EX200 Deploy, configure, and maintain systems Practice Test 2 — 15 Questions

Question 1

A Red Hat Enterprise Linux 9 server has a new 20 GB block device /dev/vdb. The administrator must configure a persistent swap space on this device that activates automatically at boot. Which sequence of commands will accomplish this?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

mkswap /dev/vdb ; swapon /dev/vdb ; echo '/dev/vdb swap swap defaults 0 0' >> /etc/fstab. Persistent swap on a block device requires initializing the device with mkswap, activating it with swapon, and adding an fstab entry that specifies the device, swap type, and swap options. This makes systemd generate a swap unit at boot. The other sequences either use non-existent tools, omit required fstab fields, or attempt to mount swap as a filesystem, none of which yield working persistent swap.

Answer

mkswap /dev/vdb ; swapon /dev/vdb ; systemctl enable swap.target

Answer

mkswap /dev/vdb ; mount -t swap /dev/vdb /swap ; echo '/dev/vdb /swap swap defaults 0 0' >> /etc/fstab

Answer

mkfs.swap /dev/vdb ; swapon /dev/vdb ; echo '/dev/vdb swap defaults 0 0' >> /etc/fstab

Question 2

A system administrator needs to ensure that a specific kernel module 'usb_storage' is not loaded automatically during boot on a RHEL 9 system. Which configuration file should be modified to blacklist this module?

Accepted Answer

Add 'blacklist usb_storage' to /etc/modprobe.d/blacklist.conf. On RHEL 9, the recommended way to prevent a kernel module from loading automatically is to add a 'blacklist' directive in a file under /etc/modprobe.d/. The file /etc/modprobe.d/blacklist.conf is a conventional location for such blacklist entries. When modprobe processes this file, it will ignore the specified module during boot and when loading modules manually, effectively preventing usb_storage from being loaded.

Answer

Add 'blacklist usb_storage' to /etc/modules-load.d/usb_storage.conf

Answer

Add 'install usb_storage /bin/false' to /etc/sysconfig/modules/

Answer

Add 'blacklist usb_storage' to /etc/init.d/rc.local

Question 3

A Red Hat Enterprise Linux 9 system has a logical volume 'lv_data' in the volume group 'vg_data' that needs to be resized from 10G to 15G. The underlying physical volumes have enough free space. Which sequence of commands correctly resizes the logical volume and the ext4 filesystem?

Accepted Answer

lvextend -L 15G /dev/vg_data/lv_data; resize2fs /dev/vg_data/lv_data. To resize an ext4 filesystem on a logical volume, you must first extend the logical volume with `lvextend -L 15G /dev/vg_data/lv_data` to allocate the additional 5G from the volume group, then use `resize2fs /dev/vg_data/lv_data` to grow the filesystem to fill the enlarged block device. This order ensures the underlying block device has sufficient capacity before the filesystem resize operation.

Answer

resize2fs /dev/vg_data/lv_data; lvextend -L 15G /dev/vg_data/lv_data

Answer

lvextend -L 15G /dev/vg_data/lv_data; xfs_growfs /dev/vg_data/lv_data

Answer

lvreduce -L 15G /dev/vg_data/lv_data; resize2fs /dev/vg_data/lv_data

Question 4

A technician needs to configure a static IPv4 address on a RHEL 9 network interface 'enp1s0' using NetworkManager. Which command should be used to set the IP address?

Accepted Answer

nmcli connection modify enp1s0 ipv4.addresses 192.168.1.100/24. `nmcli connection modify enp1s0 ipv4.addresses 192.168.1.100/24` is the proper NetworkManager command to set a static IPv4 address on a RHEL 9 interface. This command modifies the connection profile for 'enp1s0' by setting the `ipv4.addresses` property to the specified address and prefix length, which is the standard method for persistent static IP configuration via NetworkManager.

Answer

nmtui edit enp1s0 --ipv4 192.168.1.100/24

Answer

ip addr add 192.168.1.100/24 dev enp1s0

Answer

ifconfig enp1s0 192.168.1.100 netmask 255.255.255.0

Question 5

A system administrator notices that a RHEL 9 server's /var/log/messages is filling up the /var partition. The administrator wants to ensure log rotation runs daily and keeps 4 weeks of logs. Which configuration file should be modified?

Accepted Answer

/etc/logrotate.d/syslog. /etc/logrotate.d/syslog is the configuration file that controls log rotation for system log files such as /var/log/messages. By modifying this file, the administrator can set the rotation frequency to daily and specify the number of weeks (e.g., rotate 28 for 4 weeks) to retain logs, directly addressing the requirement.

Answer

/etc/systemd/journald.conf

Answer

/etc/rsyslog.conf

Answer

/etc/cron.daily/logrotate

Question 6

A user reports that they cannot log in to a RHEL 9 system. The administrator checks /etc/passwd and finds the user's shell is set to /sbin/nologin. What is the most likely cause?

Accepted Answer

The user account is intentionally disabled for login.. The /sbin/nologin shell is a valid shell entry that, when set as a user's login shell, prevents interactive login by immediately exiting with a message that the account is not available. This is a standard method for disabling login for system accounts (e.g., daemon, bin) or intentionally disabling a user account while keeping the account and its files intact. Option D correctly identifies that the user account is intentionally disabled for login.

Answer

The SSH service is not running.

Answer

The user account has been locked by pam_tally2.

Answer

The user's password has expired.

Question 7

An administrator wants to install a package 'httpd' but only if it is available in the configured repositories. Which command should be used to check if the package exists?

Accepted Answer

dnf list available httpd. `dnf list available httpd` queries the configured DNF repositories and displays the package only if it exists in them. This command checks availability without installing, which matches the requirement to verify the package is present in the repositories before proceeding.

Answer

rpm -q httpd

Answer

dnf search httpd

Answer

dnf install httpd

Question 8

A RHEL 9 system has a second disk /dev/sdb that needs to be partitioned with a single partition using all space, formatted with XFS, and mounted persistently at /data. The administrator uses fdisk to create the partition /dev/sdb1. Which filesystem creation command should be used?

Accepted Answer

mkfs.xfs /dev/sdb1. The correct command is mkfs.xfs /dev/sdb1 because the question specifies that the partition must be formatted with XFS. The mkfs.xfs command is the dedicated tool for creating an XFS filesystem on a block device. It directly invokes the mkfs.xfs utility, which writes the XFS superblock and metadata structures to the partition.

Answer

mke2fs /dev/sdb1

Answer

mkfs -t ext4 /dev/sdb1

Answer

mkfs.ext4 /dev/sdb1

Question 9

Which THREE are valid methods to configure network bonding in RHEL 9? (Choose exactly three.)

Accepted Answer

Using a configuration file in /etc/NetworkManager/system-connections/.. In RHEL 9, NetworkManager stores connection profiles in `/etc/NetworkManager/system-connections/`. You can manually create a bond configuration file in this directory with the proper key-value pairs (e.g., `type=bond`, `bond.options=mode=1,miimon=100`), and NetworkManager will read it on restart or reload. This is a valid method for configuring network bonding.

Answer

Using the teamd service.

Answer

Editing /etc/sysconfig/network-scripts/ifcfg-bond0 directly.

Question 10

Which TWO are correct ways to check the SELinux context of a file named 'test.txt'? (Choose exactly two.)

Accepted Answer

ls -Z test.txt. `ls -Z` displays the SELinux security context of files, including user, role, type, and sensitivity level. The `-Z` option is specifically designed to show SELinux context information for files and processes.

Answer

ls -l test.txt

Answer

sestatus

Answer

getenforce

Question 11

A company has a RHEL 9 server that hosts a critical application. The server has two network interfaces: enp1s0 (192.168.1.100/24) and enp2s0 (10.0.0.100/24). The default gateway is 192.168.1.1. The application listens on a TCP port 8080 and should be accessible from both networks. Recently, the administrator noticed that clients on the 10.0.0.0/24 network can ping the server's 10.0.0.100 address but cannot connect to port 8080. Clients on 192.168.1.0/24 can connect fine. The firewall is configured with the default zone (public) and the service 'http' is allowed, but port 8080 is not specifically allowed. The administrator checks 'firewall-cmd --list-all' and sees that only services 'ssh' and 'http' are listed. The application is running and listening on 0.0.0.0:8080. What is the most likely cause and the correct course of action?

Accepted Answer

Add a firewall rule to open TCP port 8080 in the public zone using 'firewall-cmd --add-port=8080/tcp --permanent' and reload.. The firewall is blocking incoming connections to port 8080 because only services 'ssh' (port 22) and 'http' (port 80) are allowed in the public zone. Since the application listens on 0.0.0.0:8080, it is reachable from both networks at the IP level, but the firewall drops packets destined for port 8080. Adding a permanent rule to open TCP port 8080 and reloading the firewall configuration resolves the issue.

Answer

Disable SELinux to allow the application to accept connections.

Answer

Change the application to listen only on the 10.0.0.100 interface.

Answer

Add a static route for the 10.0.0.0/24 network via the 10.0.0.1 gateway.

Question 12

A system administrator needs to ensure that a web server running Apache httpd starts automatically after a system reboot. Which command should the administrator use to enable the httpd service?

Accepted Answer

systemctl enable httpd. `systemctl enable httpd` creates the necessary symlinks in the systemd unit configuration directories (e.g., `/etc/systemd/system/multi-user.target.wants/`) to ensure the httpd service starts automatically at boot. This is the standard method for enabling a service in a Red Hat Enterprise Linux 8/9 environment using systemd.

Answer

systemctl daemon-reload

Answer

systemctl start httpd

Answer

systemctl reenable httpd

Question 13

Which TWO commands can be used to display the current SELinux mode?

Accepted Answer

getenforce. The `getenforce` command (option C) displays the current SELinux mode as either Enforcing, Permissive, or Disabled. The `sestatus` command (option D) provides a detailed status report including the current mode, the loaded policy, and the mode from the configuration file. Both are standard tools for querying the SELinux operational state.

Answer

setenforce

Answer

ausearch

Answer

semanage

Question 14

Order the steps to configure SELinux to allow Apache to read files in a custom directory /webcontent.

Accepted Answer

Create /webcontent directory → Set SELinux context using semanage fcontext → Apply context with restorecon → Verify with ls -Z. SELinux configuration involves setting proper file context for Apache to access custom directories.

Answer

Create /webcontent directory → Apply context with restorecon → Set SELinux context using semanage fcontext → Verify with ls -Z

Answer

Set SELinux context using semanage fcontext → Apply context with restorecon → Create /webcontent directory → Verify with ls -Z

Answer

Create /webcontent directory → Set SELinux context using semanage fcontext → Verify with ls -Z → Apply context with restorecon

Question 15

An administrator needs to configure a service to start automatically at boot and also start it immediately without rebooting. Which single command accomplishes both tasks?

Accepted Answer

systemctl enable --now httpd.service. `systemctl enable --now httpd.service` combines the `enable` action (creating symlinks for automatic start at boot) with the `start` action (immediately launching the service) in a single command. This is the precise method in systemd to achieve both goals without rebooting.

Answer

systemctl start httpd.service

Answer

systemctl enable httpd.service

Answer

systemctl reenable httpd.service