RHCSA

Instructions:

• Answer 50 questions in 15 minutes.
• If you are not ready to take this test, you can study here.
• Match each statement with the correct term.
• Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. FTP is one of three protocols ______________. The other two protocols are NFS and HTTP.
Use the /usr/share/doc/dovecot-1.0.7/examples/mkcert.sh command after editing the /etc/pki/dovecot/dovecot-openssl.cnf file.
By default - Squid runs on port 3128.
used for kickstart and/or network installs
Apache uses port 80 for HTTP and port 443 for HTTPS.


2. The ____________ is available for each share.
used for kickstart and/or network installs
A soft limit acts like an alarm - signaling you when you are reaching your limit. If you don't specify a grace period - the soft limit is the max. A hard limit is required only when a grace period exists. It is the max limit you can hit before your g
browseable option
rpmbuild


3. For Red Hat Enterprise Linux 6 - SELinux comes set up in enforcing mode. When installing Red Hat Enterprise Linux 5 - you have the option to...

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


4. To grow a file system
Use the groupadd command to create a group. You can then add user George with the following: usermod -G <group name> George
SELinux Booleans provide restrictions to different aspects of a service.
Use the resize2fs command to grow a file system.
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.


5. What two commands are special for dealing with user login events?
The lastlog and faillog commands are used to view user login-related events?
repquota
Enforcing during installation
The anonymous_enable=YES option in the main config file allows anonymous uploads.


6. How can you check the currently mounted file systems?
You can use the remove or erase options with yum to remove a package.
The mount command lists all currently mounted file systems.
The user_list file can be used to limit which users have access to the FTP server.
Upstart. The Upstart utility is now used in the boot process for Red Hat Enterprise Linux 6.


7. What protocols are used with Dovecot?
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.
You can use the -q option to query an installed package. Combining grep and the -qa options - you can search among all installed packages on the system.
VNC is used to control a remote desktop session.
The htpasswd command can be used to password-protect a web page.


8. What option at the GRUB boot menu can you use to append something to a kernel?
service sshd statuts
chkconfig xinetd --list
By entering the GRUB boot menu - you can choose the a option to append something to the kernel command-line options.
A gateway is used as an entry and exit point for a subnet on a network. To contact hosts outside your subnet - you need to pass through a gateway.


9. What options with the yum command would you use to remove a package?
You can use the remove or erase options with yum to remove a package.
Use the /usr/share/doc/dovecot-1.0.7/examples/mkcert.sh command after editing the /etc/pki/dovecot/dovecot-openssl.cnf file.
Enforcing during installation
support TCP Wrappers


10. What command can you use to create a file system?
Use the /usr/share/doc/dovecot-1.0.7/examples/mkcert.sh command after editing the /etc/pki/dovecot/dovecot-openssl.cnf file.
The grep -v ^# /etc/vsftpd/vsftpd.conf command shows you all the options currently being used with the FTP server.
The file system where quotas will be implemented must be mounted with the usrquota and grpquota options before quotas will work properly.
mkfs.ext4


11. Which version of SSH should you use?
The /proc directory. The /proc/sys directory is the place where you actually tune kernel parameters.
Version 2 is the latest and most secure version of SSH.
chkconfig—list
Typing the mail or mutt command allows you to read mail from the command line.


12. What does the following firewall rule accomplish: iptables -I INPUT 5 -p tcp -m tcp --dport 80 -j ACCEPT?
Use the route command with the add option to create a static route.
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.
PAM is used as a modular way to leverage security. In this chapter - the main function we discussed was for managing password policies and complexity.
The /etc/fstab file.


13. Through its main config file - SSH can be configured to...

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


14. What benefit does a web proxy provide to your network?
The vsftpd package is used to install an FTP server.
The nfsstat command can be used to view NFS statistics.
A web proxy can provide multiple benefits - including security - web page caching for faster load times - and load balancing.
The rpm command can operate in install - query - or verify modes.


15. What happens if a host changes its IP address and the keys don't match?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


16. The INPUT chain being used is the default under Red Hat Enterprise Linux 5. This rule...
By default - the rndc utility listens on port 953.
generates errors under Red Hat Enterprise Linux 6
For Apache to run a secure site - the mod_ssl package is required to be installed.
user's home directory in the /etc/skel directory


17. What command can you use to manage system services?
The service command is used to start - stop - and manage system services.
service dhcpd configtest
The three utilities are: route - ping - and nslookup.
The lastlog and faillog commands are used to view user login-related events?


18. Editing the /etc/xinetd.d/tftp file and enabling the service are the same as running the chkconfig tftp on command. Both of these actions...
have the same effect
You can use the remove or erase options with yum to remove a package.
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.
useradd -c "Jr Admin" George


19. By default - what is the path to a user's home directory?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


20. Should you allow remote root access - Why or why not?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


21. What command can you use to create a password-protected page?
The htpasswd command can be used to password-protect a web page.
Use the top command to view CPU and memory usage.
A gateway is used as an entry and exit point for a subnet on a network. To contact hosts outside your subnet - you need to pass through a gateway.
The grep -v ^# /etc/vsftpd/vsftpd.conf command shows you all the options currently being used with the FTP server.


22. What is VNC?
The three utilities are: route - ping - and nslookup.
The virsh command is used to manage virtual guests.
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
VNC is used to control a remote desktop session.


23. What is the difference between the update (-U) and install (-i) options when using rpm to update the kernel?
A soft limit acts like an alarm - signaling you when you are reaching your limit. If you don't specify a grace period - the soft limit is the max. A hard limit is required only when a grace period exists. It is the max limit you can hit before your g
You should never use the -U option because it erases the prior kernel when updating. This leaves you with no fallback kernel should your system not boot properly.
load balancing and redundancy benefits
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.


24. Does a DHCP server allow reserved IP addresses - If so - how?
You should never use the -U option because it erases the prior kernel when updating. This leaves you with no fallback kernel should your system not boot properly.
PAM is used as a modular way to leverage security. In this chapter - the main function we discussed was for managing password policies and complexity.
Using the host option in the dhcpd.conf file allows you to reserve a client IP address based on its MAC address.
setsebool -P nfs_export_all_rw=1


25. Which log file is used to keep track of policy violations?
Using the host option in the dhcpd.conf file allows you to reserve a client IP address based on its MAC address.
The /var/log/audit/audit.log file contains all policy violations.
ifconfig
The lftp command can be used on a client to test FTP server connections.


26. What is the name of the section used to run scripts after a kickstart installation?
By defining a %post section - you can run scripts after a kickstart installation is complete.
When you exit the parted utility - all your changes are automatically written to disk. With the fdisk command - you need to manually write your changes to disk for them to take effect.
You can use the remove or erase options with yum to remove a package.
The superblock is a structure that contains metadata of the file system. If this becomes corrupt - you are in trouble.


27. What does the partprobe command do?
You can use the -q option to query an installed package. Combining grep and the -qa options - you can search among all installed packages on the system.
The xinetd daemon is used to control and/or run multiple system services. One example is a TFTP server.
By default - the rndc utility listens on port 953.
The partprobe command forces the kernel to reread the partition table. You should always call it after making any changes to your system partitions.


28. What three components are needed to fully automate a kickstart installation?
Using the chcon command - you can change the context of a file to work with Apache.
mkfs.ext4
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.
SELinux provides enhanced granular security for the Linux operating system.


29. What is a virtual host?
The user_list file can be used to limit which users have access to the FTP server.
The htpasswd command can be used to password-protect a web page.
A virtual host is a way of hosting multiple sites using a single IP address.
defining a %pre section although it is rarely used


30. What does S12rsyslog in the /etc/rc.d/rc2.d directory mean?
The rndc utility provides a method for managing the DNS server remotely and securely.
A soft limit acts like an alarm - signaling you when you are reaching your limit. If you don't specify a grace period - the soft limit is the max. A hard limit is required only when a grace period exists. It is the max limit you can hit before your g
You can use the sudo command to run a command with elevated privileges provided you have the rights in the /etc/sudoers file.
When the system enters into runlevel 2 - the rsyslog service has a priority of 12 when starting. Anything with a lower number (or the same number and lower first letter) starts before the rsyslog service.


31. SSH does...
When the system enters into runlevel 2 - the rsyslog service has a priority of 12 when starting. Anything with a lower number (or the same number and lower first letter) starts before the rsyslog service.
support TCP Wrappers
run on any port you'd like (provided that port is available)
service named configtest


32. The virt-install package allows you to manage virtual machines _____________. The virt-manager package allows you to manage virtual machines via a GUI interface.
chkconfig—list
via the command line
serve both files and printers to users
you have access to the correct packages or repositories.


33. What three commands can you use to help verify that the DNS server is functioning properly?
Use the chkconfig command to enable or disable services during the boot process. The on option enables the service and off disables it.
The dig - host - and ping commands can be used to test DNS server functionality.
An A record translates translated hostnames to IP addresses - and a PTR record works the other way around.
The VNC package for Red Hat Enterprise Linux 6 is tiger-vnc.


34. What is the point of using SELinux?
chcon
The user_list file can be used to limit which users have access to the FTP server.
By defining a %post section - you can run scripts after a kickstart installation is complete.
SELinux provides enhanced granular security for the Linux operating system.


35. What command can you use to validate the syntax of the Apache config file?
You can use the sudo command to run a command with elevated privileges provided you have the rights in the /etc/sudoers file.
Typing the mail or mutt command allows you to read mail from the command line.
service httpd configtest
Stage 1: During this stage - the primary bootloader is read into memory by the BIOS from the MBR. Stage 1.5: During this stage - the bootloader is read into memory by the stage 1 bootloader (only if necessary). Stage 2: During this stage - the bootlo


36. What port does the SMTP service run on?
The anonymous_enable=YES option in the main config file allows anonymous uploads.
A web proxy can provide multiple benefits - including security - web page caching for faster load times - and load balancing.
The SMTP service runs on TCP port 110.
mkfs.ext4


37. The exportfs command is used to...
You should never allow remote root access. Should your root account become compromised and you use the same password - someone could gain access to all your systems. You also don't want the most powerful user of your system (with no accountability) l
The tcpdump command is used to monitor network connections on different interfaces.
The rdnc-confgen command generates an rndc.conf file for the rndc utility.
export one or all resources


38. How can virtual hosts be used?
support TCP Wrappers
If you are a hosting company or want to run multiple websites/applications from a single IP address - you can use virtual hosts to accomplish this.
You add your action to the end of the /home/user01/.bashrc file.
The four types of DNS servers are master - slave - caching-only - and forwarding.


39. If a package is built on an RHEL6 system and deployed to a custom RHEL5 repository - are RHEL5 systems able to use it?
When you exit the parted utility - all your changes are automatically written to disk. With the fdisk command - you need to manually write your changes to disk for them to take effect.
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.
user's home directory in the /etc/skel directory
createrepo


40. Are additional packages besides httpd required for a secure website - If so - what are they?
Upstart. The Upstart utility is now used in the boot process for Red Hat Enterprise Linux 6.
For Apache to run a secure site - the mod_ssl package is required to be installed.
You have the flexibility to resize and add new volumes on the fly. With basic partitions - any time that you want to make a change - you need to destroy the partition and create it again.
Use the ps command to view processes and their CPU usage.


41. What is the /var/lib/nfs/etab file used for?
The /var/lib/nfs/etab file is used to keep track of currently exported resources.
Network installations can be performed using the HTTP - FTP - and NFS protocols.
This chapter described tdbsm and smbpasswd back-end authentication.
Use the setgid flag to create the appropriate permissions (chmod 2770).


42. Is it possible to share files among groups - What permissions would you set on the directory to accomplish file sharing if possible?
The testparm command allows you to check for syntax errors in the /etc/samba/smb.conf file.
Use the setgid flag to create the appropriate permissions (chmod 2770).
The lastlog and faillog commands are used to view user login-related events?
By entering the GRUB boot menu - you can choose the a option to append something to the kernel command-line options.


43. What does it mean if you ping a host and you receive the response Destination Unreachable?
The yum and rpm commands are used for package management.
The gateway is incorrectly set - and the subnet of the host you are trying to reach is inaccessible.
The install.log.syslog file contains messages that are generated during the installation. If you run into trouble during the installation - this is a good place to start.
Version 2 is the latest and most secure version of SSH.


44. What port does the rndc utility listen on by default?
By default - the rndc utility listens on port 953.
This command reboots virtual guest Client04.
The lftp command can be used on a client to test FTP server connections.
Apache uses port 80 for HTTP and port 443 for HTTPS.


45. What is the last rule in the iptables file?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


46. What port does NFS use by default?
The htpasswd command can be used to password-protect a web page.
The three utilities are: route - ping - and nslookup.
The NFS service uses TCP port 2049 by default.
After the ntpd service is stopped - you can use the ntpdate <server> command to update/sync the time.


47. Runlevel 0 ___________. Runlevel 6 reboots the system.
LUKS encryption
halts the system
getsebool -a | grep http
via the command line


48. What does the rdnc-confgen command do?
The ping command can be used to verify connectivity to another host.
By default - Squid runs on port 3128.
service httpd configtest
The rdnc-confgen command generates an rndc.conf file for the rndc utility.


49. Red Hat Enterprise Linux 6 is the only version that officially supports _______
The rdnc-confgen command generates an rndc.conf file for the rndc utility.
getfacl
The last rule is always an implicit deny statement rejecting anything that wasn't matched by previous rules.
LUKS encryption


50. What is the difference between an A record and a PTR record?
Network installations can be performed using the HTTP - FTP - and NFS protocols.
The dig - host - and ping commands can be used to test DNS server functionality.
SELinux Booleans provide restrictions to different aspects of a service.
An A record translates translated hostnames to IP addresses - and a PTR record works the other way around.