RHCSA

Instructions:

• Answer 50 questions in 15 minutes.
• If you are not ready to take this test, you can study here.
• Match each statement with the correct term.
• Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. What command can you use to view NFS statistics?
The format of the /etc/shadow file is <username>:<encrypted password>:<last passwd change>:<min>:<max>:<warn>:<inactive>:<expires>:<not used>.
The testparm command allows you to check for syntax errors in the /etc/samba/smb.conf file.
RAID 0 (Striping) - RAID 1 (Mirror) - and RAID 5 (Striping with parity).
The nfsstat command can be used to view NFS statistics.


2. What are the two types of back-end authentication mechanisms discussed in this chapter?
rpmbuild
This chapter described tdbsm and smbpasswd back-end authentication.
The rndc utility provides a method for managing the DNS server remotely and securely.
run on any port you'd like (provided that port is available)


3. What three protocols can you use to perform network installations?
Use the top command to view CPU and memory usage.
service dhcpd configtest
Network installations can be performed using the HTTP - FTP - and NFS protocols.
kickstart installations to work


4. What command and option can you use to enable a service to start on boot?
The grep -v ^# /etc/vsftpd/vsftpd.conf command shows you all the options currently being used with the FTP server.
Use the chkconfig command to enable or disable services during the boot process. The on option enables the service and off disables it.
The /var/log/audit/audit.log file contains all policy violations.
The lastlog and faillog commands are used to view user login-related events?


5. If a package is built on an RHEL6 system and deployed to a custom RHEL5 repository - are RHEL5 systems able to use it?
The file system where quotas will be implemented must be mounted with the usrquota and grpquota options before quotas will work properly.
The virsh command is used to manage virtual guests.
The print option is used with both the fdisk and parted commands to display the current partition tables.
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.


6. What command can you use to view mounted Samba shares?
The DHCP server listens on port 67 by default.
A swap is scratch space on your file system used as virtual memory. A swap can be created as a partition or a device file.
The SMTP service runs on TCP port 110.
The smbstatus command shows you currently mounted Samba resources.


7. What is the name of the package that allows you to install VNC?
The last rule is always an implicit deny statement rejecting anything that wasn't matched by previous rules.
The grep -v ^# /etc/vsftpd/vsftpd.conf command shows you all the options currently being used with the FTP server.
The VNC package for Red Hat Enterprise Linux 6 is tiger-vnc.
defining a %pre section although it is rarely used


8. What port does NFS use by default?
run on any port you'd like (provided that port is available)
export one or all resources
The service command is used to start - stop - and manage system services.
The NFS service uses TCP port 2049 by default.


9. What command can you use to check the config file of the DHCP server?
service dhcpd configtest
Enforcing during installation
halts the system
atq


10. What are the side effects of shrinking a volume group or logical volume?
The rndc utility provides a method for managing the DNS server remotely and securely.
The nfsstat command can be used to view NFS statistics.
If you shrink a volume group or logical volume - there is a chance you could lose data depending on how much you shrink the volume.
A virtual host is a way of hosting multiple sites using a single IP address.


11. How can you display all virtual guests after they're connected to a hypervisor?
A large warning message appears indicating that the key doesn't match the host you are connecting to. You have to remove the key/host pair from the known_hosts file to proceed.
After you connect to a hypervisor - you can use virsh list —all to list all virtual guests.
Using the host option in the dhcpd.conf file allows you to reserve a client IP address based on its MAC address.
rpmbuild


12. How can you check the currently mounted file systems?
When you exit the parted utility - all your changes are automatically written to disk. With the fdisk command - you need to manually write your changes to disk for them to take effect.
The du and df commands are used to view available space on the system.
The vsftpd package is used to install an FTP server.
The mount command lists all currently mounted file systems.


13. What are the five required directories when building RPMS?
Sendmail
Version 2 is the latest and most secure version of SSH.
An ext3 file system has journaling built in to it - whereas the ext2 file system doesn't.
The five directories are BUILD - RPMS - SOURCES - SPECS - and SRPMS.


14. What commands can you use to add a client machine to an LDAP server?
choose which mode you'd like it to operate in
browseable option
The du and df commands are used to view available space on the system.
You can use the authconfig-tui command or the authconfig command.


15. What is a gateway used for on a network?
Yum repository config files (.repo files) are located in the /etc/yum.repos.d directory. You can also make direct entries into the main /etc/yum.conf file.
support TCP Wrappers
The NFS service uses TCP port 2049 by default.
A gateway is used as an entry and exit point for a subnet on a network. To contact hosts outside your subnet - you need to pass through a gateway.


16. Through its main config file - SSH can be configured to...

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


17. What option would you use to query an installed package using the rpm command?
DNS uses port 53.
A large warning message appears indicating that the key doesn't match the host you are connecting to. You have to remove the key/host pair from the known_hosts file to proceed.
You can use the -q option to query an installed package. Combining grep and the -qa options - you can search among all installed packages on the system.
After you connect to a hypervisor - you can use virsh list —all to list all virtual guests.


18. What happens if a host changes its IP address and the keys don't match?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


19. What is the /etc/hosts file used for?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


20. What is SSH used for?
The anonymous_enable=YES option in the main config file allows anonymous uploads.
SSH is used for secure remote management of Linux systems.
You have the flexibility to resize and add new volumes on the fly. With basic partitions - any time that you want to make a change - you need to destroy the partition and create it again.
used for kickstart and/or network installs


21. What is the point of using SELinux?
You can use the remove or erase options with yum to remove a package.
Use the groupadd command to create a group. You can then add user George with the following: usermod -G <group name> George
The xinetd daemon is used to control and/or run multiple system services. One example is a TFTP server.
SELinux provides enhanced granular security for the Linux operating system.


22. What is VNC?
The virsh command is used to manage virtual guests.
schedule one-time-only jobs
VNC is used to control a remote desktop session.
A swap is scratch space on your file system used as virtual memory. A swap can be created as a partition or a device file.


23. What command can be used to view the queue for at service jobs?
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.
Network installations can be performed using the HTTP - FTP - and NFS protocols.
PAM is used as a modular way to leverage security. In this chapter - the main function we discussed was for managing password policies and complexity.
atq


24. What does ifconfig 172.168.1.100 netmask 255.255.255.0 eth1 do?
This command sets the eth1 interface to have a static IP address of 172.168.1.100 with a netmask of 255.255.255.0.
The mount command lists all currently mounted file systems.
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.
Use the yum groupinstall command to install multiple packages in a single group at once.


25. Which log file is used to keep track of policy violations?
The /var/log/audit/audit.log file contains all policy violations.
The grep -v ^# /etc/vsftpd/vsftpd.conf command shows you all the options currently being used with the FTP server.
RAID 0 (Striping) - RAID 1 (Mirror) - and RAID 5 (Striping with parity).
choose which mode you'd like it to operate in


26. What is the /var/lib/nfs/etab file used for?
load balancing and redundancy benefits
The /var/lib/nfs/etab file is used to keep track of currently exported resources.
You can use the remove or erase options with yum to remove a package.
A virtual host is a way of hosting multiple sites using a single IP address.


27. What command-line program can you use to check your mail?
defining a %pre section although it is rarely used
The anonymous_enable=YES option in the main config file allows anonymous uploads.
Typing the mail or mutt command allows you to read mail from the command line.
Version 2 is the latest and most secure version of SSH.


28. What protocols are used with Dovecot?
user's home directory in the /etc/skel directory
Network installations can be performed using the HTTP - FTP - and NFS protocols.
A web proxy can provide multiple benefits - including security - web page caching for faster load times - and load balancing.
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.


29. Red Hat Enterprise Linux 6 is the only version that officially supports _______
LUKS encryption
VNC is used to control a remote desktop session.
export one or all resources
The grep -v ^# /etc/vsftpd/vsftpd.conf command shows you all the options currently being used with the FTP server.


30. What is PAM used for?
The /etc/hosts file is a local lookup file used to map IP addresses to hostnames if a DNS server isn't available.
createrepo
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.
PAM is used as a modular way to leverage security. In this chapter - the main function we discussed was for managing password policies and complexity.


31. Explain the difference between soft and hard limits in quotas.

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


32. What is the rndc utility used for?
The anonymous_enable=YES option in the main config file allows anonymous uploads.
defining a %pre section although it is rarely used
The rndc utility provides a method for managing the DNS server remotely and securely.
An ext3 file system has journaling built in to it - whereas the ext2 file system doesn't.


33. What is a virtual host?
A virtual host is a way of hosting multiple sites using a single IP address.
By using centralized authentication - you don't need to re-create or maintain multiple accounts across every system in your organization.
The /etc/sysctl.conf file maintains a list of custom kernel parameters that should be applied during system boot.
getfacl


34. What are SELinux Booleans?
A user's home directory is created under the /home directory.
Kickstart supports both basic and advanced partitioning (RAID/LVM).
SELinux Booleans provide restrictions to different aspects of a service.
The format of the /etc/shadow file is <username>:<encrypted password>:<last passwd change>:<min>:<max>:<warn>:<inactive>:<expires>:<not used>.


35. Where are Yum repository config files located?
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
By default - Squid runs on port 3128.
Yum repository config files (.repo files) are located in the /etc/yum.repos.d directory. You can also make direct entries into the main /etc/yum.conf file.
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.


36. What is the last rule in the iptables file?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


37. What command can you use to view the current ACL on a file?
choose which mode you'd like it to operate in
you have access to the correct packages or repositories.
You add your action to the end of the /home/user01/.bashrc file.
getfacl


38. Most boot issues can be resolved by...
You should never allow remote root access. Should your root account become compromised and you use the same password - someone could gain access to all your systems. You also don't want the most powerful user of your system (with no accountability) l
entering rescue mode and repairing the problem.
You have the flexibility to resize and add new volumes on the fly. With basic partitions - any time that you want to make a change - you need to destroy the partition and create it again.
You can use the remove or erase options with yum to remove a package.


39. What is a swap? Is it created as a partition or device file?
The last rule is always an implicit deny statement rejecting anything that wasn't matched by previous rules.
cat /proc/mdstat
A swap is scratch space on your file system used as virtual memory. A swap can be created as a partition or a device file.
The ping command can be used to verify connectivity to another host.


40. There are four types of DNS servers. Name them.
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.
The four types of DNS servers are master - slave - caching-only - and forwarding.
By default - Squid runs on port 3128.
Version 2 is the latest and most secure version of SSH.


41. What is NAT - How is it used?
Version 2 is the latest and most secure version of SSH.
The last rule is always an implicit deny statement rejecting anything that wasn't matched by previous rules.
Public/private key authentication provides an additional layer of security because you need the correct key instead of just knowing someone's password. Passwords combined with public/private keys take the security one additional step.
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.


42. What command do you use to report information on quota usage?
repquota
The yum and rpm commands are used for package management.
The four types of DNS servers are master - slave - caching-only - and forwarding.
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.


43. What is the benefit to using centralized authentication?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


44. What command can you use to create your own repositories?
user's home directory in the /etc/skel directory
A swap is scratch space on your file system used as virtual memory. A swap can be created as a partition or a device file.
createrepo
chkconfig sshd off


45. Should you allow remote root access - Why or why not?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


46. If you want a specific action to take place when user01 logs in to the system - which file would you edit?
The SMTP service runs on TCP port 110.
Public/private key authentication provides an additional layer of security because you need the correct key instead of just knowing someone's password. Passwords combined with public/private keys take the security one additional step.
You add your action to the end of the /home/user01/.bashrc file.
rpmbuild


47. How can virtual hosts be used?
Using the host option in the dhcpd.conf file allows you to reserve a client IP address based on its MAC address.
you have access to the correct packages or repositories.
If you are a hosting company or want to run multiple websites/applications from a single IP address - you can use virtual hosts to accomplish this.
have the same effect


48. What file is used to maintain custom parameters for the kernel during system boot?
run on any port you'd like (provided that port is available)
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.
user's home directory in the /etc/skel directory
The /etc/sysctl.conf file maintains a list of custom kernel parameters that should be applied during system boot.


49. What option is used with both the fdisk and parted commands to display the current partition tables?
The print option is used with both the fdisk and parted commands to display the current partition tables.
alternatives --config mta
The lastlog and faillog commands are used to view user login-related events?
The chmod command is used to change the permissions of files and directories. The chown command is used to change the ownership of files and directories.


50. What does the following firewall rule accomplish: iptables -I INPUT 5 -p tcp -m tcp --dport 80 -j ACCEPT?
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.
Enforcing during installation
For Apache to run a secure site - the mod_ssl package is required to be installed.
service sshd statuts