RHCSA

Instructions:

• Answer 50 questions in 15 minutes.
• If you are not ready to take this test, you can study here.
• Match each statement with the correct term.
• Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. What command do you use to report information on quota usage?
chkconfig sshd off
The /etc/dhcp/dhcpd.conf file is the main config file for the DHCP service.
repquota
Stage 1: During this stage - the primary bootloader is read into memory by the BIOS from the MBR. Stage 1.5: During this stage - the bootloader is read into memory by the stage 1 bootloader (only if necessary). Stage 2: During this stage - the bootlo


2. What command can you use to get information about logical volumes?
rpmbuild
via the command line
lvdisplay
The /etc/fstab file.


3. Which remote management service is installed by default?Can you name the port that it uses?
The SSH service is almost always installed by default in Red Hat. It uses TCP port 22 - and this port is open on the default firewall rules.
The rndc utility provides a method for managing the DNS server remotely and securely.
The service command is used to start - stop - and manage system services.
alternatives --config mta


4. What command is used to show all services being controlled by the xinetd daemon?
getsebool
chkconfig xinetd --list
The lastlog and faillog commands are used to view user login-related events?
serve both files and printers to users


5. What is the benefit of using public/private key authentication?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


6. What command can you use to test connectivity to another host?
The ping command can be used to verify connectivity to another host.
The mount command lists all currently mounted file systems.
When the system starts up again - the cron service will run any jobs that were missed while the system was off. On Red Hat Enterprise Linux 5 - the anacron service handles this functionality.
enabled by default


7. What option needs to be used with the mount command to mount an NFS resource?
Use the /usr/share/doc/dovecot-1.0.7/examples/mkcert.sh command after editing the /etc/pki/dovecot/dovecot-openssl.cnf file.
The -t nfs option is used with the mount command to mount NFS resources.
Use the top command to view CPU and memory usage.
A swap is scratch space on your file system used as virtual memory. A swap can be created as a partition or a device file.


8. To create a RAID or LVM partition using kickstart
A gateway is used as an entry and exit point for a subnet on a network. To contact hosts outside your subnet - you need to pass through a gateway.
Kickstart supports both basic and advanced partitioning (RAID/LVM).
Use the setgid flag to create the appropriate permissions (chmod 2770).
used for kickstart and/or network installs


9. What are the three different types of RAID described in this chapter?
Kickstart supports both basic and advanced partitioning (RAID/LVM).
Yum repository config files (.repo files) are located in the /etc/yum.repos.d directory. You can also make direct entries into the main /etc/yum.conf file.
RAID 0 (Striping) - RAID 1 (Mirror) - and RAID 5 (Striping with parity).
Physical volumes - volume groups - and logical volumes.


10. What command can you use to validate the syntax of the Apache config file?
The two main config files are master.cf and main.cf.
Use the yum groupinstall command to install multiple packages in a single group at once.
The /etc/exports file needs to contain any directory that you want to export - including which options you'd like to use as well.
service httpd configtest


11. A slave DNS server provides...
The DHCP server listens on port 67 by default.
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.
load balancing and redundancy benefits
rpcbind service


12. What is the difference between an A record and a PTR record?
entering rescue mode and repairing the problem.
An A record translates translated hostnames to IP addresses - and a PTR record works the other way around.
Upstart. The Upstart utility is now used in the boot process for Red Hat Enterprise Linux 6.
The rdnc-confgen command generates an rndc.conf file for the rndc utility.


13. What is the /etc/vsftpd/user_list file used for?
defining a %pre section although it is rarely used
The user_list file can be used to limit which users have access to the FTP server.
Network installations can be performed using the HTTP - FTP - and NFS protocols.
SELinux provides enhanced granular security for the Linux operating system.


14. What is the benefit to using centralized authentication?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


15. What is the point of using SELinux?
SELinux provides enhanced granular security for the Linux operating system.
The last rule is always an implicit deny statement rejecting anything that wasn't matched by previous rules.
You should never allow remote root access. Should your root account become compromised and you use the same password - someone could gain access to all your systems. You also don't want the most powerful user of your system (with no accountability) l
You add your action to the end of the /home/user01/.bashrc file.


16. What does the testparm command do?
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.
You can use the remove or erase options with yum to remove a package.
The /var/liv/dhcpd/dhcpd.leases file contains all clients IP address currently in use.
The testparm command allows you to check for syntax errors in the /etc/samba/smb.conf file.


17. A service needs to have _______________ to be able to use it.
The htpasswd command can be used to password-protect a web page.
PAM is used as a modular way to leverage security. In this chapter - the main function we discussed was for managing password policies and complexity.
support for TCP Wrappers
The file system where quotas will be implemented must be mounted with the usrquota and grpquota options before quotas will work properly.


18. What command can you use to create your own repositories?
createrepo
rpmbuild
The TFTP server uses UDP port 69.
Stage 1: During this stage - the primary bootloader is read into memory by the BIOS from the MBR. Stage 1.5: During this stage - the bootloader is read into memory by the stage 1 bootloader (only if necessary). Stage 2: During this stage - the bootlo


19. What is a swap? Is it created as a partition or device file?
A swap is scratch space on your file system used as virtual memory. A swap can be created as a partition or a device file.
The NFS service uses TCP port 2049 by default.
If you shrink a volume group or logical volume - there is a chance you could lose data depending on how much you shrink the volume.
The three utilities are: route - ping - and nslookup.


20. What command can be used to view the queue for at service jobs?
entering rescue mode and repairing the problem.
The /etc/exports file needs to contain any directory that you want to export - including which options you'd like to use as well.
atq
generates errors under Red Hat Enterprise Linux 6


21. There are four types of DNS servers. Name them.
rpmbuild
By default - the rndc utility listens on port 953.
The four types of DNS servers are master - slave - caching-only - and forwarding.
The vsftpd package is used to install an FTP server.


22. What command can you use to view the current ACL on a file?
getfacl
The SSH service is almost always installed by default in Red Hat. It uses TCP port 22 - and this port is open on the default firewall rules.
The file that stores usernames and their encrypted passwords is erased and replaced with a new file.
The three utilities are: route - ping - and nslookup.


23. What command disables the SSH service from running when the system boots?
This command reboots virtual guest Client04.
The testparm command allows you to check for syntax errors in the /etc/samba/smb.conf file.
chkconfig sshd off
schedule one-time-only jobs


24. To export directories as resources - what file needs to be edited?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


25. FTP is one of three protocols ______________. The other two protocols are NFS and HTTP.
used for kickstart and/or network installs
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
You have the flexibility to resize and add new volumes on the fly. With basic partitions - any time that you want to make a change - you need to destroy the partition and create it again.


26. What option is used to allow anonymous uploads to the FTP server?
The anonymous_enable=YES option in the main config file allows anonymous uploads.
The -t nfs option is used with the mount command to mount NFS resources.
A gateway is used as an entry and exit point for a subnet on a network. To contact hosts outside your subnet - you need to pass through a gateway.
The /etc/hosts file is a local lookup file used to map IP addresses to hostnames if a DNS server isn't available.


27. If a package is built on an RHEL6 system and deployed to a custom RHEL5 repository - are RHEL5 systems able to use it?
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.
RAID 0 (Striping) - RAID 1 (Mirror) - and RAID 5 (Striping with parity).
Enforcing during installation
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.


28. What is the rndc utility used for?
The rndc utility provides a method for managing the DNS server remotely and securely.
The service command is used to start - stop - and manage system services.
useradd -c "Jr Admin" George
serve both files and printers to users


29. What is the /var/lib/nfs/etab file used for?
service named configtest
The /var/lib/nfs/etab file is used to keep track of currently exported resources.
The tcpdump command is used to monitor network connections on different interfaces.
The rpm command can operate in install - query - or verify modes.


30. What is the difference between an ext2 and ext3 file system?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


31. What three commands can you use to help verify that the DNS server is functioning properly?
The anonymous_enable=YES option in the main config file allows anonymous uploads.
The lastlog and faillog commands are used to view user login-related events?
The rdnc-confgen command generates an rndc.conf file for the rndc utility.
The dig - host - and ping commands can be used to test DNS server functionality.


32. What are the five required directories when building RPMS?
Use the groupadd command to create a group. You can then add user George with the following: usermod -G <group name> George
The five directories are BUILD - RPMS - SOURCES - SPECS - and SRPMS.
Enforcing during installation
The SMTP service runs on TCP port 110.


33. Where are Yum repository config files located?
support for TCP Wrappers
Yum repository config files (.repo files) are located in the /etc/yum.repos.d directory. You can also make direct entries into the main /etc/yum.conf file.
getsebool
chkconfig xinetd --list


34. What file is used to maintain custom parameters for the kernel during system boot?
The /etc/sysctl.conf file maintains a list of custom kernel parameters that should be applied during system boot.
Public/private key authentication provides an additional layer of security because you need the correct key instead of just knowing someone's password. Passwords combined with public/private keys take the security one additional step.
ifconfig
semanage boolean -l


35. Place all files you want added to a _______________ during creation.

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


36. What directory is used to represent the virtual file system created by the kernel?
repquota
useradd -c "Jr Admin" George
chkconfig xinetd --list
The /proc directory. The /proc/sys directory is the place where you actually tune kernel parameters.


37. For Red Hat Enterprise Linux 6 - SELinux comes set up in enforcing mode. When installing Red Hat Enterprise Linux 5 - you have the option to...

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


38. What port must be opened on the firewall for DNS?
By entering the GRUB boot menu - you can choose the a option to append something to the kernel command-line options.
DNS uses port 53.
Using the chcon command - you can change the context of a file to work with Apache.
setsebool -P nfs_export_all_rw=1


39. To grow a file system
Use the setgid flag to create the appropriate permissions (chmod 2770).
The rpm command can operate in install - query - or verify modes.
Use the resize2fs command to grow a file system.
By using centralized authentication - you don't need to re-create or maintain multiple accounts across every system in your organization.


40. The exportfs command is used to...
Upstart. The Upstart utility is now used in the boot process for Red Hat Enterprise Linux 6.
The /proc directory. The /proc/sys directory is the place where you actually tune kernel parameters.
export one or all resources
Use the yum groupinstall command to install multiple packages in a single group at once.


41. What command displays your current interfaces and IP address?
schedule one-time-only jobs
ifconfig
Yum repository config files (.repo files) are located in the /etc/yum.repos.d directory. You can also make direct entries into the main /etc/yum.conf file.
The rdnc-confgen command generates an rndc.conf file for the rndc utility.


42. What command (and options) can be used to create a user named George with the description "Jr Admin"?
useradd -c "Jr Admin" George
Enforcing during installation
The partprobe command forces the kernel to reread the partition table. You should always call it after making any changes to your system partitions.
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.


43. Which log file is used to keep track of policy violations?
You have the flexibility to resize and add new volumes on the fly. With basic partitions - any time that you want to make a change - you need to destroy the partition and create it again.
The /var/log/audit/audit.log file contains all policy violations.
The last rule is always an implicit deny statement rejecting anything that wasn't matched by previous rules.
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.


44. What are the side effects of shrinking a volume group or logical volume?
Use the route command with the add option to create a static route.
If you shrink a volume group or logical volume - there is a chance you could lose data depending on how much you shrink the volume.
If you are a hosting company or want to run multiple websites/applications from a single IP address - you can use virtual hosts to accomplish this.
Use the groupadd command to create a group. You can then add user George with the following: usermod -G <group name> George


45. What options with the yum command would you use to remove a package?
Upstart. The Upstart utility is now used in the boot process for Red Hat Enterprise Linux 6.
service named configtest
generates errors under Red Hat Enterprise Linux 6
You can use the remove or erase options with yum to remove a package.


46. What command can you use to view NFS statistics?
service sshd statuts
via the command line
The nfsstat command can be used to view NFS statistics.
enabled by default


47. How can you change the security context of a directory to work with Apache?
Using the chcon command - you can change the context of a file to work with Apache.
The /etc/dhcp/dhcpd.conf file is the main config file for the DHCP service.
atq
rpcbind service


48. Most boot issues can be resolved by...
ifconfig
You must ensure that the /boot/grub/grub.conf file has the new entry for your newly updated kernel to be able to boot into it.
entering rescue mode and repairing the problem.
The /var/log/audit/audit.log file contains all policy violations.


49. What command can you use to create a password-protected page?
ifconfig
A soft limit acts like an alarm - signaling you when you are reaching your limit. If you don't specify a grace period - the soft limit is the max. A hard limit is required only when a grace period exists. It is the max limit you can hit before your g
The htpasswd command can be used to password-protect a web page.
The smbstatus command shows you currently mounted Samba resources.


50. Are additional packages besides httpd required for a secure website - If so - what are they?
For Apache to run a secure site - the mod_ssl package is required to be installed.
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.
service named configtest
A large warning message appears indicating that the key doesn't match the host you are connecting to. You have to remove the key/host pair from the known_hosts file to proceed.