RHCSA

Instructions:

• Answer 50 questions in 15 minutes.
• If you are not ready to take this test, you can study here.
• Match each statement with the correct term.
• Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. What is the benefit of using public/private key authentication?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


2. What is the superblock used for?
service sshd statuts
semanage boolean -l
The superblock is a structure that contains metadata of the file system. If this becomes corrupt - you are in trouble.
The partprobe command forces the kernel to reread the partition table. You should always call it after making any changes to your system partitions.


3. What is NAT - How is it used?
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.
You can use the sudo command to run a command with elevated privileges provided you have the rights in the /etc/sudoers file.
Use the yum groupinstall command to install multiple packages in a single group at once.


4. The at command is used to ____________. The cron service handles reoccurring system jobs.
The ping command can be used to verify connectivity to another host.
schedule one-time-only jobs
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.
The tcpdump command is used to monitor network connections on different interfaces.


5. What is the /etc/hosts file used for?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


6. Can you put your /boot partition on a RAID 5 array?
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
Using the chcon command - you can change the context of a file to work with Apache.
RAID 0 (Striping) - RAID 1 (Mirror) - and RAID 5 (Striping with parity).
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.


7. What is a gateway used for on a network?
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
If you are a hosting company or want to run multiple websites/applications from a single IP address - you can use virtual hosts to accomplish this.
Apache uses port 80 for HTTP and port 443 for HTTPS.
A gateway is used as an entry and exit point for a subnet on a network. To contact hosts outside your subnet - you need to pass through a gateway.


8. What command can you use to create a new SSL certificate?
amount of RAM
Use the yum groupinstall command to install multiple packages in a single group at once.
If you shrink a volume group or logical volume - there is a chance you could lose data depending on how much you shrink the volume.
Use the /usr/share/doc/dovecot-1.0.7/examples/mkcert.sh command after editing the /etc/pki/dovecot/dovecot-openssl.cnf file.


9. What port on the firewall needs to be open for the TFTP server to work?
The nfsstat command can be used to view NFS statistics.
The TFTP server uses UDP port 69.
You can use the -q option to query an installed package. Combining grep and the -qa options - you can search among all installed packages on the system.
rpmbuild


10. The default SMTP service has been changed from _________ to Postfix in Red Hat Enterprise Linux 6.
getfacl
The /var/log/audit/audit.log file contains all policy violations.
serve both files and printers to users
Sendmail


11. What port does the DHCP server listen on by default?
service httpd configtest
The DHCP server listens on port 67 by default.
You have the flexibility to resize and add new volumes on the fly. With basic partitions - any time that you want to make a change - you need to destroy the partition and create it again.
support TCP Wrappers


12. SSH does...
amount of RAM
If you shrink a volume group or logical volume - there is a chance you could lose data depending on how much you shrink the volume.
support TCP Wrappers
After you connect to a hypervisor - you can use virsh list —all to list all virtual guests.


13. GRUB has three stages. Can you name them?
A user's home directory is created under the /home directory.
lvdisplay
A swap is scratch space on your file system used as virtual memory. A swap can be created as a partition or a device file.
Stage 1: During this stage - the primary bootloader is read into memory by the BIOS from the MBR. Stage 1.5: During this stage - the bootloader is read into memory by the stage 1 bootloader (only if necessary). Stage 2: During this stage - the bootlo


14. What three commands can you use to help verify that the DNS server is functioning properly?
By using centralized authentication - you don't need to re-create or maintain multiple accounts across every system in your organization.
SELinux Booleans provide restrictions to different aspects of a service.
The dig - host - and ping commands can be used to test DNS server functionality.
By default - Squid runs on port 3128.


15. If a package is built on an RHEL6 system and deployed to a custom RHEL5 repository - are RHEL5 systems able to use it?
alternatives --config mta
The rndc utility provides a method for managing the DNS server remotely and securely.
An ext3 file system has journaling built in to it - whereas the ext2 file system doesn't.
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.


16. What is SSH used for?
A web proxy can provide multiple benefits - including security - web page caching for faster load times - and load balancing.
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.
SSH is used for secure remote management of Linux systems.
The /etc/fstab file.


17. How can you verify the status of the SSH service after the system has booted?
service sshd statuts
Use the yum groupinstall command to install multiple packages in a single group at once.
lvdisplay
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.


18. Should you allow remote root access - Why or why not?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


19. What file needs to be edited so that the system will mount a file system at boot time?
Enforcing during installation
By entering the GRUB boot menu - you can choose the a option to append something to the kernel command-line options.
The /etc/fstab file.
DNS uses port 53.


20. What two ports should be opened on the firewall for the FTP server to function properly?
The format of the /etc/shadow file is <username>:<encrypted password>:<last passwd change>:<min>:<max>:<warn>:<inactive>:<expires>:<not used>.
You must open TCP ports 20 and 21 for the FTP server to function properly.
A user's home directory is created under the /home directory.
When you exit the parted utility - all your changes are automatically written to disk. With the fdisk command - you need to manually write your changes to disk for them to take effect.


21. Which log file is used to keep track of policy violations?
amount of RAM
Typing the mail or mutt command allows you to read mail from the command line.
The /var/log/audit/audit.log file contains all policy violations.
You add your action to the end of the /home/user01/.bashrc file.


22. To grow a file system
Use the resize2fs command to grow a file system.
You can use the remove or erase options with yum to remove a package.
chkconfig—list
choose which mode you'd like it to operate in


23. What client-side command can you use to test your FTP server connection?
The chmod command is used to change the permissions of files and directories. The chown command is used to change the ownership of files and directories.
The lftp command can be used on a client to test FTP server connections.
browseable option
Use the route command with the add option to create a static route.


24. What directory is used to represent the virtual file system created by the kernel?
A virtual host is a way of hosting multiple sites using a single IP address.
The /proc directory. The /proc/sys directory is the place where you actually tune kernel parameters.
Use the resize2fs command to grow a file system.
kickstart installations to work


25. What three components are needed to fully automate a kickstart installation?
The rndc utility provides a method for managing the DNS server remotely and securely.
You can use the sudo command to run a command with elevated privileges provided you have the rights in the /etc/sudoers file.
Stage 1: During this stage - the primary bootloader is read into memory by the BIOS from the MBR. Stage 1.5: During this stage - the bootloader is read into memory by the stage 1 bootloader (only if necessary). Stage 2: During this stage - the bootlo
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.


26. What are the two config files for Postfix called?
The two main config files are master.cf and main.cf.
useradd -c "Jr Admin" George
Use the /usr/share/doc/dovecot-1.0.7/examples/mkcert.sh command after editing the /etc/pki/dovecot/dovecot-openssl.cnf file.
A user's home directory is created under the /home directory.


27. Before you work with quotas - what do you need to do to the file system?
The four types of DNS servers are master - slave - caching-only - and forwarding.
After you connect to a hypervisor - you can use virsh list —all to list all virtual guests.
The file system where quotas will be implemented must be mounted with the usrquota and grpquota options before quotas will work properly.
Use the resize2fs command to grow a file system.


28. You must dictate the ____________ you want allocated to your virtual machine when you create it.
service sshd statuts
When you exit the parted utility - all your changes are automatically written to disk. With the fdisk command - you need to manually write your changes to disk for them to take effect.
getsebool
amount of RAM


29. The old SysInit scripts have been replaced in Red Hat Enterprise Linux 6 for what new boot utility?
PAM is used as a modular way to leverage security. In this chapter - the main function we discussed was for managing password policies and complexity.
Upstart. The Upstart utility is now used in the boot process for Red Hat Enterprise Linux 6.
The five directories are BUILD - RPMS - SOURCES - SPECS - and SRPMS.
getsebool


30. What command can you use to test connectivity to another host?
The ping command can be used to verify connectivity to another host.
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.
Sendmail
The vsftpd package is used to install an FTP server.


31. How can virtual hosts be used?
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.
The smbpasswd command is used to create Samba users.
The print option is used with both the fdisk and parted commands to display the current partition tables.
If you are a hosting company or want to run multiple websites/applications from a single IP address - you can use virtual hosts to accomplish this.


32. In Red Hat Enterprise Linux 6 - the default for SELinux is _______________ (which can be changed after the installation completes). For Red Hat Enterprise Linux 5 - you were able to choose what mode you wanted SELinux to start in.
user's home directory in the /etc/skel directory
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.
Enforcing during installation
By default - the rndc utility listens on port 953.


33. What command can you use to create a file system?
Kickstart supports both basic and advanced partitioning (RAID/LVM).
amount of RAM
mkfs.ext4
The /var/log/audit/audit.log file contains all policy violations.


34. What happens to jobs that are scheduled to run while the system is off?
When the system starts up again - the cron service will run any jobs that were missed while the system was off. On Red Hat Enterprise Linux 5 - the anacron service handles this functionality.
The file system where ACLs will be implemented must be mounted with the acl option before ACLs will work properly.
kickstart installations to work
After you connect to a hypervisor - you can use virsh list —all to list all virtual guests.


35. A service needs to have _______________ to be able to use it.
getsebool
used for kickstart and/or network installs
support for TCP Wrappers
An ext3 file system has journaling built in to it - whereas the ext2 file system doesn't.


36. What is PAM used for?
The superblock is a structure that contains metadata of the file system. If this becomes corrupt - you are in trouble.
The du and df commands are used to view available space on the system.
Use the setgid flag to create the appropriate permissions (chmod 2770).
PAM is used as a modular way to leverage security. In this chapter - the main function we discussed was for managing password policies and complexity.


37. What port must be opened on the firewall for DNS?
The SSH service is almost always installed by default in Red Hat. It uses TCP port 22 - and this port is open on the default firewall rules.
The /etc/sysctl.conf file maintains a list of custom kernel parameters that should be applied during system boot.
This command reboots virtual guest Client04.
DNS uses port 53.


38. Explain the difference between soft and hard limits in quotas.

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


39. How would you view all Boolean options for the HTTP service?
Physical volumes - volume groups - and logical volumes.
The three utilities are: route - ping - and nslookup.
Apache uses port 80 for HTTP and port 443 for HTTPS.
getsebool -a | grep http


40. Runlevel 0 ___________. Runlevel 6 reboots the system.
chkconfig xinetd --list
The five directories are BUILD - RPMS - SOURCES - SPECS - and SRPMS.
halts the system
The htpasswd command can be used to password-protect a web page.


41. What happens if a host changes its IP address and the keys don't match?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


42. Samba servers can...
VNC is used to control a remote desktop session.
serve both files and printers to users
The file system where ACLs will be implemented must be mounted with the acl option before ACLs will work properly.
SELinux provides enhanced granular security for the Linux operating system.


43. What is the xinetd service used for?
Using the host option in the dhcpd.conf file allows you to reserve a client IP address based on its MAC address.
The xinetd daemon is used to control and/or run multiple system services. One example is a TFTP server.
have the same effect
The vsftpd package is used to install an FTP server.


44. What command displays your current interfaces and IP address?
ifconfig
choose which mode you'd like it to operate in
The yum and rpm commands are used for package management.
The file system where ACLs will be implemented must be mounted with the acl option before ACLs will work properly.


45. What command can you use to create a password-protected page?
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.
The htpasswd command can be used to password-protect a web page.
When you exit the parted utility - all your changes are automatically written to disk. With the fdisk command - you need to manually write your changes to disk for them to take effect.
LUKS encryption


46. What option is used to allow anonymous uploads to the FTP server?
The anonymous_enable=YES option in the main config file allows anonymous uploads.
Use the resize2fs command to grow a file system.
The partprobe command forces the kernel to reread the partition table. You should always call it after making any changes to your system partitions.
By default - the rndc utility listens on port 953.


47. What is the virsh command used for?
load balancing and redundancy benefits
The print option is used with both the fdisk and parted commands to display the current partition tables.
The virsh command is used to manage virtual guests.
The tcpdump command is used to monitor network connections on different interfaces.


48. How would you install a group of packages all at a single time?
The DHCP server listens on port 67 by default.
entering rescue mode and repairing the problem.
The anonymous_enable=YES option in the main config file allows anonymous uploads.
Use the yum groupinstall command to install multiple packages in a single group at once.


49. What command can you use to view NFS statistics?
The smbpasswd command is used to create Samba users.
The nfsstat command can be used to view NFS statistics.
Use the /usr/share/doc/dovecot-1.0.7/examples/mkcert.sh command after editing the /etc/pki/dovecot/dovecot-openssl.cnf file.
The /etc/sysctl.conf file maintains a list of custom kernel parameters that should be applied during system boot.


50. If you want a specific action to take place when user01 logs in to the system - which file would you edit?
The rdnc-confgen command generates an rndc.conf file for the rndc utility.
The /var/log/audit/audit.log file contains all policy violations.
LUKS encryption
You add your action to the end of the /home/user01/.bashrc file.