EX200 Practice Test 1 — 10 Questions

Question 1

Which TWO methods are considered best practices for securing SSH access to a server? (Select exactly two.)

Accepted Answer

Disable root login by setting PermitRootLogin no.. Disabling root login by setting `PermitRootLogin no` in `/etc/ssh/sshd_config` prevents direct SSH access as the root user, forcing administrators to log in as a regular user and then use `sudo` or `su` to escalate privileges. This reduces the attack surface by eliminating a high-value target for brute-force attacks and ensures all actions are auditable via the regular user's session.

Answer

Use only password authentication for simplicity.

Answer

Change the default SSH port to a high-numbered port.

Answer

Allow SSH access for all users in the system.

Question 2

An administrator wants to run a container with --user 1001:1001 to avoid running as root. After starting, the container cannot write to a bind-mounted directory owned by root. What is the best practice to allow write access?

Accepted Answer

Use 'podman unshare chown 1001:1001 /host/dir' to change host directory ownership.. `podman unshare chown 1001:1001 /host/dir` changes the ownership of the host directory to UID/GID 1001, matching the container's user. This is the best practice in rootless Podman environments, as it avoids running the container with elevated privileges while ensuring the container user can write to the bind-mounted directory.

Answer

Run the container with --privileged.

Answer

Add the user 1001 on the host to the root group.

Answer

Set setuid bit on the host directory.

Question 3

An administrator needs to combine two physical network interfaces into a single logical interface for redundancy. Which RHEL tool is recommended to configure this in RHEL 8/9?

Accepted Answer

nmcli. In RHEL 8/9, NetworkManager is the default networking service, and `nmcli` is its command-line tool. For bonding (combining two physical interfaces into a single logical interface for redundancy or increased throughput), the recommended approach is to use `nmcli` to create a bond connection, which uses the Linux kernel bonding driver. The `teamd` service was deprecated in RHEL 8 and removed in RHEL 9, making `nmcli` the correct and supported method.

Answer

teamd

Answer

ip link

Answer

brctl

Question 4

A system administrator needs to restore the default SELinux security context on all files under /var/www/html after a misconfiguration. Which command should be used?

Accepted Answer

restorecon -R /var/www/html. The `restorecon -R /var/www/html` command restores the default SELinux security contexts on all files under /var/www/html by reading the file contexts defined in the SELinux policy (typically from /etc/selinux/targeted/contexts/files/file_contexts). The `-R` flag ensures recursive operation, making it the correct tool to fix misconfigured contexts without manually specifying a type.

Answer

setfiles -R /var/www/html

Answer

fixfiles -R /var/www/html

Answer

chcon -R -t httpd_sys_content_t /var/www/html

Question 5

A system fails to boot with an error about a missing ext4 filesystem. From the rescue environment, which command should be run to attempt automatic repair of all filesystems?

Accepted Answer

fsck -A -y. `fsck -A -y` automatically checks all filesystems listed in `/etc/fstab` (the `-A` flag) and answers 'yes' to any repair prompts (the `-y` flag), making it the most appropriate command for automatic repair of all filesystems from a rescue environment. The error indicates a missing ext4 filesystem, and this command will attempt to repair any ext4 (or other) filesystem issues without manual intervention.

Answer

fsck /dev/sda1

Answer

debugfs -R 'repair'

Answer

e2fsck -p

Question 6

An administrator needs to measure the execution time of the command 'backup.sh'. Which command prefix should be used?

Accepted Answer

time. The 'time' command is the correct prefix to measure the execution time of a command in Linux. When placed before 'backup.sh', it runs the script and then outputs the real, user, and system time consumed, providing the precise measurement the administrator needs.

Answer

date

Answer

watch

Answer

timeout

Question 7

A system administrator needs to verify that the filesystem on /dev/sdb1 is ext4 before adding it to /etc/fstab. Which command provides this information?

Accepted Answer

lsblk -f /dev/sdb1. The `lsblk -f /dev/sdb1` command displays the filesystem type (FSTYPE) for the specified block device, such as ext4. This is the most direct and reliable way to verify the filesystem on a specific partition before adding it to /etc/fstab.

Answer

mount -a

Answer

df -Th /dev/sdb1

Answer

fdisk -l /dev/sdb1

Question 8

A storage administrator is asked to increase the size of an ext4 filesystem mounted at /data. The underlying logical volume /dev/mapper/vg01-lv01 is currently 10GB and the volume group has 5GB of free extents. After extending the logical volume by 2GB using lvextend -L +2G /dev/mapper/vg01-lv01, what command must be run to resize the filesystem?

Accepted Answer

resize2fs /dev/mapper/vg01-lv01. After extending the logical volume with `lvextend`, the filesystem does not automatically recognize the new space. For ext4 filesystems, the `resize2fs` command must be run to resize the filesystem to use the additional logical volume capacity. This command can be executed online (while the filesystem is mounted) and will expand the filesystem to fill the available space in the logical volume.

Answer

lvextend -r -L +2G /dev/mapper/vg01-lv01

Answer

xfs_growfs /data

Answer

fsck -f /dev/mapper/vg01-lv01

Question 9

Which THREE statements about container storage in podman are correct? (Choose THREE.)

Accepted Answer

The --storage-opt flag can be used to set options for the container's writable layer.. The `--storage-opt` flag in Podman allows you to pass options directly to the container's storage driver, such as setting the size of the container's writable layer (e.g., `--storage-opt size=10G`). This is a feature of the container storage stack (containers/storage) that Podman uses, enabling fine-grained control over the writable layer's behavior without affecting the image layers.

Answer

Podman volumes can only be managed by podman volume commands, not manually.

Answer

Rootless containers cannot use the overlay filesystem driver.

Question 10

The /data filesystem is at 99% capacity. The LVM setup shows that the volume group has 50GB free space, but the logical volume is only 100GB. What is the correct sequence of commands to increase the filesystem to use all available space in the volume group?

Accepted Answer

lvextend -L +50G /dev/mapper/vg01-data && xfs_growfs /data. The volume group has 50GB free space, so you need to extend the logical volume by +50GB (not to 50GB) using `lvextend -L +50G`, and then grow the XFS filesystem with `xfs_growfs /data` (the mount point, not the block device). The `+` sign indicates an addition to the current size, while omitting it would set an absolute size.

Answer

lvextend -L 50G /dev/mapper/vg01-data && xfs_growfs /dev/mapper/vg01-data

Answer

lvextend -L +50G /dev/mapper/vg01-data && resize2fs /dev/mapper/vg01-data

Answer

xfs_growfs /dev/mapper/vg01-data && lvextend -L +50G /dev/mapper/vg01-data