RHCSA

Instructions:

• Answer 50 questions in 15 minutes.
• If you are not ready to take this test, you can study here.
• Match each statement with the correct term.
• Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. What is the xinetd service used for?
The /etc/hosts file is a local lookup file used to map IP addresses to hostnames if a DNS server isn't available.
The xinetd daemon is used to control and/or run multiple system services. One example is a TFTP server.
cat /proc/mdstat
support for TCP Wrappers


2. Most boot issues can be resolved by...
Use the ps command to view processes and their CPU usage.
entering rescue mode and repairing the problem.
SELinux provides enhanced granular security for the Linux operating system.
PAM is used as a modular way to leverage security. In this chapter - the main function we discussed was for managing password policies and complexity.


3. What command can you use to view the current ACL on a file?
This command reboots virtual guest Client04.
getfacl
Use the chkconfig command to enable or disable services during the boot process. The on option enables the service and off disables it.
useradd -c "Jr Admin" George


4. What benefit does a web proxy provide to your network?
By default - Squid runs on port 3128.
The lftp command can be used on a client to test FTP server connections.
A web proxy can provide multiple benefits - including security - web page caching for faster load times - and load balancing.
Version 2 is the latest and most secure version of SSH.


5. What is the format of the /etc/shadow file?
The format of the /etc/shadow file is <username>:<encrypted password>:<last passwd change>:<min>:<max>:<warn>:<inactive>:<expires>:<not used>.
Stage 1: During this stage - the primary bootloader is read into memory by the BIOS from the MBR. Stage 1.5: During this stage - the bootloader is read into memory by the stage 1 bootloader (only if necessary). Stage 2: During this stage - the bootlo
The /var/log/audit/audit.log file contains all policy violations.
The vsftpd package is used to install an FTP server.


6. What does ifconfig 172.168.1.100 netmask 255.255.255.0 eth1 do?
The lftp command can be used on a client to test FTP server connections.
This command sets the eth1 interface to have a static IP address of 172.168.1.100 with a netmask of 255.255.255.0.
Use the setgid flag to create the appropriate permissions (chmod 2770).
Kickstart supports both basic and advanced partitioning (RAID/LVM).


7. Samba servers can...
serve both files and printers to users
An ext3 file system has journaling built in to it - whereas the ext2 file system doesn't.
chkconfig—list
Using the chcon command - you can change the context of a file to work with Apache.


8. What port does the DHCP server listen on by default?
The htpasswd command can be used to password-protect a web page.
The DHCP server listens on port 67 by default.
The print option is used with both the fdisk and parted commands to display the current partition tables.
The lftp command can be used on a client to test FTP server connections.


9. What port on the firewall needs to be open for the TFTP server to work?
RAID 0 (Striping) - RAID 1 (Mirror) - and RAID 5 (Striping with parity).
serve both files and printers to users
The TFTP server uses UDP port 69.
Enforcing during installation


10. What is the virsh command used for?
The virsh command is used to manage virtual guests.
The /etc/hosts file is a local lookup file used to map IP addresses to hostnames if a DNS server isn't available.
service httpd configtest
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.


11. How can you change the security context of a directory to work with Apache?
Apache uses port 80 for HTTP and port 443 for HTTPS.
The rdnc-confgen command generates an rndc.conf file for the rndc utility.
This command sets the eth1 interface to have a static IP address of 172.168.1.100 with a netmask of 255.255.255.0.
Using the chcon command - you can change the context of a file to work with Apache.


12. What command can you use to change the context of files?
By defining a %post section - you can run scripts after a kickstart installation is complete.
For Apache to run a secure site - the mod_ssl package is required to be installed.
chcon
An A record translates translated hostnames to IP addresses - and a PTR record works the other way around.


13. What command can you use to view mounted Samba shares?
VNC is used to control a remote desktop session.
The smbstatus command shows you currently mounted Samba resources.
The three utilities are: route - ping - and nslookup.
You must open TCP ports 20 and 21 for the FTP server to function properly.


14. What command would you use to create a group - to add the user George to the group?
You should never use the -U option because it erases the prior kernel when updating. This leaves you with no fallback kernel should your system not boot properly.
chkconfig—list
Use the groupadd command to create a group. You can then add user George with the following: usermod -G <group name> George
SSH is used for secure remote management of Linux systems.


15. Can you name the two commands that can be used to view the free space on the system?
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.
The du and df commands are used to view available space on the system.
getfacl
Typing the mail or mutt command allows you to read mail from the command line.


16. What happens to jobs that are scheduled to run while the system is off?
You have the flexibility to resize and add new volumes on the fly. With basic partitions - any time that you want to make a change - you need to destroy the partition and create it again.
load balancing and redundancy benefits
By default - Squid runs on port 3128.
When the system starts up again - the cron service will run any jobs that were missed while the system was off. On Red Hat Enterprise Linux 5 - the anacron service handles this functionality.


17. SSH does...
The five directories are BUILD - RPMS - SOURCES - SPECS - and SRPMS.
The install.log.syslog file contains messages that are generated during the installation. If you run into trouble during the installation - this is a good place to start.
The lftp command can be used on a client to test FTP server connections.
support TCP Wrappers


18. What port does the rndc utility listen on by default?
LUKS encryption
By default - the rndc utility listens on port 953.
Public/private key authentication provides an additional layer of security because you need the correct key instead of just knowing someone's password. Passwords combined with public/private keys take the security one additional step.
browseable option


19. What command is used to create a user for Samba?
schedule one-time-only jobs
When the system enters into runlevel 2 - the rsyslog service has a priority of 12 when starting. Anything with a lower number (or the same number and lower first letter) starts before the rsyslog service.
The last rule is always an implicit deny statement rejecting anything that wasn't matched by previous rules.
The smbpasswd command is used to create Samba users.


20. What command can be used to view the queue for at service jobs?
Network installations can be performed using the HTTP - FTP - and NFS protocols.
atq
choose which mode you'd like it to operate in
SSH is used for secure remote management of Linux systems.


21. The portmap service was replaced by the ______________ in Red Hat Enterprise Linux 6.
generates errors under Red Hat Enterprise Linux 6
getfacl
rpcbind service
getsebool


22. Explain the difference between soft and hard limits in quotas.

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


23. Before you work with ACLs - what do you need to do to the file system?
chkconfig—list
The file system where ACLs will be implemented must be mounted with the acl option before ACLs will work properly.
The TFTP server uses UDP port 69.
kickstart installations to work


24. What command is used to show all services being controlled by the xinetd daemon?
The mount command lists all currently mounted file systems.
chkconfig xinetd --list
alternatives --config mta
Use the /usr/share/doc/dovecot-1.0.7/examples/mkcert.sh command after editing the /etc/pki/dovecot/dovecot-openssl.cnf file.


25. What commands can you use to add a client machine to an LDAP server?
setsebool -P nfs_export_all_rw=1
The /var/lib/nfs/etab file is used to keep track of currently exported resources.
You can use the authconfig-tui command or the authconfig command.
Apache uses port 80 for HTTP and port 443 for HTTPS.


26. For Red Hat Enterprise Linux 6 - SELinux comes set up in enforcing mode. When installing Red Hat Enterprise Linux 5 - you have the option to...

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


27. What command can you use to create your own repositories?
export one or all resources
createrepo
This chapter described tdbsm and smbpasswd back-end authentication.
chkconfig sshd off


28. What port does NFS use by default?
The -t nfs option is used with the mount command to mount NFS resources.
Enforcing during installation
The NFS service uses TCP port 2049 by default.
Version 2 is the latest and most secure version of SSH.


29. How can you list all services on the system to tell whether they will boot during startup?
chkconfig—list
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.
The xinetd daemon is used to control and/or run multiple system services. One example is a TFTP server.


30. What command and option do you use to view the description of Boolean values?
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.
The format of the /etc/shadow file is <username>:<encrypted password>:<last passwd change>:<min>:<max>:<warn>:<inactive>:<expires>:<not used>.
semanage boolean -l
For Apache to run a secure site - the mod_ssl package is required to be installed.


31. What is the difference between an A record and a PTR record?
The /etc/fstab file.
This command sets the eth1 interface to have a static IP address of 172.168.1.100 with a netmask of 255.255.255.0.
you have access to the correct packages or repositories.
An A record translates translated hostnames to IP addresses - and a PTR record works the other way around.


32. What command can you use to check the config file of the DHCP server?
setsebool -P nfs_export_all_rw=1
SSH is used for secure remote management of Linux systems.
You can use the -q option to query an installed package. Combining grep and the -qa options - you can search among all installed packages on the system.
service dhcpd configtest


33. The virt-install package allows you to manage virtual machines _____________. The virt-manager package allows you to manage virtual machines via a GUI interface.
via the command line
The superblock is a structure that contains metadata of the file system. If this becomes corrupt - you are in trouble.
used for kickstart and/or network installs
The file system where ACLs will be implemented must be mounted with the acl option before ACLs will work properly.


34. Place all files you want added to a _______________ during creation.

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


35. What is the /var/lib/nfs/etab file used for?
via the command line
chkconfig sshd off
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.
The /var/lib/nfs/etab file is used to keep track of currently exported resources.


36. What is the /etc/vsftpd/user_list file used for?
getsebool
The user_list file can be used to limit which users have access to the FTP server.
A user's home directory is created under the /home directory.
The gateway is incorrectly set - and the subnet of the host you are trying to reach is inaccessible.


37. What client-side command can you use to test your FTP server connection?
cat /proc/mdstat
The lftp command can be used on a client to test FTP server connections.
service httpd configtest
After you connect to a hypervisor - you can use virsh list —all to list all virtual guests.


38. What does the rdnc-confgen command do?
The rdnc-confgen command generates an rndc.conf file for the rndc utility.
The SMTP service runs on TCP port 110.
The four types of DNS servers are master - slave - caching-only - and forwarding.
The /etc/exports file needs to contain any directory that you want to export - including which options you'd like to use as well.


39. Can you name three utilities that can be used for network or DNS client troubleshooting?
The three utilities are: route - ping - and nslookup.
A large warning message appears indicating that the key doesn't match the host you are connecting to. You have to remove the key/host pair from the known_hosts file to proceed.
The tcpdump command is used to monitor network connections on different interfaces.
generates errors under Red Hat Enterprise Linux 6


40. What is the difference between an ext2 and ext3 file system?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


41. What port does the SMTP service run on?
Use the top command to view CPU and memory usage.
The SMTP service runs on TCP port 110.
service httpd configtest
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.


42. What protocols are used with Dovecot?
By using centralized authentication - you don't need to re-create or maintain multiple accounts across every system in your organization.
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.
You add your action to the end of the /home/user01/.bashrc file.


43. What three commands can you use to help verify that the DNS server is functioning properly?
Public/private key authentication provides an additional layer of security because you need the correct key instead of just knowing someone's password. Passwords combined with public/private keys take the security one additional step.
The format of the /etc/shadow file is <username>:<encrypted password>:<last passwd change>:<min>:<max>:<warn>:<inactive>:<expires>:<not used>.
The dig - host - and ping commands can be used to test DNS server functionality.
The vsftpd package is used to install an FTP server.


44. What command and options can you use to update the time?
After the ntpd service is stopped - you can use the ntpdate <server> command to update/sync the time.
Physical volumes - volume groups - and logical volumes.
The service command is used to start - stop - and manage system services.
The gateway is incorrectly set - and the subnet of the host you are trying to reach is inaccessible.


45. What are the two types of back-end authentication mechanisms discussed in this chapter?
The SMTP service runs on TCP port 110.
This chapter described tdbsm and smbpasswd back-end authentication.
The xinetd daemon is used to control and/or run multiple system services. One example is a TFTP server.
The rpm command can operate in install - query - or verify modes.


46. Red Hat Enterprise Linux 6 is the only version that officially supports _______
LUKS encryption
You can use the -q option to query an installed package. Combining grep and the -qa options - you can search among all installed packages on the system.
By defining a %post section - you can run scripts after a kickstart installation is complete.
mkfs.ext4


47. What is the difference between the update (-U) and install (-i) options when using rpm to update the kernel?
You can use the authconfig-tui command or the authconfig command.
You should never use the -U option because it erases the prior kernel when updating. This leaves you with no fallback kernel should your system not boot properly.
By default - Squid runs on port 3128.
The /proc directory. The /proc/sys directory is the place where you actually tune kernel parameters.


48. What is the benefit to using centralized authentication?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


49. Before you work with quotas - what do you need to do to the file system?
A virtual host is a way of hosting multiple sites using a single IP address.
generates errors under Red Hat Enterprise Linux 6
The file system where quotas will be implemented must be mounted with the usrquota and grpquota options before quotas will work properly.
The smbpasswd command is used to create Samba users.


50. What command disables the SSH service from running when the system boots?
chkconfig sshd off
After you connect to a hypervisor - you can use virsh list —all to list all virtual guests.
LUKS encryption
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.