Test your basic knowledge |

RHCSA

Subjects : certifications, it-skills, rhcsa

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. Are additional packages besides httpd required for a secure website - If so - what are they?
For Apache to run a secure site - the mod_ssl package is required to be installed.
amount of RAM
halts the system
The /var/log/audit/audit.log file contains all policy violations.

2. What command can you use to monitor and troubleshoot network connections?
The tcpdump command is used to monitor network connections on different interfaces.
ifconfig
The TFTP server uses UDP port 69.
Enforcing during installation

3. What command is used to create an RPM package?
You can use the -q option to query an installed package. Combining grep and the -qa options - you can search among all installed packages on the system.
rpmbuild
chcon
createrepo

4. What protocols are used with Dovecot?
defining a %pre section although it is rarely used
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.
You should never allow remote root access. Should your root account become compromised and you use the same password - someone could gain access to all your systems. You also don't want the most powerful user of your system (with no accountability) l
Network installations can be performed using the HTTP - FTP - and NFS protocols.

5. To create a RAID or LVM partition using kickstart
alternatives --config mta
Kickstart supports both basic and advanced partitioning (RAID/LVM).
cat /proc/mdstat
setsebool -P nfs_export_all_rw=1

6. What command can you use to view the current ACL on a file?
Stage 1: During this stage - the primary bootloader is read into memory by the BIOS from the MBR. Stage 1.5: During this stage - the bootloader is read into memory by the stage 1 bootloader (only if necessary). Stage 2: During this stage - the bootlo
getfacl
You have the flexibility to resize and add new volumes on the fly. With basic partitions - any time that you want to make a change - you need to destroy the partition and create it again.
The /etc/hosts file is a local lookup file used to map IP addresses to hostnames if a DNS server isn't available.

7. Is it possible to share files among groups - What permissions would you set on the directory to accomplish file sharing if possible?
The chmod command is used to change the permissions of files and directories. The chown command is used to change the ownership of files and directories.
Use the ps command to view processes and their CPU usage.
getsebool -a | grep http
Use the setgid flag to create the appropriate permissions (chmod 2770).

8. What is the /etc/vsftpd/user_list file used for?
The /etc/dhcp/dhcpd.conf file is the main config file for the DHCP service.
createrepo
The user_list file can be used to limit which users have access to the FTP server.
Use the groupadd command to create a group. You can then add user George with the following: usermod -G <group name> George

9. Which file shows you all the client IP addresses?
kickstart installations to work
After you connect to a hypervisor - you can use virsh list —all to list all virtual guests.
The /var/liv/dhcpd/dhcpd.leases file contains all clients IP address currently in use.
The file system where quotas will be implemented must be mounted with the usrquota and grpquota options before quotas will work properly.

10. What is a virtual host?
A virtual host is a way of hosting multiple sites using a single IP address.
VNC is used to control a remote desktop session.
repquota
The rndc utility provides a method for managing the DNS server remotely and securely.

11. What is the difference between an A record and a PTR record?
PAM is used as a modular way to leverage security. In this chapter - the main function we discussed was for managing password policies and complexity.
A user's home directory is created under the /home directory.
An A record translates translated hostnames to IP addresses - and a PTR record works the other way around.
This chapter described tdbsm and smbpasswd back-end authentication.

12. Which remote management service is installed by default?Can you name the port that it uses?
Upstart. The Upstart utility is now used in the boot process for Red Hat Enterprise Linux 6.
The SSH service is almost always installed by default in Red Hat. It uses TCP port 22 - and this port is open on the default firewall rules.
The file system where ACLs will be implemented must be mounted with the acl option before ACLs will work properly.
The SMTP service runs on TCP port 110.

13. What port does the rndc utility listen on by default?
The last rule is always an implicit deny statement rejecting anything that wasn't matched by previous rules.
enabled by default
By default - the rndc utility listens on port 953.
The yum and rpm commands are used for package management.

14. What are the three items that make up LVM?
Physical volumes - volume groups - and logical volumes.
schedule one-time-only jobs
The rndc utility provides a method for managing the DNS server remotely and securely.
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.

15. What commands can you use to add a client machine to an LDAP server?
You can use the authconfig-tui command or the authconfig command.
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
enabled by default
rpcbind service

16. Should you allow remote root access - Why or why not?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

17. What option needs to be used with the mount command to mount an NFS resource?
Use the chkconfig command to enable or disable services during the boot process. The on option enables the service and off disables it.
The -t nfs option is used with the mount command to mount NFS resources.
The anonymous_enable=YES option in the main config file allows anonymous uploads.
The format of the /etc/shadow file is <username>:<encrypted password>:<last passwd change>:<min>:<max>:<warn>:<inactive>:<expires>:<not used>.

18. What port does the SMTP service run on?
The SMTP service runs on TCP port 110.
service httpd configtest
If you are a hosting company or want to run multiple websites/applications from a single IP address - you can use virtual hosts to accomplish this.
chcon

19. Can you name the two commands that can be used to view the free space on the system?
You should never use the -U option because it erases the prior kernel when updating. This leaves you with no fallback kernel should your system not boot properly.
export one or all resources
The du and df commands are used to view available space on the system.
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.

20. What three commands can you use to help verify that the DNS server is functioning properly?
service dhcpd configtest
The user_list file can be used to limit which users have access to the FTP server.
Use the setgid flag to create the appropriate permissions (chmod 2770).
The dig - host - and ping commands can be used to test DNS server functionality.

21. What command is used to show all services being controlled by the xinetd daemon?
The htpasswd command can be used to password-protect a web page.
support TCP Wrappers
you have access to the correct packages or repositories.
chkconfig xinetd --list

22. For Red Hat Enterprise Linux 6 - SELinux comes set up in enforcing mode. When installing Red Hat Enterprise Linux 5 - you have the option to...

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

23. The exportfs command is used to...
The /etc/exports file needs to contain any directory that you want to export - including which options you'd like to use as well.
When the system starts up again - the cron service will run any jobs that were missed while the system was off. On Red Hat Enterprise Linux 5 - the anacron service handles this functionality.
The du and df commands are used to view available space on the system.
export one or all resources

24. Do you need to write changes to the disk when using the parted command? What about fdisk?
When you exit the parted utility - all your changes are automatically written to disk. With the fdisk command - you need to manually write your changes to disk for them to take effect.
Version 2 is the latest and most secure version of SSH.
service httpd configtest
Use the resize2fs command to grow a file system.

25. What is the name of the package that allows you to install VNC?
The rdnc-confgen command generates an rndc.conf file for the rndc utility.
schedule one-time-only jobs
The VNC package for Red Hat Enterprise Linux 6 is tiger-vnc.
The -t nfs option is used with the mount command to mount NFS resources.

26. What happens if you call the command from question 3 with the -c option after it has already been run?
PAM is used as a modular way to leverage security. In this chapter - the main function we discussed was for managing password policies and complexity.
A virtual host is a way of hosting multiple sites using a single IP address.
The file that stores usernames and their encrypted passwords is erased and replaced with a new file.
Public/private key authentication provides an additional layer of security because you need the correct key instead of just knowing someone's password. Passwords combined with public/private keys take the security one additional step.

27. What command can you use to create a file system?
The two main config files are master.cf and main.cf.
The nfsstat command can be used to view NFS statistics.
mkfs.ext4
The TFTP server uses UDP port 69.

28. What port does the DHCP server listen on by default?
The DHCP server listens on port 67 by default.
Use the setgid flag to create the appropriate permissions (chmod 2770).
Network installations can be performed using the HTTP - FTP - and NFS protocols.
The /etc/sysctl.conf file maintains a list of custom kernel parameters that should be applied during system boot.

29. What command and option do you use to view the description of Boolean values?
semanage boolean -l
DNS uses port 53.
SELinux Booleans provide restrictions to different aspects of a service.
used for kickstart and/or network installs

30. What is the /etc/hosts file used for?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

31. What command can you use to create your own repositories?
setsebool -P nfs_export_all_rw=1
The chmod command is used to change the permissions of files and directories. The chown command is used to change the ownership of files and directories.
amount of RAM
createrepo

32. Samba servers can...
serve both files and printers to users
Using the chcon command - you can change the context of a file to work with Apache.
useradd -c "Jr Admin" George
This chapter described tdbsm and smbpasswd back-end authentication.

33. The ____________ is available for each share.
Enforcing during installation
The ping command can be used to verify connectivity to another host.
The NFS service uses TCP port 2049 by default.
browseable option

34. How would you install a group of packages all at a single time?
kickstart installations to work
Use the yum groupinstall command to install multiple packages in a single group at once.
Version 2 is the latest and most secure version of SSH.
After you connect to a hypervisor - you can use virsh list —all to list all virtual guests.

35. How would you view all Boolean options for the HTTP service?
getsebool -a | grep http
VNC is used to control a remote desktop session.
chkconfig xinetd --list
defining a %pre section although it is rarely used

36. What is the default port that Squid runs on?
rpmbuild
By default - Squid runs on port 3128.
The du and df commands are used to view available space on the system.
When you exit the parted utility - all your changes are automatically written to disk. With the fdisk command - you need to manually write your changes to disk for them to take effect.

37. The portmap service was replaced by the ______________ in Red Hat Enterprise Linux 6.
rpcbind service
When the system enters into runlevel 2 - the rsyslog service has a priority of 12 when starting. Anything with a lower number (or the same number and lower first letter) starts before the rsyslog service.
By defining a %post section - you can run scripts after a kickstart installation is complete.
The tcpdump command is used to monitor network connections on different interfaces.

38. Can you put your /boot partition on a RAID 5 array?
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
DNS uses port 53.
This command sets the eth1 interface to have a static IP address of 172.168.1.100 with a netmask of 255.255.255.0.
Dovecot supports the POP3 - POP3S - IMAP - and IMAPS protocols.

39. What port on the firewall needs to be open for the TFTP server to work?
The last rule is always an implicit deny statement rejecting anything that wasn't matched by previous rules.
createrepo
The TFTP server uses UDP port 69.
The NFS service uses TCP port 2049 by default.

40. What command can you use to check the config file of the DHCP server?
Version 2 is the latest and most secure version of SSH.
service dhcpd configtest
defining a %pre section although it is rarely used
When the system enters into runlevel 2 - the rsyslog service has a priority of 12 when starting. Anything with a lower number (or the same number and lower first letter) starts before the rsyslog service.

41. The ______________ for Red Hat Enterprise Linux 5 or 6 includes the use of LVM.
chkconfig xinetd --list
The mount command lists all currently mounted file systems.
Enforcing during installation
The smbpasswd command is used to create Samba users.

42. What options with the yum command would you use to remove a package?
You can use the remove or erase options with yum to remove a package.
Apache uses port 80 for HTTP and port 443 for HTTPS.
If you are a hosting company or want to run multiple websites/applications from a single IP address - you can use virtual hosts to accomplish this.
The SSH service is almost always installed by default in Red Hat. It uses TCP port 22 - and this port is open on the default firewall rules.

43. What does the partprobe command do?
The partprobe command forces the kernel to reread the partition table. You should always call it after making any changes to your system partitions.
The /etc/fstab file.
The ping command can be used to verify connectivity to another host.
The format of the /etc/shadow file is <username>:<encrypted password>:<last passwd change>:<min>:<max>:<warn>:<inactive>:<expires>:<not used>.

44. SSH does...
support TCP Wrappers
The install.log.syslog file contains messages that are generated during the installation. If you run into trouble during the installation - this is a good place to start.
The last rule is always an implicit deny statement rejecting anything that wasn't matched by previous rules.
kickstart installations to work

45. What command can you use to create a password-protected page?
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.
The htpasswd command can be used to password-protect a web page.
Enforcing during installation
You must open TCP ports 20 and 21 for the FTP server to function properly.

46. To export directories as resources - what file needs to be edited?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

47. What port must be opened on the firewall for DNS?
You can use the sudo command to run a command with elevated privileges provided you have the rights in the /etc/sudoers file.
DNS uses port 53.
The /var/liv/dhcpd/dhcpd.leases file contains all clients IP address currently in use.
The /etc/sysctl.conf file maintains a list of custom kernel parameters that should be applied during system boot.

48. What command is used to create a user for Samba?
SSH is used for secure remote management of Linux systems.
The smbpasswd command is used to create Samba users.
Use the groupadd command to create a group. You can then add user George with the following: usermod -G <group name> George
The chmod command is used to change the permissions of files and directories. The chown command is used to change the ownership of files and directories.

49. What three components are needed to fully automate a kickstart installation?
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.
Use the groupadd command to create a group. You can then add user George with the following: usermod -G <group name> George
A user's home directory is created under the /home directory.
SELinux Booleans provide restrictions to different aspects of a service.

50. What command can be used to view the queue for at service jobs?
By defining a %post section - you can run scripts after a kickstart installation is complete.
This chapter described tdbsm and smbpasswd back-end authentication.
atq
Apache uses port 80 for HTTP and port 443 for HTTPS.