RHCSA

Instructions:

• Answer 50 questions in 15 minutes.
• If you are not ready to take this test, you can study here.
• Match each statement with the correct term.
• Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. The exportfs command is used to...
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.
getsebool -a | grep http
The xinetd daemon is used to control and/or run multiple system services. One example is a TFTP server.
export one or all resources


2. In Red Hat Enterprise Linux 6 - the default for SELinux is _______________ (which can be changed after the installation completes). For Red Hat Enterprise Linux 5 - you were able to choose what mode you wanted SELinux to start in.
The rndc utility provides a method for managing the DNS server remotely and securely.
support TCP Wrappers
The smbpasswd command is used to create Samba users.
Enforcing during installation


3. Should you allow remote root access - Why or why not?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


4. What is the format of the /etc/shadow file?
The format of the /etc/shadow file is <username>:<encrypted password>:<last passwd change>:<min>:<max>:<warn>:<inactive>:<expires>:<not used>.
Using the chcon command - you can change the context of a file to work with Apache.
chkconfig—list
The /var/liv/dhcpd/dhcpd.leases file contains all clients IP address currently in use.


5. What is NAT - How is it used?
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.
halts the system
Use the chkconfig command to enable or disable services during the boot process. The on option enables the service and off disables it.
Use the resize2fs command to grow a file system.


6. What command can you use to validate the syntax of the Apache config file?
The gateway is incorrectly set - and the subnet of the host you are trying to reach is inaccessible.
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
service httpd configtest
Sendmail


7. What two ports should be opened on the firewall for the FTP server to function properly?
The three utilities are: route - ping - and nslookup.
You must open TCP ports 20 and 21 for the FTP server to function properly.
Enforcing during installation
chcon


8. Which remote management service is installed by default?Can you name the port that it uses?
The SSH service is almost always installed by default in Red Hat. It uses TCP port 22 - and this port is open on the default firewall rules.
A web proxy can provide multiple benefits - including security - web page caching for faster load times - and load balancing.
The format of the /etc/shadow file is <username>:<encrypted password>:<last passwd change>:<min>:<max>:<warn>:<inactive>:<expires>:<not used>.
The last rule is always an implicit deny statement rejecting anything that wasn't matched by previous rules.


9. What directory is used to represent the virtual file system created by the kernel?
The DHCP server listens on port 67 by default.
By defining a %post section - you can run scripts after a kickstart installation is complete.
The /etc/hosts file is a local lookup file used to map IP addresses to hostnames if a DNS server isn't available.
The /proc directory. The /proc/sys directory is the place where you actually tune kernel parameters.


10. To create a RAID or LVM partition using kickstart
mkfs.ext4
The mount command lists all currently mounted file systems.
Kickstart supports both basic and advanced partitioning (RAID/LVM).
createrepo


11. Place all files you want added to a _______________ during creation.

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


12. What port must be opened on the firewall for DNS?
You have the flexibility to resize and add new volumes on the fly. With basic partitions - any time that you want to make a change - you need to destroy the partition and create it again.
DNS uses port 53.
getsebool -a | grep http
load balancing and redundancy benefits


13. Which file contains all messages generated during installation that can be used for troubleshooting if the need arises?
chkconfig xinetd --list
By entering the GRUB boot menu - you can choose the a option to append something to the kernel command-line options.
The install.log.syslog file contains messages that are generated during the installation. If you run into trouble during the installation - this is a good place to start.
used for kickstart and/or network installs


14. The portmap service was replaced by the ______________ in Red Hat Enterprise Linux 6.
ifconfig
service httpd configtest
have the same effect
rpcbind service


15. How would you disable SELinux protection for NFS - allowing shares to be read/write?
After the ntpd service is stopped - you can use the ntpdate <server> command to update/sync the time.
setsebool -P nfs_export_all_rw=1
PAM is used as a modular way to leverage security. In this chapter - the main function we discussed was for managing password policies and complexity.
By defining a %post section - you can run scripts after a kickstart installation is complete.


16. What option needs to be used with the mount command to mount an NFS resource?
You can use the remove or erase options with yum to remove a package.
The -t nfs option is used with the mount command to mount NFS resources.
Yum repository config files (.repo files) are located in the /etc/yum.repos.d directory. You can also make direct entries into the main /etc/yum.conf file.
By entering the GRUB boot menu - you can choose the a option to append something to the kernel command-line options.


17. What command can you use to view system processes and their CPU usage?
Use the ps command to view processes and their CPU usage.
Use the /usr/share/doc/dovecot-1.0.7/examples/mkcert.sh command after editing the /etc/pki/dovecot/dovecot-openssl.cnf file.
The rpm command can operate in install - query - or verify modes.
Enforcing during installation


18. What command can you use to create a password-protected page?
A swap is scratch space on your file system used as virtual memory. A swap can be created as a partition or a device file.
Use the groupadd command to create a group. You can then add user George with the following: usermod -G <group name> George
The htpasswd command can be used to password-protect a web page.
The /var/log/audit/audit.log file contains all policy violations.


19. What are the five required directories when building RPMS?
A swap is scratch space on your file system used as virtual memory. A swap can be created as a partition or a device file.
By default - the rndc utility listens on port 953.
SSH is used for secure remote management of Linux systems.
The five directories are BUILD - RPMS - SOURCES - SPECS - and SRPMS.


20. What does ifconfig 172.168.1.100 netmask 255.255.255.0 eth1 do?
The gateway is incorrectly set - and the subnet of the host you are trying to reach is inaccessible.
via the command line
This command sets the eth1 interface to have a static IP address of 172.168.1.100 with a netmask of 255.255.255.0.
For Apache to run a secure site - the mod_ssl package is required to be installed.


21. What command can be used to easily list all the options in the FTP main config file?
The grep -v ^# /etc/vsftpd/vsftpd.conf command shows you all the options currently being used with the FTP server.
getfacl
By defining a %post section - you can run scripts after a kickstart installation is complete.
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.


22. Editing the /etc/xinetd.d/tftp file and enabling the service are the same as running the chkconfig tftp on command. Both of these actions...
After the ntpd service is stopped - you can use the ntpdate <server> command to update/sync the time.
The ping command can be used to verify connectivity to another host.
have the same effect
support for TCP Wrappers


23. The package selection screen allows you to install any software you want during the installation process as long as...
enabled by default
The /etc/exports file needs to contain any directory that you want to export - including which options you'd like to use as well.
you have access to the correct packages or repositories.
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.


24. Through its main config file - SSH can be configured to...

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


25. What command and option do you use to view the description of Boolean values?
The smbstatus command shows you currently mounted Samba resources.
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
You add your action to the end of the /home/user01/.bashrc file.
semanage boolean -l


26. What port does the rndc utility listen on by default?
The yum and rpm commands are used for package management.
getsebool
The chmod command is used to change the permissions of files and directories. The chown command is used to change the ownership of files and directories.
By default - the rndc utility listens on port 953.


27. Is it possible to share files among groups - What permissions would you set on the directory to accomplish file sharing if possible?
kickstart installations to work
service named configtest
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
Use the setgid flag to create the appropriate permissions (chmod 2770).


28. If a package is built on an RHEL6 system and deployed to a custom RHEL5 repository - are RHEL5 systems able to use it?
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.
used for kickstart and/or network installs
Physical volumes - volume groups - and logical volumes.
The print option is used with both the fdisk and parted commands to display the current partition tables.


29. By default - what is the path to a user's home directory?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


30. Before you work with ACLs - what do you need to do to the file system?
you have access to the correct packages or repositories.
The file system where ACLs will be implemented must be mounted with the acl option before ACLs will work properly.
generates errors under Red Hat Enterprise Linux 6
The superblock is a structure that contains metadata of the file system. If this becomes corrupt - you are in trouble.


31. It is possible to run scripts before a kickstart installation. This is done by...
When the system enters into runlevel 2 - the rsyslog service has a priority of 12 when starting. Anything with a lower number (or the same number and lower first letter) starts before the rsyslog service.
defining a %pre section although it is rarely used
The lastlog and faillog commands are used to view user login-related events?
The /etc/dhcp/dhcpd.conf file is the main config file for the DHCP service.


32. What happens to jobs that are scheduled to run while the system is off?
When the system starts up again - the cron service will run any jobs that were missed while the system was off. On Red Hat Enterprise Linux 5 - the anacron service handles this functionality.
If you shrink a volume group or logical volume - there is a chance you could lose data depending on how much you shrink the volume.
browseable option
support TCP Wrappers


33. The default SMTP service has been changed from _________ to Postfix in Red Hat Enterprise Linux 6.
rpcbind service
The dig - host - and ping commands can be used to test DNS server functionality.
Physical volumes - volume groups - and logical volumes.
Sendmail


34. What file needs to be edited so that the system will mount a file system at boot time?
The /etc/fstab file.
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.
service httpd configtest
The gateway is incorrectly set - and the subnet of the host you are trying to reach is inaccessible.


35. How can you check the currently mounted file systems?
Use the groupadd command to create a group. You can then add user George with the following: usermod -G <group name> George
Enforcing during installation
The /proc directory. The /proc/sys directory is the place where you actually tune kernel parameters.
The mount command lists all currently mounted file systems.


36. What are SELinux Booleans?
The grep -v ^# /etc/vsftpd/vsftpd.conf command shows you all the options currently being used with the FTP server.
The /var/log/audit/audit.log file contains all policy violations.
A soft limit acts like an alarm - signaling you when you are reaching your limit. If you don't specify a grace period - the soft limit is the max. A hard limit is required only when a grace period exists. It is the max limit you can hit before your g
SELinux Booleans provide restrictions to different aspects of a service.


37. What command is used to create a user for Samba?
You must ensure that the /boot/grub/grub.conf file has the new entry for your newly updated kernel to be able to boot into it.
The smbpasswd command is used to create Samba users.
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.


38. What command can you use to test the config files before starting the DNS service?
ifconfig
Use the groupadd command to create a group. You can then add user George with the following: usermod -G <group name> George
service named configtest
atq


39. What command do you use to change the permissions on a file or directory - To change ownership?
The format of the /etc/shadow file is <username>:<encrypted password>:<last passwd change>:<min>:<max>:<warn>:<inactive>:<expires>:<not used>.
run on any port you'd like (provided that port is available)
The /var/log/audit/audit.log file contains all policy violations.
The chmod command is used to change the permissions of files and directories. The chown command is used to change the ownership of files and directories.


40. What is the /etc/hosts file used for?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


41. What command can you use to view NFS statistics?
By entering the GRUB boot menu - you can choose the a option to append something to the kernel command-line options.
The nfsstat command can be used to view NFS statistics.
used for kickstart and/or network installs
service httpd configtest


42. Can you put your /boot partition on a RAID 5 array?
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
service named configtest
amount of RAM
user's home directory in the /etc/skel directory


43. What command can you use to test connectivity to another host?
The smbstatus command shows you currently mounted Samba resources.
semanage boolean -l
The three utilities are: route - ping - and nslookup.
The ping command can be used to verify connectivity to another host.


44. What options with the yum command would you use to remove a package?
The rdnc-confgen command generates an rndc.conf file for the rndc utility.
By using centralized authentication - you don't need to re-create or maintain multiple accounts across every system in your organization.
You can use the remove or erase options with yum to remove a package.
amount of RAM


45. What is a swap? Is it created as a partition or device file?
A swap is scratch space on your file system used as virtual memory. A swap can be created as a partition or a device file.
The file system where quotas will be implemented must be mounted with the usrquota and grpquota options before quotas will work properly.
The dig - host - and ping commands can be used to test DNS server functionality.
The grep -v ^# /etc/vsftpd/vsftpd.conf command shows you all the options currently being used with the FTP server.


46. What command can be used to view the queue for at service jobs?
Use the chkconfig command to enable or disable services during the boot process. The on option enables the service and off disables it.
VNC is used to control a remote desktop session.
atq
A web proxy can provide multiple benefits - including security - web page caching for faster load times - and load balancing.


47. What command can you use to monitor and troubleshoot network connections?
The install.log.syslog file contains messages that are generated during the installation. If you run into trouble during the installation - this is a good place to start.
kickstart installations to work
Apache uses port 80 for HTTP and port 443 for HTTPS.
The tcpdump command is used to monitor network connections on different interfaces.


48. Which log file is used to keep track of policy violations?
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.
The /var/log/audit/audit.log file contains all policy violations.
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
alternatives --config mta


49. How can you list all services on the system to tell whether they will boot during startup?
You can use the sudo command to run a command with elevated privileges provided you have the rights in the /etc/sudoers file.
chkconfig—list
Use the groupadd command to create a group. You can then add user George with the following: usermod -G <group name> George
By default - Squid runs on port 3128.


50. How can you verify the status of the SSH service after the system has booted?
The tcpdump command is used to monitor network connections on different interfaces.
You can use the -q option to query an installed package. Combining grep and the -qa options - you can search among all installed packages on the system.
You can use the remove or erase options with yum to remove a package.
service sshd statuts