EX200 Practice Test 7 — 10 Questions

Question 1

Refer to the exhibit. An administrator runs lsblk and sees the above output. The administrator wants to mount /dev/sdb1 at /mnt/data. What should be done first?

Accepted Answer

Create the directory /mnt/data and then run mount. Before mounting a filesystem, the mount point directory must exist. Option A correctly instructs to create /mnt/data with mkdir -p /mnt/data and then run mount /dev/sdb1 /mnt/data. Without the directory, the mount command will fail with a 'mount point does not exist' error.

Answer

Run mount /dev/sdb1 /mnt/data

Answer

Run partprobe to detect the partition

Answer

Run mkfs.xfs /dev/sdb1

Answer

Edit /etc/fstab and add an entry

Question 2

Which TWO commands can be used to display the contents of a compressed log file without decompressing it first?

Accepted Answer

bzless /var/log/messages.bz2. `bzless` is a utility specifically designed to view bzip2-compressed files without decompressing them first. It decompresses the file on the fly and pipes the output to a pager, allowing you to scroll through the content. Similarly, option B is correct because `zcat` reads a gzip-compressed file and writes the decompressed data to standard output, effectively displaying the contents without permanently decompressing the file.

Answer

grep 'error' /var/log/messages.gz

Answer

vim /var/log/messages.gz

Answer

less /var/log/messages.gz

Question 3

Which command creates a 2GB logical volume named 'lvdata' in the volume group 'vgdata'?

Accepted Answer

lvcreate -L 2G -n lvdata vgdata. The `lvcreate` command with `-L 2G` specifies the size in gigabytes, `-n lvdata` sets the logical volume name, and `vgdata` is the volume group in which the logical volume is created. This syntax follows the standard LVM2 command structure for creating a logical volume of a specified size within an existing volume group.

Answer

lvcreate -n vgdata -L 2G lvdata

Answer

lvcreate -n lvdata -s 2G vgdata

Answer

lvcreate -l 2G -n lvdata vgdata

Question 4

Which file contains the list of filesystems to be mounted at system startup?

Accepted Answer

/etc/fstab. The /etc/fstab file is the system configuration file that defines static filesystem information, including devices, mount points, filesystem types, mount options, dump frequency, and fsck pass order. During system startup, the mount -a command (typically run by systemd or init scripts) reads /etc/fstab to mount all filesystems listed there, making it the definitive source for automatic mounting at boot.

Answer

/etc/rc.local

Answer

/etc/filesystems

Answer

/etc/mtab

Question 5

A user needs to view the last 15 lines of a log file that is constantly being updated. Which command should they use?

Accepted Answer

tail -n 15 /var/log/messages. The `tail -n 15 /var/log/messages` command displays the last 15 lines of the specified log file without following it. This meets the requirement to view the last 15 lines of a file that is constantly being updated, as it provides a static snapshot of the most recent entries.

Answer

tail -f /var/log/messages

Answer

cat /var/log/messages

Answer

head -15 /var/log/messages

Question 6

Refer to the exhibit. Why does the 'bin' user have /sbin/nologin as its shell?

Accepted Answer

The user is a system account that should not log in interactively.. The /sbin/nologin shell is explicitly assigned to system accounts like 'bin' to prevent interactive logins. This shell prints a message and exits, ensuring that the account can only be used for non-interactive system processes, such as owning files or running daemons, without providing a login session.

Answer

The user's home directory is missing.

Answer

The user is locked.

Answer

The shell is not installed.

Question 7

A system administrator needs to configure a firewall using firewalld to allow incoming HTTPS traffic and deny incoming SSH traffic from a specific source IP 192.168.1.100. Which two commands should be run? (Choose two.)

Accepted Answer

firewall-cmd --add-service=https --permanent. `firewall-cmd --add-service=https --permanent` adds the HTTPS service (TCP port 443) to the permanent firewall configuration, which is required to allow incoming HTTPS traffic persistently across reboots. The `--permanent` flag ensures the rule survives a reload or restart, and the `--add-service` option uses predefined service definitions from firewalld to simplify rule creation.

Answer

firewall-cmd --runtime-to-permanent

Answer

firewall-cmd --add-rich-rule='rule family=ipv4 source address=192.168.1.100 service name=ssh reject' --permanent

Answer

firewall-cmd --add-service=http --permanent

Question 8

What does the 's' in the owner execute position indicate?

Accepted Answer

SetUID. In Linux file permissions, the 's' in the owner execute position (e.g., `-rwsr-xr-x`) indicates the SetUID (Set User ID) special permission. When set on an executable file, it allows the process to run with the effective user ID of the file's owner (typically root), rather than the user who launched it. This is why option E is correct.

Answer

Mandatory access control

Answer

SetGID

Answer

Sticky bit

Answer

No special permission

Question 9

Which three of the following actions are required when adding a new swap device to the system? (Choose three.)

Accepted Answer

Use mkswap to set up the swap signature. `mkswap` writes a swap signature (UUID and label) to the device, which is required before the kernel can use it as swap space. Without this signature, the device is not recognized as a swap area.

Answer

Mount the device to a swap directory

Answer

Create a filesystem using mkfs

Question 10

Which TWO statements are true regarding container images and containers in Podman?

Accepted Answer

A container is a running or stopped instance of an image with a writable layer.. A container in Podman is an instantiation of an image that adds a writable layer on top of the image's read-only layers. This writable layer persists changes made during the container's runtime, even after the container is stopped, unless explicitly removed.

Answer

A container can only be created from an image that is stored locally.

Answer

When a container is stopped, its writable layer is automatically removed.

Answer

A container image must be built using a Dockerfile.