Test your basic knowledge |

RHCSA

Subjects : certifications, it-skills, rhcsa

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. You must dictate the ____________ you want allocated to your virtual machine when you create it.
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.
rpcbind service
The superblock is a structure that contains metadata of the file system. If this becomes corrupt - you are in trouble.
amount of RAM

2. What command can you use to create your own repositories?
createrepo
The vsftpd package is used to install an FTP server.
Apache uses port 80 for HTTP and port 443 for HTTPS.
Use the route command with the add option to create a static route.

3. What is the /etc/vsftpd/user_list file used for?
The user_list file can be used to limit which users have access to the FTP server.
The grep -v ^# /etc/vsftpd/vsftpd.conf command shows you all the options currently being used with the FTP server.
kickstart installations to work
rpcbind service

4. What three commands can you use to help verify that the DNS server is functioning properly?
chcon
Network installations can be performed using the HTTP - FTP - and NFS protocols.
Enforcing during installation
The dig - host - and ping commands can be used to test DNS server functionality.

5. What option is used with both the fdisk and parted commands to display the current partition tables?
The print option is used with both the fdisk and parted commands to display the current partition tables.
Use the ps command to view processes and their CPU usage.
lvdisplay
Use the /usr/share/doc/dovecot-1.0.7/examples/mkcert.sh command after editing the /etc/pki/dovecot/dovecot-openssl.cnf file.

6. What protocols are used with Dovecot?
An A record translates translated hostnames to IP addresses - and a PTR record works the other way around.
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.
The /var/lib/nfs/etab file is used to keep track of currently exported resources.
The three utilities are: route - ping - and nslookup.

7. A service needs to have _______________ to be able to use it.
The grep -v ^# /etc/vsftpd/vsftpd.conf command shows you all the options currently being used with the FTP server.
rpcbind service
support for TCP Wrappers
repquota

8. What command do you use to report information on quota usage?
SELinux provides enhanced granular security for the Linux operating system.
repquota
The DHCP server listens on port 67 by default.
The rpm command can operate in install - query - or verify modes.

9. What command can you use to create a password-protected page?
You add your action to the end of the /home/user01/.bashrc file.
RAID 0 (Striping) - RAID 1 (Mirror) - and RAID 5 (Striping with parity).
The htpasswd command can be used to password-protect a web page.
support TCP Wrappers

10. What is PAM used for?
user's home directory in the /etc/skel directory
rpcbind service
The yum and rpm commands are used for package management.
PAM is used as a modular way to leverage security. In this chapter - the main function we discussed was for managing password policies and complexity.

11. Where are Yum repository config files located?
When the system starts up again - the cron service will run any jobs that were missed while the system was off. On Red Hat Enterprise Linux 5 - the anacron service handles this functionality.
halts the system
Yum repository config files (.repo files) are located in the /etc/yum.repos.d directory. You can also make direct entries into the main /etc/yum.conf file.
Public/private key authentication provides an additional layer of security because you need the correct key instead of just knowing someone's password. Passwords combined with public/private keys take the security one additional step.

12. What is the name of the package used to install an FTP?
getsebool
The vsftpd package is used to install an FTP server.
By using centralized authentication - you don't need to re-create or maintain multiple accounts across every system in your organization.
Using the host option in the dhcpd.conf file allows you to reserve a client IP address based on its MAC address.

13. Before you work with ACLs - what do you need to do to the file system?
browseable option
The file system where ACLs will be implemented must be mounted with the acl option before ACLs will work properly.
The /etc/hosts file is a local lookup file used to map IP addresses to hostnames if a DNS server isn't available.
service named configtest

14. What is the /etc/hosts file used for?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

15. What command-line program can you use to check your mail?
Sendmail
Typing the mail or mutt command allows you to read mail from the command line.
The smbpasswd command is used to create Samba users.
You can use the authconfig-tui command or the authconfig command.

16. The firewall service is...
load balancing and redundancy benefits
enabled by default
useradd -c "Jr Admin" George
The chmod command is used to change the permissions of files and directories. The chown command is used to change the ownership of files and directories.

17. What options with the yum command would you use to remove a package?
export one or all resources
By using centralized authentication - you don't need to re-create or maintain multiple accounts across every system in your organization.
You can use the remove or erase options with yum to remove a package.
The partprobe command forces the kernel to reread the partition table. You should always call it after making any changes to your system partitions.

18. What command can you use to check the config file of the DHCP server?
The TFTP server uses UDP port 69.
service dhcpd configtest
The ping command can be used to verify connectivity to another host.
serve both files and printers to users

19. How would you go about creating a static route?
After the ntpd service is stopped - you can use the ntpdate <server> command to update/sync the time.
cat /proc/mdstat
Use the route command with the add option to create a static route.
The /var/lib/nfs/etab file is used to keep track of currently exported resources.

20. What option can you change in the rsyslog config file to accept remote logs (acting as a centralized logging server)?
entering rescue mode and repairing the problem.
setsebool -P nfs_export_all_rw=1
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.
Uncomment the following line in the /etc/rsyslog.conf file: #$ModLoad imudp.so #$UDPServerRun 514

21. How do you run a command with elevated privileges?
You can use the sudo command to run a command with elevated privileges provided you have the rights in the /etc/sudoers file.
chkconfig—list
A web proxy can provide multiple benefits - including security - web page caching for faster load times - and load balancing.
You should never use the -U option because it erases the prior kernel when updating. This leaves you with no fallback kernel should your system not boot properly.

22. What does the following firewall rule accomplish: iptables -I INPUT 5 -p tcp -m tcp --dport 80 -j ACCEPT?
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.
createrepo
SELinux provides enhanced granular security for the Linux operating system.
kickstart installations to work

23. What is the main config file for the DHCP service?
The /etc/dhcp/dhcpd.conf file is the main config file for the DHCP service.
service httpd configtest
The file system where ACLs will be implemented must be mounted with the acl option before ACLs will work properly.
A virtual host is a way of hosting multiple sites using a single IP address.

24. What port must be opened on the firewall for DNS?
You can use the authconfig-tui command or the authconfig command.
Use the chkconfig command to enable or disable services during the boot process. The on option enables the service and off disables it.
DNS uses port 53.
run on any port you'd like (provided that port is available)

25. What does the testparm command do?
Use the top command to view CPU and memory usage.
The testparm command allows you to check for syntax errors in the /etc/samba/smb.conf file.
The /etc/fstab file.
service httpd configtest

26. What critical step must you take after updating the kernel to a newer version?
Typing the mail or mutt command allows you to read mail from the command line.
The gateway is incorrectly set - and the subnet of the host you are trying to reach is inaccessible.
When the system starts up again - the cron service will run any jobs that were missed while the system was off. On Red Hat Enterprise Linux 5 - the anacron service handles this functionality.
You must ensure that the /boot/grub/grub.conf file has the new entry for your newly updated kernel to be able to boot into it.

27. What are the three different types of RAID described in this chapter?
The gateway is incorrectly set - and the subnet of the host you are trying to reach is inaccessible.
Uncomment the following line in the /etc/rsyslog.conf file: #$ModLoad imudp.so #$UDPServerRun 514
Typing the mail or mutt command allows you to read mail from the command line.
RAID 0 (Striping) - RAID 1 (Mirror) - and RAID 5 (Striping with parity).

28. Are additional packages besides httpd required for a secure website - If so - what are they?
The NFS service uses TCP port 2049 by default.
Use the groupadd command to create a group. You can then add user George with the following: usermod -G <group name> George
Apache uses port 80 for HTTP and port 443 for HTTPS.
For Apache to run a secure site - the mod_ssl package is required to be installed.

29. What command can you use to query information from the kernel about RAID arrays?
cat /proc/mdstat
The -t nfs option is used with the mount command to mount NFS resources.
Use the route command with the add option to create a static route.
The SSH service is almost always installed by default in Red Hat. It uses TCP port 22 - and this port is open on the default firewall rules.

30. What command can you use to create a file system?
used for kickstart and/or network installs
The /etc/hosts file is a local lookup file used to map IP addresses to hostnames if a DNS server isn't available.
When the system enters into runlevel 2 - the rsyslog service has a priority of 12 when starting. Anything with a lower number (or the same number and lower first letter) starts before the rsyslog service.
mkfs.ext4

31. GRUB has three stages. Can you name them?
Stage 1: During this stage - the primary bootloader is read into memory by the BIOS from the MBR. Stage 1.5: During this stage - the bootloader is read into memory by the stage 1 bootloader (only if necessary). Stage 2: During this stage - the bootlo
The three utilities are: route - ping - and nslookup.
You should never allow remote root access. Should your root account become compromised and you use the same password - someone could gain access to all your systems. You also don't want the most powerful user of your system (with no accountability) l
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.

32. What port does NFS use by default?
After the ntpd service is stopped - you can use the ntpdate <server> command to update/sync the time.
The /var/liv/dhcpd/dhcpd.leases file contains all clients IP address currently in use.
The NFS service uses TCP port 2049 by default.
mkfs.ext4

33. Can you name three utilities that can be used for network or DNS client troubleshooting?
ifconfig
atq
Physical volumes - volume groups - and logical volumes.
The three utilities are: route - ping - and nslookup.

34. What is the difference between the update (-U) and install (-i) options when using rpm to update the kernel?
useradd -c "Jr Admin" George
You should never use the -U option because it erases the prior kernel when updating. This leaves you with no fallback kernel should your system not boot properly.
The two main config files are master.cf and main.cf.
browseable option

35. What is the virsh command used for?
The nfsstat command can be used to view NFS statistics.
You must ensure that the /boot/grub/grub.conf file has the new entry for your newly updated kernel to be able to boot into it.
The virsh command is used to manage virtual guests.
The gateway is incorrectly set - and the subnet of the host you are trying to reach is inaccessible.

36. What command (and options) can be used to create a user named George with the description "Jr Admin"?
Public/private key authentication provides an additional layer of security because you need the correct key instead of just knowing someone's password. Passwords combined with public/private keys take the security one additional step.
halts the system
The rndc utility provides a method for managing the DNS server remotely and securely.
useradd -c "Jr Admin" George

37. What command can you use to view the current ACL on a file?
getfacl
The /proc directory. The /proc/sys directory is the place where you actually tune kernel parameters.
The virsh command is used to manage virtual guests.
The lftp command can be used on a client to test FTP server connections.

38. What port does the rndc utility listen on by default?
rpcbind service
By default - the rndc utility listens on port 953.
This command sets the eth1 interface to have a static IP address of 172.168.1.100 with a netmask of 255.255.255.0.
RAID 0 (Striping) - RAID 1 (Mirror) - and RAID 5 (Striping with parity).

39. The ______________ for Red Hat Enterprise Linux 5 or 6 includes the use of LVM.
A gateway is used as an entry and exit point for a subnet on a network. To contact hosts outside your subnet - you need to pass through a gateway.
rpcbind service
You can use the -q option to query an installed package. Combining grep and the -qa options - you can search among all installed packages on the system.
Enforcing during installation

40. Runlevel 0 ___________. Runlevel 6 reboots the system.
halts the system
The htpasswd command can be used to password-protect a web page.
Physical volumes - volume groups - and logical volumes.
The xinetd daemon is used to control and/or run multiple system services. One example is a TFTP server.

41. What command can you use to create a new SSL certificate?
By default - the rndc utility listens on port 953.
For Apache to run a secure site - the mod_ssl package is required to be installed.
serve both files and printers to users
Use the /usr/share/doc/dovecot-1.0.7/examples/mkcert.sh command after editing the /etc/pki/dovecot/dovecot-openssl.cnf file.

42. What two ports should be opened on the firewall for the FTP server to function properly?
Apache uses port 80 for HTTP and port 443 for HTTPS.
By entering the GRUB boot menu - you can choose the a option to append something to the kernel command-line options.
You must open TCP ports 20 and 21 for the FTP server to function properly.
service httpd configtest

43. What command is used to create a user for Samba?
entering rescue mode and repairing the problem.
The smbpasswd command is used to create Samba users.
By default - Squid runs on port 3128.
By defining a %post section - you can run scripts after a kickstart installation is complete.

44. If you want a specific action to take place when user01 logs in to the system - which file would you edit?
By defining a %post section - you can run scripts after a kickstart installation is complete.
You add your action to the end of the /home/user01/.bashrc file.
The file system where quotas will be implemented must be mounted with the usrquota and grpquota options before quotas will work properly.
kickstart installations to work

45. Which version of SSH should you use?
By default - the rndc utility listens on port 953.
For Apache to run a secure site - the mod_ssl package is required to be installed.
Yum repository config files (.repo files) are located in the /etc/yum.repos.d directory. You can also make direct entries into the main /etc/yum.conf file.
Version 2 is the latest and most secure version of SSH.

46. What command and option can you use to enable a service to start on boot?
generates errors under Red Hat Enterprise Linux 6
You must open TCP ports 20 and 21 for the FTP server to function properly.
Use the chkconfig command to enable or disable services during the boot process. The on option enables the service and off disables it.
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.

47. Red Hat Enterprise Linux 6 is the only version that officially supports _______
atq
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.
LUKS encryption
A user's home directory is created under the /home directory.

48. What command can you use to test connectivity to another host?
If you shrink a volume group or logical volume - there is a chance you could lose data depending on how much you shrink the volume.
chcon
getsebool
The ping command can be used to verify connectivity to another host.

49. What port on the firewall needs to be open for the TFTP server to work?
via the command line
repquota
The smbstatus command shows you currently mounted Samba resources.
The TFTP server uses UDP port 69.

50. What port does the Apache web server run on - What about HTTPS?
The last rule is always an implicit deny statement rejecting anything that wasn't matched by previous rules.
Apache uses port 80 for HTTP and port 443 for HTTPS.
Network installations can be performed using the HTTP - FTP - and NFS protocols.
The /var/liv/dhcpd/dhcpd.leases file contains all clients IP address currently in use.