Test your basic knowledge |

RHCSA

Subjects : certifications, it-skills, rhcsa

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. Are additional packages besides httpd required for a secure website - If so - what are they?
The file that stores usernames and their encrypted passwords is erased and replaced with a new file.
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.
For Apache to run a secure site - the mod_ssl package is required to be installed.
Version 2 is the latest and most secure version of SSH.

2. The INPUT chain being used is the default under Red Hat Enterprise Linux 5. This rule...
The /var/lib/nfs/etab file is used to keep track of currently exported resources.
generates errors under Red Hat Enterprise Linux 6
The /etc/sysctl.conf file maintains a list of custom kernel parameters that should be applied during system boot.
By defining a %post section - you can run scripts after a kickstart installation is complete.

3. What are the two types of back-end authentication mechanisms discussed in this chapter?
The two main config files are master.cf and main.cf.
Enforcing during installation
serve both files and printers to users
This chapter described tdbsm and smbpasswd back-end authentication.

4. What are the three modes in which the rpm command can operate?
The nfsstat command can be used to view NFS statistics.
A user's home directory is created under the /home directory.
browseable option
The rpm command can operate in install - query - or verify modes.

5. What command and options can you use to update the time?
user's home directory in the /etc/skel directory
This command reboots virtual guest Client04.
After the ntpd service is stopped - you can use the ntpdate <server> command to update/sync the time.
DNS uses port 53.

6. What command do you use to change the permissions on a file or directory - To change ownership?
The SMTP service runs on TCP port 110.
The chmod command is used to change the permissions of files and directories. The chown command is used to change the ownership of files and directories.
You can use the sudo command to run a command with elevated privileges provided you have the rights in the /etc/sudoers file.
For Apache to run a secure site - the mod_ssl package is required to be installed.

7. What options with the yum command would you use to remove a package?
You can use the remove or erase options with yum to remove a package.
Uncomment the following line in the /etc/rsyslog.conf file: #$ModLoad imudp.so #$UDPServerRun 514
The xinetd daemon is used to control and/or run multiple system services. One example is a TFTP server.
alternatives --config mta

8. What port does the rndc utility listen on by default?
The htpasswd command can be used to password-protect a web page.
By default - the rndc utility listens on port 953.
An A record translates translated hostnames to IP addresses - and a PTR record works the other way around.
Use the yum groupinstall command to install multiple packages in a single group at once.

9. What command can you use to query Boolean values?
getsebool
The /etc/dhcp/dhcpd.conf file is the main config file for the DHCP service.
alternatives --config mta
browseable option

10. What three commands can you use to help verify that the DNS server is functioning properly?
The dig - host - and ping commands can be used to test DNS server functionality.
choose which mode you'd like it to operate in
Uncomment the following line in the /etc/rsyslog.conf file: #$ModLoad imudp.so #$UDPServerRun 514
serve both files and printers to users

11. What port does NFS use by default?
The NFS service uses TCP port 2049 by default.
entering rescue mode and repairing the problem.
repquota
The du and df commands are used to view available space on the system.

12. What two commands are special for dealing with user login events?
The lastlog and faillog commands are used to view user login-related events?
enabled by default
The lftp command can be used on a client to test FTP server connections.
The vsftpd package is used to install an FTP server.

13. What command can you use to test the config files before starting the DNS service?
serve both files and printers to users
rpmbuild
service named configtest
The five directories are BUILD - RPMS - SOURCES - SPECS - and SRPMS.

14. What does the testparm command do?
chkconfig sshd off
Version 2 is the latest and most secure version of SSH.
The du and df commands are used to view available space on the system.
The testparm command allows you to check for syntax errors in the /etc/samba/smb.conf file.

15. If a package is built on an RHEL6 system and deployed to a custom RHEL5 repository - are RHEL5 systems able to use it?
mkfs.ext4
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.
you have access to the correct packages or repositories.
The /etc/fstab file.

16. What port must be opened on the firewall for DNS?
DNS uses port 53.
chcon
The print option is used with both the fdisk and parted commands to display the current partition tables.
Uncomment the following line in the /etc/rsyslog.conf file: #$ModLoad imudp.so #$UDPServerRun 514

17. What is the rndc utility used for?
user's home directory in the /etc/skel directory
The dig - host - and ping commands can be used to test DNS server functionality.
The rndc utility provides a method for managing the DNS server remotely and securely.
Use the /usr/share/doc/dovecot-1.0.7/examples/mkcert.sh command after editing the /etc/pki/dovecot/dovecot-openssl.cnf file.

18. The old SysInit scripts have been replaced in Red Hat Enterprise Linux 6 for what new boot utility?
service dhcpd configtest
The superblock is a structure that contains metadata of the file system. If this becomes corrupt - you are in trouble.
Upstart. The Upstart utility is now used in the boot process for Red Hat Enterprise Linux 6.
The user_list file can be used to limit which users have access to the FTP server.

19. To export directories as resources - what file needs to be edited?

20. The default SMTP service has been changed from _________ to Postfix in Red Hat Enterprise Linux 6.
via the command line
Sendmail
You have the flexibility to resize and add new volumes on the fly. With basic partitions - any time that you want to make a change - you need to destroy the partition and create it again.
The SSH service is almost always installed by default in Red Hat. It uses TCP port 22 - and this port is open on the default firewall rules.

21. The package selection screen allows you to install any software you want during the installation process as long as...
Stage 1: During this stage - the primary bootloader is read into memory by the BIOS from the MBR. Stage 1.5: During this stage - the bootloader is read into memory by the stage 1 bootloader (only if necessary). Stage 2: During this stage - the bootlo
you have access to the correct packages or repositories.
The TFTP server uses UDP port 69.
amount of RAM

22. What is the benefit to using centralized authentication?

23. What command do you use to report information on quota usage?
DNS uses port 53.
When the system starts up again - the cron service will run any jobs that were missed while the system was off. On Red Hat Enterprise Linux 5 - the anacron service handles this functionality.
cat /proc/mdstat
repquota

24. What protocols are used with Dovecot?
lvdisplay
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.
have the same effect
SELinux provides enhanced granular security for the Linux operating system.

25. What is a gateway used for on a network?
Using the host option in the dhcpd.conf file allows you to reserve a client IP address based on its MAC address.
A gateway is used as an entry and exit point for a subnet on a network. To contact hosts outside your subnet - you need to pass through a gateway.
The file that stores usernames and their encrypted passwords is erased and replaced with a new file.
By using centralized authentication - you don't need to re-create or maintain multiple accounts across every system in your organization.

26. What are the two config files for Postfix called?
mkfs.ext4
You should never allow remote root access. Should your root account become compromised and you use the same password - someone could gain access to all your systems. You also don't want the most powerful user of your system (with no accountability) l
chkconfig sshd off
The two main config files are master.cf and main.cf.

27. What port does the Apache web server run on - What about HTTPS?
The four types of DNS servers are master - slave - caching-only - and forwarding.
Apache uses port 80 for HTTP and port 443 for HTTPS.
Public/private key authentication provides an additional layer of security because you need the correct key instead of just knowing someone's password. Passwords combined with public/private keys take the security one additional step.
By default - the rndc utility listens on port 953.

28. What command can you use to create your own repositories?
LUKS encryption
createrepo
The smbpasswd command is used to create Samba users.
getsebool -a | grep http

29. What command can you use to validate the syntax of the Apache config file?
service httpd configtest
used for kickstart and/or network installs
schedule one-time-only jobs
service sshd statuts

30. Editing the /etc/xinetd.d/tftp file and enabling the service are the same as running the chkconfig tftp on command. Both of these actions...
The TFTP server uses UDP port 69.
The vsftpd package is used to install an FTP server.
have the same effect
via the command line

31. What happens if a host changes its IP address and the keys don't match?

32. What does it mean if you ping a host and you receive the response Destination Unreachable?
The SMTP service runs on TCP port 110.
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.
The gateway is incorrectly set - and the subnet of the host you are trying to reach is inaccessible.
The user_list file can be used to limit which users have access to the FTP server.

33. What option can you change in the rsyslog config file to accept remote logs (acting as a centralized logging server)?
When the system starts up again - the cron service will run any jobs that were missed while the system was off. On Red Hat Enterprise Linux 5 - the anacron service handles this functionality.
Uncomment the following line in the /etc/rsyslog.conf file: #$ModLoad imudp.so #$UDPServerRun 514
Sendmail
RAID 0 (Striping) - RAID 1 (Mirror) - and RAID 5 (Striping with parity).

34. Most boot issues can be resolved by...
support for TCP Wrappers
Use the groupadd command to create a group. You can then add user George with the following: usermod -G <group name> George
entering rescue mode and repairing the problem.
The lastlog and faillog commands are used to view user login-related events?

35. The virt-install package allows you to manage virtual machines _____________. The virt-manager package allows you to manage virtual machines via a GUI interface.
via the command line
By default - the rndc utility listens on port 953.
You should never allow remote root access. Should your root account become compromised and you use the same password - someone could gain access to all your systems. You also don't want the most powerful user of your system (with no accountability) l
You must open TCP ports 20 and 21 for the FTP server to function properly.

36. The firewall service is...
The nfsstat command can be used to view NFS statistics.
PAM is used as a modular way to leverage security. In this chapter - the main function we discussed was for managing password policies and complexity.
The gateway is incorrectly set - and the subnet of the host you are trying to reach is inaccessible.
enabled by default

37. How would you go about creating a static route?
Use the route command with the add option to create a static route.
The /etc/hosts file is a local lookup file used to map IP addresses to hostnames if a DNS server isn't available.
The /etc/fstab file.
The two main config files are master.cf and main.cf.

38. What are the three items that make up LVM?
Physical volumes - volume groups - and logical volumes.
ifconfig
The vsftpd package is used to install an FTP server.
The rndc utility provides a method for managing the DNS server remotely and securely.

39. What command can be used to easily list all the options in the FTP main config file?
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
The grep -v ^# /etc/vsftpd/vsftpd.conf command shows you all the options currently being used with the FTP server.
The /etc/sysctl.conf file maintains a list of custom kernel parameters that should be applied during system boot.
The /proc directory. The /proc/sys directory is the place where you actually tune kernel parameters.

40. What command (and options) can be used to create a user named George with the description "Jr Admin"?
This chapter described tdbsm and smbpasswd back-end authentication.
useradd -c "Jr Admin" George
The ping command can be used to verify connectivity to another host.
run on any port you'd like (provided that port is available)

41. SSH does...
support TCP Wrappers
The du and df commands are used to view available space on the system.
The rndc utility provides a method for managing the DNS server remotely and securely.
Use the groupadd command to create a group. You can then add user George with the following: usermod -G <group name> George

42. The ____________ is available for each share.
A user's home directory is created under the /home directory.
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.
browseable option
choose which mode you'd like it to operate in

43. What is a virtual host?
You should never use the -U option because it erases the prior kernel when updating. This leaves you with no fallback kernel should your system not boot properly.
The du and df commands are used to view available space on the system.
A virtual host is a way of hosting multiple sites using a single IP address.
The file that stores usernames and their encrypted passwords is erased and replaced with a new file.

44. The portmap service was replaced by the ______________ in Red Hat Enterprise Linux 6.
You should never allow remote root access. Should your root account become compromised and you use the same password - someone could gain access to all your systems. You also don't want the most powerful user of your system (with no accountability) l
You can use the authconfig-tui command or the authconfig command.
rpcbind service
The vsftpd package is used to install an FTP server.

45. What command can you use to query information from the kernel about RAID arrays?
cat /proc/mdstat
Uncomment the following line in the /etc/rsyslog.conf file: #$ModLoad imudp.so #$UDPServerRun 514
lvdisplay
A swap is scratch space on your file system used as virtual memory. A swap can be created as a partition or a device file.

46. What command and option can you use to enable a service to start on boot?
A user's home directory is created under the /home directory.
Use the chkconfig command to enable or disable services during the boot process. The on option enables the service and off disables it.
rpmbuild
The xinetd daemon is used to control and/or run multiple system services. One example is a TFTP server.

47. What does the rdnc-confgen command do?
The format of the /etc/shadow file is <username>:<encrypted password>:<last passwd change>:<min>:<max>:<warn>:<inactive>:<expires>:<not used>.
The rdnc-confgen command generates an rndc.conf file for the rndc utility.
you have access to the correct packages or repositories.
SELinux provides enhanced granular security for the Linux operating system.

48. Which remote management service is installed by default?Can you name the port that it uses?
The gateway is incorrectly set - and the subnet of the host you are trying to reach is inaccessible.
The -t nfs option is used with the mount command to mount NFS resources.
This command sets the eth1 interface to have a static IP address of 172.168.1.100 with a netmask of 255.255.255.0.
The SSH service is almost always installed by default in Red Hat. It uses TCP port 22 - and this port is open on the default firewall rules.

49. What command can you use to view the current ACL on a file?
getfacl
A gateway is used as an entry and exit point for a subnet on a network. To contact hosts outside your subnet - you need to pass through a gateway.
rpmbuild
semanage boolean -l

50. Which version of SSH should you use?
used for kickstart and/or network installs
Version 2 is the latest and most secure version of SSH.
The yum and rpm commands are used for package management.
The file system where ACLs will be implemented must be mounted with the acl option before ACLs will work properly.