Test your basic knowledge |

RHCSA

Subjects : certifications, it-skills, rhcsa

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. A PXE server eases the automation process but isn't required for...
The rndc utility provides a method for managing the DNS server remotely and securely.
A swap is scratch space on your file system used as virtual memory. A swap can be created as a partition or a device file.
kickstart installations to work
schedule one-time-only jobs

2. Which file contains all messages generated during installation that can be used for troubleshooting if the need arises?
The install.log.syslog file contains messages that are generated during the installation. If you run into trouble during the installation - this is a good place to start.
This command sets the eth1 interface to have a static IP address of 172.168.1.100 with a netmask of 255.255.255.0.
browseable option
The yum and rpm commands are used for package management.

3. What critical step must you take after updating the kernel to a newer version?
service httpd configtest
The /var/liv/dhcpd/dhcpd.leases file contains all clients IP address currently in use.
You must ensure that the /boot/grub/grub.conf file has the new entry for your newly updated kernel to be able to boot into it.
A user's home directory is created under the /home directory.

4. What does the rdnc-confgen command do?
The rdnc-confgen command generates an rndc.conf file for the rndc utility.
lvdisplay
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
The rndc utility provides a method for managing the DNS server remotely and securely.

5. What command can you use to create a file system?
enabled by default
mkfs.ext4
After you connect to a hypervisor - you can use virsh list —all to list all virtual guests.
By defining a %post section - you can run scripts after a kickstart installation is complete.

6. What are SELinux Booleans?
The four types of DNS servers are master - slave - caching-only - and forwarding.
If you are a hosting company or want to run multiple websites/applications from a single IP address - you can use virtual hosts to accomplish this.
The /etc/dhcp/dhcpd.conf file is the main config file for the DHCP service.
SELinux Booleans provide restrictions to different aspects of a service.

7. What are the two types of back-end authentication mechanisms discussed in this chapter?
The mount command lists all currently mounted file systems.
This chapter described tdbsm and smbpasswd back-end authentication.
A soft limit acts like an alarm - signaling you when you are reaching your limit. If you don't specify a grace period - the soft limit is the max. A hard limit is required only when a grace period exists. It is the max limit you can hit before your g
The smbstatus command shows you currently mounted Samba resources.

8. In Red Hat Enterprise Linux 6 - the default for SELinux is _______________ (which can be changed after the installation completes). For Red Hat Enterprise Linux 5 - you were able to choose what mode you wanted SELinux to start in.
Enforcing during installation
By defining a %post section - you can run scripts after a kickstart installation is complete.
rpcbind service
setsebool -P nfs_export_all_rw=1

9. What file needs to be edited so that the system will mount a file system at boot time?
The anonymous_enable=YES option in the main config file allows anonymous uploads.
The /etc/fstab file.
enabled by default
The rdnc-confgen command generates an rndc.conf file for the rndc utility.

10. FTP is one of three protocols ______________. The other two protocols are NFS and HTTP.
used for kickstart and/or network installs
For Apache to run a secure site - the mod_ssl package is required to be installed.
ifconfig
support TCP Wrappers

11. What is the name of the package that allows you to install VNC?
The rndc utility provides a method for managing the DNS server remotely and securely.
The VNC package for Red Hat Enterprise Linux 6 is tiger-vnc.
The superblock is a structure that contains metadata of the file system. If this becomes corrupt - you are in trouble.
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.

12. What command can you use to create a new SSL certificate?
Use the /usr/share/doc/dovecot-1.0.7/examples/mkcert.sh command after editing the /etc/pki/dovecot/dovecot-openssl.cnf file.
The tcpdump command is used to monitor network connections on different interfaces.
support TCP Wrappers
useradd -c "Jr Admin" George

13. What is the benefit to using centralized authentication?

14. What command can you use to view system processes and their CPU usage?
Use the ps command to view processes and their CPU usage.
You can use the sudo command to run a command with elevated privileges provided you have the rights in the /etc/sudoers file.
After the ntpd service is stopped - you can use the ntpdate <server> command to update/sync the time.
support TCP Wrappers

15. What does the following firewall rule accomplish: iptables -I INPUT 5 -p tcp -m tcp --dport 80 -j ACCEPT?
via the command line
rpmbuild
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.
The file system where ACLs will be implemented must be mounted with the acl option before ACLs will work properly.

16. What does S12rsyslog in the /etc/rc.d/rc2.d directory mean?
The four types of DNS servers are master - slave - caching-only - and forwarding.
Public/private key authentication provides an additional layer of security because you need the correct key instead of just knowing someone's password. Passwords combined with public/private keys take the security one additional step.
When the system enters into runlevel 2 - the rsyslog service has a priority of 12 when starting. Anything with a lower number (or the same number and lower first letter) starts before the rsyslog service.
repquota

17. What is a swap? Is it created as a partition or device file?
browseable option
A large warning message appears indicating that the key doesn't match the host you are connecting to. You have to remove the key/host pair from the known_hosts file to proceed.
A swap is scratch space on your file system used as virtual memory. A swap can be created as a partition or a device file.
The lftp command can be used on a client to test FTP server connections.

18. It is possible to run scripts before a kickstart installation. This is done by...
amount of RAM
Use the setgid flag to create the appropriate permissions (chmod 2770).
defining a %pre section although it is rarely used
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.

19. How would you view all Boolean options for the HTTP service?
getsebool -a | grep http
The gateway is incorrectly set - and the subnet of the host you are trying to reach is inaccessible.
cat /proc/mdstat
The /proc directory. The /proc/sys directory is the place where you actually tune kernel parameters.

20. What is the default port that Squid runs on?
Public/private key authentication provides an additional layer of security because you need the correct key instead of just knowing someone's password. Passwords combined with public/private keys take the security one additional step.
SSH is used for secure remote management of Linux systems.
entering rescue mode and repairing the problem.
By default - Squid runs on port 3128.

21. What port does the rndc utility listen on by default?
By default - the rndc utility listens on port 953.
The /etc/hosts file is a local lookup file used to map IP addresses to hostnames if a DNS server isn't available.
You have the flexibility to resize and add new volumes on the fly. With basic partitions - any time that you want to make a change - you need to destroy the partition and create it again.
The SSH service is almost always installed by default in Red Hat. It uses TCP port 22 - and this port is open on the default firewall rules.

22. What are the two config files for Postfix called?
A large warning message appears indicating that the key doesn't match the host you are connecting to. You have to remove the key/host pair from the known_hosts file to proceed.
The two main config files are master.cf and main.cf.
The ping command can be used to verify connectivity to another host.
The /etc/fstab file.

23. How would you disable SELinux protection for NFS - allowing shares to be read/write?
The du and df commands are used to view available space on the system.
setsebool -P nfs_export_all_rw=1
A virtual host is a way of hosting multiple sites using a single IP address.
You add your action to the end of the /home/user01/.bashrc file.

24. Which file shows you all the client IP addresses?
Stage 1: During this stage - the primary bootloader is read into memory by the BIOS from the MBR. Stage 1.5: During this stage - the bootloader is read into memory by the stage 1 bootloader (only if necessary). Stage 2: During this stage - the bootlo
Use the yum groupinstall command to install multiple packages in a single group at once.
The /var/liv/dhcpd/dhcpd.leases file contains all clients IP address currently in use.
A web proxy can provide multiple benefits - including security - web page caching for faster load times - and load balancing.

25. How would you go about creating a static route?
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.
semanage boolean -l
Public/private key authentication provides an additional layer of security because you need the correct key instead of just knowing someone's password. Passwords combined with public/private keys take the security one additional step.
Use the route command with the add option to create a static route.

26. The exportfs command is used to...
You can use the authconfig-tui command or the authconfig command.
A gateway is used as an entry and exit point for a subnet on a network. To contact hosts outside your subnet - you need to pass through a gateway.
The four types of DNS servers are master - slave - caching-only - and forwarding.
export one or all resources

27. What is a virtual host?
Using the host option in the dhcpd.conf file allows you to reserve a client IP address based on its MAC address.
When the system enters into runlevel 2 - the rsyslog service has a priority of 12 when starting. Anything with a lower number (or the same number and lower first letter) starts before the rsyslog service.
PAM is used as a modular way to leverage security. In this chapter - the main function we discussed was for managing password policies and complexity.
A virtual host is a way of hosting multiple sites using a single IP address.

28. What is the biggest benefit to using LVM over basic partitions?
A gateway is used as an entry and exit point for a subnet on a network. To contact hosts outside your subnet - you need to pass through a gateway.
Use the setgid flag to create the appropriate permissions (chmod 2770).
You have the flexibility to resize and add new volumes on the fly. With basic partitions - any time that you want to make a change - you need to destroy the partition and create it again.
The testparm command allows you to check for syntax errors in the /etc/samba/smb.conf file.

29. The ____________ is available for each share.
browseable option
When the system enters into runlevel 2 - the rsyslog service has a priority of 12 when starting. Anything with a lower number (or the same number and lower first letter) starts before the rsyslog service.
mkfs.ext4
You add your action to the end of the /home/user01/.bashrc file.

30. What port does the DHCP server listen on by default?
The DHCP server listens on port 67 by default.
A gateway is used as an entry and exit point for a subnet on a network. To contact hosts outside your subnet - you need to pass through a gateway.
The SMTP service runs on TCP port 110.
When you exit the parted utility - all your changes are automatically written to disk. With the fdisk command - you need to manually write your changes to disk for them to take effect.

31. What happens if a host changes its IP address and the keys don't match?

32. To grow a file system
Use the route command with the add option to create a static route.
useradd -c "Jr Admin" George
semanage boolean -l
Use the resize2fs command to grow a file system.

33. The ______________ for Red Hat Enterprise Linux 5 or 6 includes the use of LVM.
The nfsstat command can be used to view NFS statistics.
This command sets the eth1 interface to have a static IP address of 172.168.1.100 with a netmask of 255.255.255.0.
Enforcing during installation
useradd -c "Jr Admin" George

34. What command do you use to change the permissions on a file or directory - To change ownership?
user's home directory in the /etc/skel directory
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.
The chmod command is used to change the permissions of files and directories. The chown command is used to change the ownership of files and directories.

35. What command and options can you use to update the time?
When the system enters into runlevel 2 - the rsyslog service has a priority of 12 when starting. Anything with a lower number (or the same number and lower first letter) starts before the rsyslog service.
After the ntpd service is stopped - you can use the ntpdate <server> command to update/sync the time.
semanage boolean -l
The yum and rpm commands are used for package management.

36. What three components are needed to fully automate a kickstart installation?
Physical volumes - volume groups - and logical volumes.
lvdisplay
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.
service named configtest

37. What command can you use to query Boolean values?
getsebool
browseable option
By entering the GRUB boot menu - you can choose the a option to append something to the kernel command-line options.
load balancing and redundancy benefits

38. What is the name of the package used to install an FTP?
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.
user's home directory in the /etc/skel directory
The vsftpd package is used to install an FTP server.
The file that stores usernames and their encrypted passwords is erased and replaced with a new file.

39. What three commands can you use to help verify that the DNS server is functioning properly?
used for kickstart and/or network installs
The user_list file can be used to limit which users have access to the FTP server.
ifconfig
The dig - host - and ping commands can be used to test DNS server functionality.

40. Can you put your /boot partition on a RAID 5 array?
Yum repository config files (.repo files) are located in the /etc/yum.repos.d directory. You can also make direct entries into the main /etc/yum.conf file.
DNS uses port 53.
Apache uses port 80 for HTTP and port 443 for HTTPS.
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.

41. What command can be used to easily list all the options in the FTP main config file?
The grep -v ^# /etc/vsftpd/vsftpd.conf command shows you all the options currently being used with the FTP server.
The lftp command can be used on a client to test FTP server connections.
SSH is used for secure remote management of Linux systems.
You can use the sudo command to run a command with elevated privileges provided you have the rights in the /etc/sudoers file.

42. What is the /etc/hosts file used for?

43. What is the point of using SELinux?
SELinux provides enhanced granular security for the Linux operating system.
SELinux Booleans provide restrictions to different aspects of a service.
service dhcpd configtest
The smbstatus command shows you currently mounted Samba resources.

44. You must dictate the ____________ you want allocated to your virtual machine when you create it.
You can use the sudo command to run a command with elevated privileges provided you have the rights in the /etc/sudoers file.
The TFTP server uses UDP port 69.
amount of RAM
The last rule is always an implicit deny statement rejecting anything that wasn't matched by previous rules.

45. The firewall service is...
The TFTP server uses UDP port 69.
The file that stores usernames and their encrypted passwords is erased and replaced with a new file.
service named configtest
enabled by default

46. Samba servers can...
serve both files and printers to users
The anonymous_enable=YES option in the main config file allows anonymous uploads.
chcon
You add your action to the end of the /home/user01/.bashrc file.

47. What commands can you use to add a client machine to an LDAP server?
A swap is scratch space on your file system used as virtual memory. A swap can be created as a partition or a device file.
You add your action to the end of the /home/user01/.bashrc file.
The lastlog and faillog commands are used to view user login-related events?
You can use the authconfig-tui command or the authconfig command.

48. What command can you use to query information from the kernel about RAID arrays?
Use the /usr/share/doc/dovecot-1.0.7/examples/mkcert.sh command after editing the /etc/pki/dovecot/dovecot-openssl.cnf file.
The file that stores usernames and their encrypted passwords is erased and replaced with a new file.
via the command line
cat /proc/mdstat

49. Do you need to write changes to the disk when using the parted command? What about fdisk?
support for TCP Wrappers
When you exit the parted utility - all your changes are automatically written to disk. With the fdisk command - you need to manually write your changes to disk for them to take effect.
The dig - host - and ping commands can be used to test DNS server functionality.
halts the system

50. How do you run a command with elevated privileges?
repquota
Use the route command with the add option to create a static route.
The mount command lists all currently mounted file systems.
You can use the sudo command to run a command with elevated privileges provided you have the rights in the /etc/sudoers file.