broken configuration will not fix the issue.
– Option D is incorrect because reinstalling Puppet will not restore previous configurations.
Which of the following statements about Git branching is true?
- A . The `main` branch should always contain unstable and untested code
- B . The `git checkout` command is used to delete a branch
- C . Feature branches allow developers to work on new features without affecting the main branch
- D . Merging a branch always erases its commit history
C
Explanation:
Feature branches enable developers to develop and test new features separately before merging them into the main branch. The `git checkout` command switches branches but does not delete them. Merging does not necessarily erase commit history unless `squash` is used.