Test your basic knowledge |

RHCSA

Subjects : certifications, it-skills, rhcsa

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. Can you put your /boot partition on a RAID 5 array?
via the command line
The /etc/dhcp/dhcpd.conf file is the main config file for the DHCP service.
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
load balancing and redundancy benefits

2. How would you go about creating a static route?
The ping command can be used to verify connectivity to another host.
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.
amount of RAM
Use the route command with the add option to create a static route.

3. What is the name of the package that allows you to install VNC?
VNC is used to control a remote desktop session.
The /etc/exports file needs to contain any directory that you want to export - including which options you'd like to use as well.
You can use the authconfig-tui command or the authconfig command.
The VNC package for Red Hat Enterprise Linux 6 is tiger-vnc.

4. Are additional packages besides httpd required for a secure website - If so - what are they?
Physical volumes - volume groups - and logical volumes.
halts the system
For Apache to run a secure site - the mod_ssl package is required to be installed.
enabled by default

5. FTP is one of three protocols ______________. The other two protocols are NFS and HTTP.
used for kickstart and/or network installs
Typing the mail or mutt command allows you to read mail from the command line.
The smbpasswd command is used to create Samba users.
You should never allow remote root access. Should your root account become compromised and you use the same password - someone could gain access to all your systems. You also don't want the most powerful user of your system (with no accountability) l

6. What is the /var/lib/nfs/etab file used for?
A large warning message appears indicating that the key doesn't match the host you are connecting to. You have to remove the key/host pair from the known_hosts file to proceed.
The /var/lib/nfs/etab file is used to keep track of currently exported resources.
The /var/log/audit/audit.log file contains all policy violations.
When the system enters into runlevel 2 - the rsyslog service has a priority of 12 when starting. Anything with a lower number (or the same number and lower first letter) starts before the rsyslog service.

7. How can you display all virtual guests after they're connected to a hypervisor?
If you shrink a volume group or logical volume - there is a chance you could lose data depending on how much you shrink the volume.
The VNC package for Red Hat Enterprise Linux 6 is tiger-vnc.
After you connect to a hypervisor - you can use virsh list —all to list all virtual guests.
The NFS service uses TCP port 2049 by default.

8. How do you run a command with elevated privileges?
Public/private key authentication provides an additional layer of security because you need the correct key instead of just knowing someone's password. Passwords combined with public/private keys take the security one additional step.
You can use the sudo command to run a command with elevated privileges provided you have the rights in the /etc/sudoers file.
SELinux Booleans provide restrictions to different aspects of a service.
After you connect to a hypervisor - you can use virsh list —all to list all virtual guests.

9. What command disables the SSH service from running when the system boots?
For Apache to run a secure site - the mod_ssl package is required to be installed.
browseable option
The smbstatus command shows you currently mounted Samba resources.
chkconfig sshd off

10. What does the rdnc-confgen command do?
useradd -c "Jr Admin" George
The htpasswd command can be used to password-protect a web page.
The rdnc-confgen command generates an rndc.conf file for the rndc utility.
The yum and rpm commands are used for package management.

11. What is NAT - How is it used?
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.
cat /proc/mdstat
used for kickstart and/or network installs
The install.log.syslog file contains messages that are generated during the installation. If you run into trouble during the installation - this is a good place to start.

12. What is the rndc utility used for?
The smbpasswd command is used to create Samba users.
via the command line
generates errors under Red Hat Enterprise Linux 6
The rndc utility provides a method for managing the DNS server remotely and securely.

13. If a package is built on an RHEL6 system and deployed to a custom RHEL5 repository - are RHEL5 systems able to use it?
used for kickstart and/or network installs
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.
The rdnc-confgen command generates an rndc.conf file for the rndc utility.
The yum and rpm commands are used for package management.

14. Where are Yum repository config files located?
For Apache to run a secure site - the mod_ssl package is required to be installed.
Yum repository config files (.repo files) are located in the /etc/yum.repos.d directory. You can also make direct entries into the main /etc/yum.conf file.
You have the flexibility to resize and add new volumes on the fly. With basic partitions - any time that you want to make a change - you need to destroy the partition and create it again.
The virsh command is used to manage virtual guests.

15. What three components are needed to fully automate a kickstart installation?
This command sets the eth1 interface to have a static IP address of 172.168.1.100 with a netmask of 255.255.255.0.
When the system starts up again - the cron service will run any jobs that were missed while the system was off. On Red Hat Enterprise Linux 5 - the anacron service handles this functionality.
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.
generates errors under Red Hat Enterprise Linux 6

16. What is the superblock used for?
Physical volumes - volume groups - and logical volumes.
The superblock is a structure that contains metadata of the file system. If this becomes corrupt - you are in trouble.
The mount command lists all currently mounted file systems.
You can use the -q option to query an installed package. Combining grep and the -qa options - you can search among all installed packages on the system.

17. Should you allow remote root access - Why or why not?

18. What is the name of the package used to install an FTP?
enabled by default
PAM is used as a modular way to leverage security. In this chapter - the main function we discussed was for managing password policies and complexity.
The vsftpd package is used to install an FTP server.
You can use the sudo command to run a command with elevated privileges provided you have the rights in the /etc/sudoers file.

19. What protocols are used with Dovecot?
createrepo
Network installations can be performed using the HTTP - FTP - and NFS protocols.
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.
The rndc utility provides a method for managing the DNS server remotely and securely.

20. Place all files you want added to a _______________ during creation.

21. Editing the /etc/xinetd.d/tftp file and enabling the service are the same as running the chkconfig tftp on command. Both of these actions...
enabled by default
Yum repository config files (.repo files) are located in the /etc/yum.repos.d directory. You can also make direct entries into the main /etc/yum.conf file.
The du and df commands are used to view available space on the system.
have the same effect

22. What command is used to show all services being controlled by the xinetd daemon?
serve both files and printers to users
chkconfig xinetd --list
run on any port you'd like (provided that port is available)
This command sets the eth1 interface to have a static IP address of 172.168.1.100 with a netmask of 255.255.255.0.

23. Does a DHCP server allow reserved IP addresses - If so - how?
You should never use the -U option because it erases the prior kernel when updating. This leaves you with no fallback kernel should your system not boot properly.
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.
Version 2 is the latest and most secure version of SSH.
Using the host option in the dhcpd.conf file allows you to reserve a client IP address based on its MAC address.

24. What does it mean if you ping a host and you receive the response Destination Unreachable?
The gateway is incorrectly set - and the subnet of the host you are trying to reach is inaccessible.
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
The print option is used with both the fdisk and parted commands to display the current partition tables.
You should never allow remote root access. Should your root account become compromised and you use the same password - someone could gain access to all your systems. You also don't want the most powerful user of your system (with no accountability) l

25. What command can you use to monitor and troubleshoot network connections?
The dig - host - and ping commands can be used to test DNS server functionality.
The virsh command is used to manage virtual guests.
DNS uses port 53.
The tcpdump command is used to monitor network connections on different interfaces.

26. What command can you use to test connectivity to another host?
SELinux provides enhanced granular security for the Linux operating system.
DNS uses port 53.
Enforcing during installation
The ping command can be used to verify connectivity to another host.

27. The virt-install package allows you to manage virtual machines _____________. The virt-manager package allows you to manage virtual machines via a GUI interface.
Yum repository config files (.repo files) are located in the /etc/yum.repos.d directory. You can also make direct entries into the main /etc/yum.conf file.
via the command line
The two main config files are master.cf and main.cf.
createrepo

28. What is the xinetd service used for?
Sendmail
The /etc/exports file needs to contain any directory that you want to export - including which options you'd like to use as well.
The file system where quotas will be implemented must be mounted with the usrquota and grpquota options before quotas will work properly.
The xinetd daemon is used to control and/or run multiple system services. One example is a TFTP server.

29. What command can you use to get information about logical volumes?
SELinux provides enhanced granular security for the Linux operating system.
lvdisplay
A user's home directory is created under the /home directory.
DNS uses port 53.

30. The INPUT chain being used is the default under Red Hat Enterprise Linux 5. This rule...
LUKS encryption
rpmbuild
generates errors under Red Hat Enterprise Linux 6
getfacl

31. What port does the Apache web server run on - What about HTTPS?
enabled by default
SELinux Booleans provide restrictions to different aspects of a service.
Apache uses port 80 for HTTP and port 443 for HTTPS.
entering rescue mode and repairing the problem.

32. What command can you use to view NFS statistics?
rpcbind service
The nfsstat command can be used to view NFS statistics.
A web proxy can provide multiple benefits - including security - web page caching for faster load times - and load balancing.
getfacl

33. What are SELinux Booleans?
PAM is used as a modular way to leverage security. In this chapter - the main function we discussed was for managing password policies and complexity.
By using centralized authentication - you don't need to re-create or maintain multiple accounts across every system in your organization.
Uncomment the following line in the /etc/rsyslog.conf file: #$ModLoad imudp.so #$UDPServerRun 514
SELinux Booleans provide restrictions to different aspects of a service.

34. What is the point of using SELinux?
export one or all resources
This chapter described tdbsm and smbpasswd back-end authentication.
semanage boolean -l
SELinux provides enhanced granular security for the Linux operating system.

35. What command-line program can you use to check your mail?
schedule one-time-only jobs
The tcpdump command is used to monitor network connections on different interfaces.
Typing the mail or mutt command allows you to read mail from the command line.
Use the top command to view CPU and memory usage.

36. What three protocols can you use to perform network installations?
chkconfig xinetd --list
Using the host option in the dhcpd.conf file allows you to reserve a client IP address based on its MAC address.
Network installations can be performed using the HTTP - FTP - and NFS protocols.
The /var/liv/dhcpd/dhcpd.leases file contains all clients IP address currently in use.

37. What option would you use to query an installed package using the rpm command?
You can use the -q option to query an installed package. Combining grep and the -qa options - you can search among all installed packages on the system.
Use the top command to view CPU and memory usage.
DNS uses port 53.
The /var/lib/nfs/etab file is used to keep track of currently exported resources.

38. What is the difference between an A record and a PTR record?
The rdnc-confgen command generates an rndc.conf file for the rndc utility.
generates errors under Red Hat Enterprise Linux 6
An A record translates translated hostnames to IP addresses - and a PTR record works the other way around.
ifconfig

39. What port does the rndc utility listen on by default?
schedule one-time-only jobs
When you exit the parted utility - all your changes are automatically written to disk. With the fdisk command - you need to manually write your changes to disk for them to take effect.
The NFS service uses TCP port 2049 by default.
By default - the rndc utility listens on port 953.

40. For Red Hat Enterprise Linux 6 - SELinux comes set up in enforcing mode. When installing Red Hat Enterprise Linux 5 - you have the option to...

41. What is VNC?
The superblock is a structure that contains metadata of the file system. If this becomes corrupt - you are in trouble.
VNC is used to control a remote desktop session.
By defining a %post section - you can run scripts after a kickstart installation is complete.
The rdnc-confgen command generates an rndc.conf file for the rndc utility.

42. What are the three items that make up LVM?
Physical volumes - volume groups - and logical volumes.
You must ensure that the /boot/grub/grub.conf file has the new entry for your newly updated kernel to be able to boot into it.
chkconfig xinetd --list
The xinetd daemon is used to control and/or run multiple system services. One example is a TFTP server.

43. What is a gateway used for on a network?
Uncomment the following line in the /etc/rsyslog.conf file: #$ModLoad imudp.so #$UDPServerRun 514
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
The /proc directory. The /proc/sys directory is the place where you actually tune kernel parameters.
A gateway is used as an entry and exit point for a subnet on a network. To contact hosts outside your subnet - you need to pass through a gateway.

44. Can you name the two commands that can be used to view the free space on the system?
rpcbind service
The SSH service is almost always installed by default in Red Hat. It uses TCP port 22 - and this port is open on the default firewall rules.
The du and df commands are used to view available space on the system.
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.

45. What is the main config file for the DHCP service?
The /etc/exports file needs to contain any directory that you want to export - including which options you'd like to use as well.
The /etc/dhcp/dhcpd.conf file is the main config file for the DHCP service.
Physical volumes - volume groups - and logical volumes.
The /etc/hosts file is a local lookup file used to map IP addresses to hostnames if a DNS server isn't available.

46. To grow a file system
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.
This command sets the eth1 interface to have a static IP address of 172.168.1.100 with a netmask of 255.255.255.0.
setsebool -P nfs_export_all_rw=1
Use the resize2fs command to grow a file system.

47. What command can you use to view the current ACL on a file?
getfacl
atq
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
Use the setgid flag to create the appropriate permissions (chmod 2770).

48. What is the name of the section used to run scripts after a kickstart installation?
By defining a %post section - you can run scripts after a kickstart installation is complete.
The smbstatus command shows you currently mounted Samba resources.
If you are a hosting company or want to run multiple websites/applications from a single IP address - you can use virtual hosts to accomplish this.
You can use the remove or erase options with yum to remove a package.

49. What option is used to allow anonymous uploads to the FTP server?
The anonymous_enable=YES option in the main config file allows anonymous uploads.
You should never use the -U option because it erases the prior kernel when updating. This leaves you with no fallback kernel should your system not boot properly.
Public/private key authentication provides an additional layer of security because you need the correct key instead of just knowing someone's password. Passwords combined with public/private keys take the security one additional step.
The three utilities are: route - ping - and nslookup.

50. What file needs to be edited so that the system will mount a file system at boot time?
You can use the authconfig-tui command or the authconfig command.
load balancing and redundancy benefits
entering rescue mode and repairing the problem.
The /etc/fstab file.