RHCSA

Instructions:

• Answer 50 questions in 15 minutes.
• If you are not ready to take this test, you can study here.
• Match each statement with the correct term.
• Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. What is the benefit of using public/private key authentication?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


2. What are the five required directories when building RPMS?
The five directories are BUILD - RPMS - SOURCES - SPECS - and SRPMS.
LUKS encryption
The /etc/hosts file is a local lookup file used to map IP addresses to hostnames if a DNS server isn't available.
service httpd configtest


3. What critical step must you take after updating the kernel to a newer version?
createrepo
You must ensure that the /boot/grub/grub.conf file has the new entry for your newly updated kernel to be able to boot into it.
The mount command lists all currently mounted file systems.
A web proxy can provide multiple benefits - including security - web page caching for faster load times - and load balancing.


4. What command is used to show all services being controlled by the xinetd daemon?
chkconfig xinetd --list
The virsh command is used to manage virtual guests.
createrepo
The mount command lists all currently mounted file systems.


5. What does S12rsyslog in the /etc/rc.d/rc2.d directory mean?
generates errors under Red Hat Enterprise Linux 6
The /etc/exports file needs to contain any directory that you want to export - including which options you'd like to use as well.
load balancing and redundancy benefits
When the system enters into runlevel 2 - the rsyslog service has a priority of 12 when starting. Anything with a lower number (or the same number and lower first letter) starts before the rsyslog service.


6. What are SELinux Booleans?
The rpm command can operate in install - query - or verify modes.
Kickstart supports both basic and advanced partitioning (RAID/LVM).
SELinux Booleans provide restrictions to different aspects of a service.
No. Red Hat Enterprise Linux 6 uses a different key to sign its packages.


7. What does the following firewall rule accomplish: iptables -I INPUT 5 -p tcp -m tcp --dport 80 -j ACCEPT?
The firewall rule is inserted into the fifth line of the iptables rules and opens up TCP port 80 (for the HTTP service) on the firewall to allow incoming connections.
LUKS encryption
The tcpdump command is used to monitor network connections on different interfaces.
SSH is used for secure remote management of Linux systems.


8. What is PAM used for?
This command sets the eth1 interface to have a static IP address of 172.168.1.100 with a netmask of 255.255.255.0.
PAM is used as a modular way to leverage security. In this chapter - the main function we discussed was for managing password policies and complexity.
generates errors under Red Hat Enterprise Linux 6
browseable option


9. What file is used to maintain custom parameters for the kernel during system boot?
The /etc/sysctl.conf file maintains a list of custom kernel parameters that should be applied during system boot.
atq
You can use the remove or erase options with yum to remove a package.
chkconfig sshd off


10. The ____________ is available for each share.
browseable option
The /etc/exports file needs to contain any directory that you want to export - including which options you'd like to use as well.
have the same effect
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.


11. What port does NFS use by default?
The xinetd daemon is used to control and/or run multiple system services. One example is a TFTP server.
getsebool
schedule one-time-only jobs
The NFS service uses TCP port 2049 by default.


12. What two ports should be opened on the firewall for the FTP server to function properly?
setsebool -P nfs_export_all_rw=1
You must open TCP ports 20 and 21 for the FTP server to function properly.
The dig - host - and ping commands can be used to test DNS server functionality.
entering rescue mode and repairing the problem.


13. How can you list all services on the system to tell whether they will boot during startup?
chkconfig—list
Physical volumes - volume groups - and logical volumes.
service dhcpd configtest
This command reboots virtual guest Client04.


14. What happens to jobs that are scheduled to run while the system is off?
semanage boolean -l
When the system starts up again - the cron service will run any jobs that were missed while the system was off. On Red Hat Enterprise Linux 5 - the anacron service handles this functionality.
Sendmail
The /proc directory. The /proc/sys directory is the place where you actually tune kernel parameters.


15. What three commands can you use to help verify that the DNS server is functioning properly?
The print option is used with both the fdisk and parted commands to display the current partition tables.
The dig - host - and ping commands can be used to test DNS server functionality.
serve both files and printers to users
Public/private key authentication provides an additional layer of security because you need the correct key instead of just knowing someone's password. Passwords combined with public/private keys take the security one additional step.


16. What directory is used to represent the virtual file system created by the kernel?
Use the ps command to view processes and their CPU usage.
SELinux Booleans provide restrictions to different aspects of a service.
The /proc directory. The /proc/sys directory is the place where you actually tune kernel parameters.
serve both files and printers to users


17. What command can you use to test the config files before starting the DNS service?
This chapter described tdbsm and smbpasswd back-end authentication.
mkfs.ext4
serve both files and printers to users
service named configtest


18. SSH does...
The five directories are BUILD - RPMS - SOURCES - SPECS - and SRPMS.
The grep -v ^# /etc/vsftpd/vsftpd.conf command shows you all the options currently being used with the FTP server.
support TCP Wrappers
The file system where quotas will be implemented must be mounted with the usrquota and grpquota options before quotas will work properly.


19. What is the name of the package used to install an FTP?
DNS uses port 53.
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.
The vsftpd package is used to install an FTP server.
When you exit the parted utility - all your changes are automatically written to disk. With the fdisk command - you need to manually write your changes to disk for them to take effect.


20. What port must be opened on the firewall for DNS?
DNS uses port 53.
This chapter described tdbsm and smbpasswd back-end authentication.
Use the top command to view CPU and memory usage.
user's home directory in the /etc/skel directory


21. What port does the DHCP server listen on by default?
The /var/lib/nfs/etab file is used to keep track of currently exported resources.
Yum repository config files (.repo files) are located in the /etc/yum.repos.d directory. You can also make direct entries into the main /etc/yum.conf file.
The file system where ACLs will be implemented must be mounted with the acl option before ACLs will work properly.
The DHCP server listens on port 67 by default.


22. What happens if a host changes its IP address and the keys don't match?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


23. What is the default port that Squid runs on?
The superblock is a structure that contains metadata of the file system. If this becomes corrupt - you are in trouble.
The lftp command can be used on a client to test FTP server connections.
Sendmail
By default - Squid runs on port 3128.


24. What option is used to allow anonymous uploads to the FTP server?
chkconfig—list
Use the resize2fs command to grow a file system.
The anonymous_enable=YES option in the main config file allows anonymous uploads.
The three utilities are: route - ping - and nslookup.


25. What are the three different types of RAID described in this chapter?
The VNC package for Red Hat Enterprise Linux 6 is tiger-vnc.
Version 2 is the latest and most secure version of SSH.
The virsh command is used to manage virtual guests.
RAID 0 (Striping) - RAID 1 (Mirror) - and RAID 5 (Striping with parity).


26. What command can you use to create a password-protected page?
user's home directory in the /etc/skel directory
The htpasswd command can be used to password-protect a web page.
SELinux Booleans provide restrictions to different aspects of a service.
chkconfig xinetd --list


27. The ______________ for Red Hat Enterprise Linux 5 or 6 includes the use of LVM.
Enforcing during installation
generates errors under Red Hat Enterprise Linux 6
The service command is used to start - stop - and manage system services.
have the same effect


28. What command and option do you use to view the description of Boolean values?
Upstart. The Upstart utility is now used in the boot process for Red Hat Enterprise Linux 6.
When you exit the parted utility - all your changes are automatically written to disk. With the fdisk command - you need to manually write your changes to disk for them to take effect.
semanage boolean -l
The gateway is incorrectly set - and the subnet of the host you are trying to reach is inaccessible.


29. What command can you use to create a new SSL certificate?
The anonymous_enable=YES option in the main config file allows anonymous uploads.
chcon
This is actually a trick question because the answer could go either way. In this chapter - we discussed only software RAID setups - in which case the answer is no. If - however - you were using a hardware RAID 5 - the answer would be yes.
Use the /usr/share/doc/dovecot-1.0.7/examples/mkcert.sh command after editing the /etc/pki/dovecot/dovecot-openssl.cnf file.


30. What is the main config file for the DHCP service?
When the system enters into runlevel 2 - the rsyslog service has a priority of 12 when starting. Anything with a lower number (or the same number and lower first letter) starts before the rsyslog service.
via the command line
The /etc/dhcp/dhcpd.conf file is the main config file for the DHCP service.
A soft limit acts like an alarm - signaling you when you are reaching your limit. If you don't specify a grace period - the soft limit is the max. A hard limit is required only when a grace period exists. It is the max limit you can hit before your g


31. What is the rndc utility used for?
defining a %pre section although it is rarely used
If you shrink a volume group or logical volume - there is a chance you could lose data depending on how much you shrink the volume.
The rndc utility provides a method for managing the DNS server remotely and securely.
The tcpdump command is used to monitor network connections on different interfaces.


32. What three protocols can you use to perform network installations?
The format of the /etc/shadow file is <username>:<encrypted password>:<last passwd change>:<min>:<max>:<warn>:<inactive>:<expires>:<not used>.
By entering the GRUB boot menu - you can choose the a option to append something to the kernel command-line options.
The smbstatus command shows you currently mounted Samba resources.
Network installations can be performed using the HTTP - FTP - and NFS protocols.


33. The virt-install package allows you to manage virtual machines _____________. The virt-manager package allows you to manage virtual machines via a GUI interface.
By entering the GRUB boot menu - you can choose the a option to append something to the kernel command-line options.
mkfs.ext4
The rndc utility provides a method for managing the DNS server remotely and securely.
via the command line


34. For Red Hat Enterprise Linux 6 - SELinux comes set up in enforcing mode. When installing Red Hat Enterprise Linux 5 - you have the option to...

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


35. What command can you use to view NFS statistics?
The partprobe command forces the kernel to reread the partition table. You should always call it after making any changes to your system partitions.
When the system starts up again - the cron service will run any jobs that were missed while the system was off. On Red Hat Enterprise Linux 5 - the anacron service handles this functionality.
By combining a TFTP server - PXE boot - and DHCP server - you can fully automate the kickstart installation process.
The nfsstat command can be used to view NFS statistics.


36. To export directories as resources - what file needs to be edited?

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


37. What does it mean if you ping a host and you receive the response Destination Unreachable?
Uncomment the following line in the /etc/rsyslog.conf file: #$ModLoad imudp.so #$UDPServerRun 514
cat /proc/mdstat
After you connect to a hypervisor - you can use virsh list —all to list all virtual guests.
The gateway is incorrectly set - and the subnet of the host you are trying to reach is inaccessible.


38. Most boot issues can be resolved by...
After the ntpd service is stopped - you can use the ntpdate <server> command to update/sync the time.
entering rescue mode and repairing the problem.
The print option is used with both the fdisk and parted commands to display the current partition tables.
Use the setgid flag to create the appropriate permissions (chmod 2770).


39. What option can you change in the rsyslog config file to accept remote logs (acting as a centralized logging server)?
Uncomment the following line in the /etc/rsyslog.conf file: #$ModLoad imudp.so #$UDPServerRun 514
You add your action to the end of the /home/user01/.bashrc file.
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.
The mount command lists all currently mounted file systems.


40. Through its main config file - SSH can be configured to...

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


41. What happens if you call the command from question 3 with the -c option after it has already been run?
The file that stores usernames and their encrypted passwords is erased and replaced with a new file.
getfacl
The two main config files are master.cf and main.cf.
By default - the rndc utility listens on port 953.


42. Can you name the two commands that can be used to view the free space on the system?
Sendmail
The lftp command can be used on a client to test FTP server connections.
browseable option
The du and df commands are used to view available space on the system.


43. What command-line program can you use to check your mail?
Typing the mail or mutt command allows you to read mail from the command line.
Stage 1: During this stage - the primary bootloader is read into memory by the BIOS from the MBR. Stage 1.5: During this stage - the bootloader is read into memory by the stage 1 bootloader (only if necessary). Stage 2: During this stage - the bootlo
rpmbuild
ifconfig


44. Samba servers can...
serve both files and printers to users
You can use the remove or erase options with yum to remove a package.
Typing the mail or mutt command allows you to read mail from the command line.
Network installations can be performed using the HTTP - FTP - and NFS protocols.


45. Is it possible to share files among groups - What permissions would you set on the directory to accomplish file sharing if possible?
Use the setgid flag to create the appropriate permissions (chmod 2770).
chkconfig xinetd --list
A web proxy can provide multiple benefits - including security - web page caching for faster load times - and load balancing.
The file that stores usernames and their encrypted passwords is erased and replaced with a new file.


46. What are the two types of back-end authentication mechanisms discussed in this chapter?
This chapter described tdbsm and smbpasswd back-end authentication.
service sshd statuts
The print option is used with both the fdisk and parted commands to display the current partition tables.
Use the chkconfig command to enable or disable services during the boot process. The on option enables the service and off disables it.


47. Editing the /etc/xinetd.d/tftp file and enabling the service are the same as running the chkconfig tftp on command. Both of these actions...
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.
For Apache to run a secure site - the mod_ssl package is required to be installed.
Yum repository config files (.repo files) are located in the /etc/yum.repos.d directory. You can also make direct entries into the main /etc/yum.conf file.
have the same effect


48. To grow a file system
semanage boolean -l
The /var/log/audit/audit.log file contains all policy violations.
The /var/lib/nfs/etab file is used to keep track of currently exported resources.
Use the resize2fs command to grow a file system.


49. What command can you use to get information about logical volumes?
RAID 0 (Striping) - RAID 1 (Mirror) - and RAID 5 (Striping with parity).
The print option is used with both the fdisk and parted commands to display the current partition tables.
If you are a hosting company or want to run multiple websites/applications from a single IP address - you can use virtual hosts to accomplish this.
lvdisplay


50. Where are Yum repository config files located?
The du and df commands are used to view available space on the system.
Yum repository config files (.repo files) are located in the /etc/yum.repos.d directory. You can also make direct entries into the main /etc/yum.conf file.
Apache uses port 80 for HTTP and port 443 for HTTPS.
Network address translation (NAT) maintains a table that allows the use of multiple internal IP addresses to a multiple public IP address (called address translation). It can also be used for one-to-one or one-to-many relationships as well.